Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/03927569-0b5c-4807-96ea-c0c7c45fd675.roa
File: 03927569-0b5c-4807-96ea-c0c7c45fd675.roa (raw, json)
Hash identifier: E1vGIzi1gMLXWzsqphkTbozb9nedWTJ9pb0OM7apA7s=
Subject key identifier: 13:64:D6:4F:20:C2:D9:DD:D6:50:8D:4E:2A:17:6D:1B:6B:35:09:C3
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2E5082A83B94F6C6D38480EC5218C69B93459380
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/03927569-0b5c-4807-96ea-c0c7c45fd675.roa
Signing time: Mon 03 Aug 2026 00:40:07 +0000
ROA not before: Mon 03 Aug 2026 00:40:07 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc2::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:50:82:a8:3b:94:f6:c6:d3:84:80:ec:52:18:c6:9b:93:45:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 3 00:40:07 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=c2bf1bc554ac6b61b8714989334c786ee9a36a029e7fac3a820277ea850dbff9, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:3a:58:53:8b:02:ca:a4:6f:c0:be:5e:c8:
43:1e:8a:fb:c6:e9:1b:56:24:b1:09:c7:44:05:98:
03:4e:dd:81:5d:26:9c:72:59:5b:85:72:51:07:2c:
41:17:cc:e3:ff:e2:d2:2c:38:0c:d7:72:7a:b1:35:
1a:84:42:59:19:a5:53:d2:52:86:13:7c:54:c5:e3:
2c:0a:73:61:db:f6:72:98:92:b9:4d:40:78:fe:8b:
89:6a:db:8e:1a:b1:67:95:88:70:b4:fb:ed:d1:38:
ba:45:3d:cb:9b:8c:c3:b8:19:0a:92:3c:4b:1b:46:
b1:eb:b3:03:5d:5c:f1:2d:9e:51:c1:46:83:97:dc:
78:35:8d:2e:5d:77:a8:17:8e:4e:61:70:59:66:5b:
9d:9b:b7:2a:88:9e:ac:20:55:c6:d7:85:69:ab:5a:
6d:ad:f0:4e:9f:65:cb:24:b3:5e:e8:02:be:e4:09:
c0:e4:56:ed:5b:6b:9f:db:46:98:87:84:a3:c9:65:
c8:8d:3a:c8:05:a2:19:a8:c7:94:d5:1a:51:3f:d4:
32:0c:8b:ee:c7:09:0b:13:f0:eb:54:9e:a3:c1:f7:
79:55:5d:31:84:16:a3:bb:78:d5:02:93:67:75:4e:
59:5d:e1:80:85:24:28:08:fc:3e:cb:dd:6c:6c:cc:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:64:D6:4F:20:C2:D9:DD:D6:50:8D:4E:2A:17:6D:1B:6B:35:09:C3
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/03927569-0b5c-4807-96ea-c0c7c45fd675.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc2::/32
Signature Algorithm: sha256WithRSAEncryption
9f:04:04:62:5e:88:52:bb:6a:13:ca:4a:42:3e:67:fe:2a:fb:
1a:04:2f:d8:05:0e:cf:4d:89:e7:18:c0:96:43:61:b4:88:3f:
46:bc:57:ee:e8:44:53:49:9a:41:41:12:f3:ad:21:40:f6:7a:
6c:3c:67:de:63:94:72:bd:9a:13:3d:4a:25:ed:ab:fb:d7:57:
95:9b:78:a9:5f:61:10:a8:f7:52:c0:88:88:a9:5e:12:fa:c2:
13:b9:4c:40:c4:67:11:8c:e6:04:b9:cc:39:fc:3e:5d:5a:8e:
64:7f:21:1a:06:d0:af:59:dc:5f:cb:15:47:ac:89:1c:c2:1e:
12:f7:12:73:1d:27:29:7a:1b:1d:ed:e7:21:fb:65:af:80:5b:
51:52:b6:41:63:0e:94:d7:a2:c2:01:b5:09:e6:9d:49:24:b0:
e7:0d:3e:68:de:41:03:20:2c:ed:9e:5c:3a:0e:a9:06:46:4d:
76:97:b8:bb:92:96:03:88:af:b8:ee:7c:ab:f9:2e:3b:68:e7:
e8:18:4d:bb:28:d1:61:5c:b4:fe:4f:94:e7:36:7a:7c:88:f4:
80:39:7b:e7:5d:97:a8:0b:51:01:3f:a2:b2:b2:43:f9:e3:1d:
3e:6e:c5:3e:e4:5a:00:57:d9:ca:bf:67:18:c8:75:3d:05:2f:
98:13:cf:9e
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIULlCCqDuU9sbThIDsUhjGm5NFk4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MDMwMDQwMDdaFw0yNjExMDEyMzU5NTlaMHoxSTBHBgNV
BAUTQGMyYmYxYmM1NTRhYzZiNjFiODcxNDk4OTMzNGM3ODZlZTlhMzZhMDI5ZTdm
YWMzYTgyMDI3N2VhODUwZGJmZjkxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKyAOlhTiwLKpG/Avl7IQx6K+8bpG1YksQnHRAWYA07dgV0mnHJZW4VyUQcs
QRfM4//i0iw4DNdyerE1GoRCWRmlU9JShhN8VMXjLApzYdv2cpiSuU1AeP6LiWrb
jhqxZ5WIcLT77dE4ukU9y5uMw7gZCpI8SxtGseuzA11c8S2eUcFGg5fceDWNLl13
qBeOTmFwWWZbnZu3KoierCBVxteFaataba3wTp9lyySzXugCvuQJwORW7Vtrn9tG
mIeEo8llyI06yAWiGajHlNUaUT/UMgyL7scJCxPw61Seo8H3eVVdMYQWo7t41QKT
Z3VOWV3hgIUkKAj8PsvdbGzMtEUCAwEAAaOCAiIwggIeMB0GA1UdDgQWBBQTZNZP
IMLZ3dZQjU4qF20bazUJwzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
MDM5Mjc1NjktMGI1Yy00ODA3LTk2ZWEtYzBjN2M0NWZkNjc1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACABP8Iw
DQYJKoZIhvcNAQELBQADggEBAJ8EBGJeiFK7ahPKSkI+Z/4q+xoEL9gFDs9NiecY
wJZDYbSIP0a8V+7oRFNJmkFBEvOtIUD2emw8Z95jlHK9mhM9SiXtq/vXV5WbeKlf
YRCo91LAiIipXhL6whO5TEDEZxGM5gS5zDn8Pl1ajmR/IRoG0K9Z3F/LFUesiRzC
HhL3EnMdJyl6Gx3t5yH7Za+AW1FStkFjDpTXosIBtQnmnUkksOcNPmjeQQMgLO2e
XDoOqQZGTXaXuLuSlgOIr7jufKv5Ljto5+gYTbso0WFctP5PlOc2enyI9IA5e+dd
l6gLUQE/orKyQ/njHT5uxT7kWgBX2cq/ZxjIdT0FL5gTz54=
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:15:27 2026 by rpki-client