Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4f44e9d0-7921-4145-bdf5-4d07a4d0688d.roa
File: 4f44e9d0-7921-4145-bdf5-4d07a4d0688d.roa (raw, json)
Hash identifier: Vjy1jlWPK+F1hNhEQ0gUfnPCAVrxpewuvzpU3Io30a0=
Subject key identifier: 97:FB:73:1F:2E:D1:4C:6F:0B:84:D7:F4:E4:83:5E:62:A6:22:A7:85
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 47F7283580E64265666817190E12D13331774520
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4f44e9d0-7921-4145-bdf5-4d07a4d0688d.roa
Signing time: Thu 30 Jul 2026 01:30:36 +0000
ROA not before: Thu 30 Jul 2026 01:30:36 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:4000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f7:28:35:80:e6:42:65:66:68:17:19:0e:12:d1:33:31:77:45:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:36 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=be5f9453e02b71e6e9a5952b1f84fd2785bd9b468ce77cec6052b13232b9308c, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:f9:ce:01:68:9f:56:c9:55:f6:20:7f:ab:
08:d4:59:fe:31:f3:cd:f5:04:53:ca:7e:52:5b:7f:
25:4a:09:36:69:2d:0c:8e:0c:9c:c1:3b:ec:c2:7b:
7d:31:a0:a9:0c:2d:df:95:e1:91:3b:a2:d7:a6:06:
32:e7:1f:64:3d:26:c4:55:f1:15:25:9e:cb:5b:52:
94:18:f9:eb:67:55:84:2d:ac:54:53:76:46:9a:79:
45:c6:a9:a9:6a:65:ea:94:81:f0:37:ba:82:31:df:
bc:aa:09:b7:85:fc:30:b0:44:52:1a:9d:1c:2b:e7:
06:23:d2:d3:9e:0f:aa:ec:cf:75:2c:55:4f:dd:97:
54:49:d2:c0:6d:92:d0:74:2c:75:f7:29:c7:02:7e:
80:87:6a:4c:7c:9e:09:0b:5a:3e:73:f2:c8:c8:84:
a5:54:be:6d:27:2f:c0:f5:34:bb:1a:da:7e:e3:e8:
c2:79:17:72:47:76:e2:65:8a:17:7b:bd:c5:fc:b1:
c4:b7:00:68:3b:50:6c:13:c5:1f:61:45:07:7e:d7:
df:be:3b:6d:7b:ec:c5:ff:6a:25:8a:ac:12:7e:37:
c0:cd:c3:21:38:35:dc:09:d7:6b:4b:d5:57:a2:e8:
f3:35:d3:53:54:79:aa:77:be:6c:76:ad:95:1c:e4:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FB:73:1F:2E:D1:4C:6F:0B:84:D7:F4:E4:83:5E:62:A6:22:A7:85
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4f44e9d0-7921-4145-bdf5-4d07a4d0688d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:4000::/36
Signature Algorithm: sha256WithRSAEncryption
b2:95:f9:7a:6d:ea:d2:4b:e2:a1:43:42:80:42:20:87:b9:09:
04:14:ac:f1:69:14:a9:4b:2f:fb:74:8e:46:ef:ba:87:09:0e:
5a:3e:42:6e:2a:34:95:c6:70:30:73:c5:01:b2:4e:f2:11:d8:
c2:42:06:9b:2f:63:ee:5c:51:a7:3e:d5:9c:a0:fa:66:a5:41:
ed:87:22:b3:f2:69:53:73:13:45:29:13:88:77:19:6d:a1:79:
30:2a:47:ef:00:87:f7:90:e4:bd:ec:59:95:95:e0:fe:cc:17:
a3:33:2c:5a:9f:f0:8b:c9:d1:c6:25:bb:46:16:44:0e:a9:32:
f3:8b:16:b1:80:78:40:3a:af:23:c1:57:a9:67:f2:ac:bb:a2:
7e:5f:06:64:97:6f:80:07:00:4a:57:ed:6a:8f:0c:75:8d:85:
30:8e:de:71:fc:6c:c6:31:9b:99:1c:93:28:1c:78:f7:3e:c1:
45:4d:3a:a0:dc:e8:ac:f8:cf:31:5a:33:6c:1b:48:48:e5:61:
83:21:4c:56:46:6c:b4:e0:80:24:0f:66:c1:d1:e0:ec:a7:fe:
5d:c0:e3:01:20:5f:90:65:a7:40:78:07:48:b2:dd:f2:b2:7b:
1b:15:86:44:c1:20:18:a3:07:b8:de:58:3b:aa:82:bc:11:13:
62:b0:50:11
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUR/coNYDmQmVmaBcZDhLRMzF3RSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA3MzAwMTMwMzZaFw0yNjEwMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQGJlNWY5NDUzZTAyYjcxZTZlOWE1OTUyYjFmODRmZDI3ODViZDliNDY4Y2U3
N2NlYzYwNTJiMTMyMzJiOTMwOGMxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKft+c4BaJ9WyVX2IH+rCNRZ/jHzzfUEU8p+Ult/JUoJNmktDI4MnME77MJ7
fTGgqQwt35XhkTui16YGMucfZD0mxFXxFSWey1tSlBj562dVhC2sVFN2Rpp5Rcap
qWpl6pSB8De6gjHfvKoJt4X8MLBEUhqdHCvnBiPS054PquzPdSxVT92XVEnSwG2S
0HQsdfcpxwJ+gIdqTHyeCQtaPnPyyMiEpVS+bScvwPU0uxrafuPownkXckd24mWK
F3u9xfyxxLcAaDtQbBPFH2FFB37X3747bXvsxf9qJYqsEn43wM3DITg13AnXa0vV
V6Lo8zXTU1R5qne+bHatlRzkudsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSX+3Mf
LtFMbwuE1/Tkg15ipiKnhTAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NGY0NGU5ZDAtNzkyMS00MTQ1LWJkZjUtNGQwN2E0ZDA2ODhkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8dA
MA0GCSqGSIb3DQEBCwUAA4IBAQCylfl6berSS+KhQ0KAQiCHuQkEFKzxaRSpSy/7
dI5G77qHCQ5aPkJuKjSVxnAwc8UBsk7yEdjCQgabL2PuXFGnPtWcoPpmpUHthyKz
8mlTcxNFKROIdxltoXkwKkfvAIf3kOS97FmVleD+zBejMyxan/CLydHGJbtGFkQO
qTLzixaxgHhAOq8jwVepZ/Ksu6J+XwZkl2+ABwBKV+1qjwx1jYUwjt5x/GzGMZuZ
HJMoHHj3PsFFTTqg3Ois+M8xWjNsG0hI5WGDIUxWRmy04IAkD2bB0eDsp/5dwOMB
IF+QZadAeAdIst3ysnsbFYZEwSAYowe43lg7qoK8ERNisFAR
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:24 2026 by rpki-client