Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/282fe3c5-0036-42b9-ac1a-73f10de2a972.roa
File: 282fe3c5-0036-42b9-ac1a-73f10de2a972.roa (raw, json)
Hash identifier: 3s5yUlRP311dJjgwPFgC7hUrskAiPH0zCHSWrhLuAdg=
Subject key identifier: 1F:B7:7A:9B:85:C7:F6:F4:D5:9C:9B:27:EB:7A:CB:9D:F8:E6:FA:CF
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 56FE31BEB3A558BC8EC6A27CA5615A815675734A
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/282fe3c5-0036-42b9-ac1a-73f10de2a972.roa
Signing time: Wed 12 Aug 2026 21:05:42 +0000
ROA not before: Wed 12 Aug 2026 21:05:42 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc6::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:fe:31:be:b3:a5:58:bc:8e:c6:a2:7c:a5:61:5a:81:56:75:73:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:42 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=ca2c6733b498b5096d9cf29e988f52dd5a3dcf643247bea96ae66716626e02a4, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:48:4f:92:25:46:06:98:e4:4e:51:ca:70:
6e:a8:c0:15:d9:06:49:e1:7f:e6:8e:a8:e2:fa:e2:
bb:83:01:15:8f:3d:01:2c:2e:4b:f1:af:bf:a9:1f:
ec:1e:7e:9d:de:10:8d:15:25:ac:85:13:9e:e3:c6:
bd:11:0f:f0:ca:da:08:5e:ad:e0:e0:4d:99:d7:25:
dd:b0:22:9f:fe:50:76:59:01:2a:b6:cb:72:d2:f2:
26:7a:ed:d0:3f:9c:73:32:9f:46:09:7c:0c:ae:8f:
f1:53:62:26:9a:e6:b4:74:70:07:eb:c0:bf:5f:72:
b7:05:09:ef:0d:4b:b9:95:89:ac:5b:bd:bf:6a:a6:
0e:4c:fb:26:c1:b7:2f:de:71:04:59:a9:e4:2d:62:
66:83:23:43:e8:ab:02:96:43:f4:68:27:be:0f:83:
c5:9c:86:d0:68:d3:e8:67:e6:e4:6c:67:df:61:cc:
f9:83:64:a5:73:8f:32:18:1f:5e:90:d5:ce:1c:1d:
54:9d:24:24:89:9d:65:e8:01:66:27:d8:0b:db:19:
49:23:d6:73:fe:e9:fc:bd:e4:70:aa:fe:76:56:b6:
23:96:7c:30:12:d8:b0:36:33:1b:a2:1d:eb:33:1a:
a9:7b:43:81:84:a2:f0:0e:b2:db:31:83:25:73:e1:
1f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B7:7A:9B:85:C7:F6:F4:D5:9C:9B:27:EB:7A:CB:9D:F8:E6:FA:CF
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/282fe3c5-0036-42b9-ac1a-73f10de2a972.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6::/40
Signature Algorithm: sha256WithRSAEncryption
49:65:55:1b:1a:65:a2:a7:da:e4:4c:80:a1:ad:a7:04:69:41:
ec:15:e7:1c:f6:80:08:f3:1c:8c:90:fa:06:30:eb:a2:c5:55:
b2:7d:b0:15:07:29:ce:1f:39:78:59:9e:4b:a2:33:5b:fe:ad:
7b:c2:6f:81:8b:b4:96:98:b8:11:b2:c5:02:24:4a:b2:f9:1b:
b4:0e:89:83:07:cb:1b:39:2b:cf:9c:d8:f1:f1:77:6f:25:cb:
68:f2:91:f6:cc:3b:8c:49:85:53:27:05:03:f5:91:96:40:13:
ce:32:62:e7:38:0e:45:49:17:26:3f:60:66:a0:2e:f7:82:12:
be:dd:88:34:2a:5d:ec:f6:7c:2a:02:bf:36:99:ad:69:b5:15:
94:a8:2d:38:2f:9b:97:e2:3f:26:ec:31:4d:46:6b:ac:6c:a9:
0f:c5:de:1b:aa:32:54:55:f5:6e:cc:33:38:59:cb:db:1b:a0:
41:b8:6d:ef:f1:5f:88:99:0f:5b:3e:82:e4:3c:3c:b6:10:c7:
a3:89:65:29:4c:4e:9b:c5:4f:16:b8:be:54:be:d5:ea:f1:41:
ba:e3:56:aa:d7:74:75:c7:ba:94:96:0c:59:e3:8b:76:51:1a:
89:ba:e5:fb:77:71:e4:12:e6:ff:7f:11:3a:48:3c:fa:dd:72:
90:3e:15:e4
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUVv4xvrOlWLyOxqJ8pWFagVZ1c0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMTA1NDJaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGNhMmM2NzMzYjQ5OGI1MDk2ZDljZjI5ZTk4OGY1MmRkNWEzZGNmNjQzMjQ3
YmVhOTZhZTY2NzE2NjI2ZTAyYTQxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJFRSE+SJUYGmOROUcpwbqjAFdkGSeF/5o6o4vriu4MBFY89ASwuS/Gvv6kf
7B5+nd4QjRUlrIUTnuPGvREP8MraCF6t4OBNmdcl3bAin/5QdlkBKrbLctLyJnrt
0D+cczKfRgl8DK6P8VNiJprmtHRwB+vAv19ytwUJ7w1LuZWJrFu9v2qmDkz7JsG3
L95xBFmp5C1iZoMjQ+irApZD9Ggnvg+DxZyG0GjT6Gfm5Gxn32HM+YNkpXOPMhgf
XpDVzhwdVJ0kJImdZegBZifYC9sZSSPWc/7p/L3kcKr+dla2I5Z8MBLYsDYzG6Id
6zMaqXtDgYSi8A6y2zGDJXPhH4ECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQft3qb
hcf29NWcmyfresud+Ob6zzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
MjgyZmUzYzUtMDAzNi00MmI5LWFjMWEtNzNmMTBkZTJhOTcyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8YA
MA0GCSqGSIb3DQEBCwUAA4IBAQBJZVUbGmWip9rkTIChracEaUHsFecc9oAI8xyM
kPoGMOuixVWyfbAVBynOHzl4WZ5LojNb/q17wm+Bi7SWmLgRssUCJEqy+Ru0DomD
B8sbOSvPnNjx8XdvJcto8pH2zDuMSYVTJwUD9ZGWQBPOMmLnOA5FSRcmP2BmoC73
ghK+3Yg0Kl3s9nwqAr82ma1ptRWUqC04L5uX4j8m7DFNRmusbKkPxd4bqjJUVfVu
zDM4WcvbG6BBuG3v8V+ImQ9bPoLkPDy2EMejiWUpTE6bxU8WuL5UvtXq8UG641aq
13R1x7qUlgxZ44t2URqJuuX7d3HkEub/fxE6SDz63XKQPhXk
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:42 2026 by rpki-client