Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/546cfd08-b81d-4272-8862-184f9f677df0.roa
File: 546cfd08-b81d-4272-8862-184f9f677df0.roa (raw, json)
Hash identifier: e3vYZxhy2qwQv2lJ53cJ32fXWLtNarw8RigwTeqNCBI=
Subject key identifier: B3:30:C5:31:00:60:7A:A8:39:0A:E8:13:4F:72:CA:23:F0:F6:91:CA
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1DD4A6370A1BD240DE3EF3CE52949ACEA851DE27
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/546cfd08-b81d-4272-8862-184f9f677df0.roa
Signing time: Thu 05 Mar 2026 22:51:50 +0000
ROA not before: Thu 05 Mar 2026 22:51:50 +0000
ROA not after: Wed 03 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:3000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:d4:a6:37:0a:1b:d2:40:de:3e:f3:ce:52:94:9a:ce:a8:51:de:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Mar 5 22:51:50 2026 GMT
Not After : Jun 3 23:59:59 2026 GMT
Subject: serialNumber=954dd93a492a756bd75013b45ae7f0d4de8fa3264fb838b977fba136431f1e0c, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:29:ab:fc:5c:64:f2:70:98:c7:c9:dd:62:
9e:fc:73:c1:bc:ee:db:91:0b:e4:eb:2c:9a:e4:b7:
4d:13:84:6d:1e:55:7e:fd:09:71:3f:0c:ec:24:81:
91:f0:a4:79:47:46:34:ab:ef:92:dd:6c:20:46:a7:
87:d6:5b:a7:fb:0c:34:b1:1f:e2:14:fe:0d:bc:f2:
5d:c8:b3:9c:97:ff:bf:5a:69:7c:db:1e:f2:49:4e:
f1:74:7a:ba:5f:60:02:fe:8c:51:a6:78:fe:c2:24:
b5:4b:1a:b5:17:a4:87:15:99:14:5a:8c:c7:d4:1c:
f0:f3:8c:fb:d4:a4:55:03:10:12:d6:17:04:d6:de:
9a:c9:78:15:4b:2b:f5:46:a3:cd:52:ee:6f:98:19:
e8:ae:39:ea:28:7c:35:f1:a5:57:a4:92:ca:37:9e:
c6:65:54:17:70:c2:cf:cb:ec:6d:9b:31:94:ce:e9:
3a:19:ed:c0:3c:21:82:21:a9:e3:08:78:c1:ec:e8:
58:e8:60:63:33:e7:6a:4b:70:3f:24:2a:08:42:a6:
58:fb:1d:c3:6c:2e:4c:bd:55:bf:38:d2:a9:c2:e9:
8c:da:93:68:af:07:c8:d4:7c:65:49:02:bf:2e:f5:
25:2d:1f:31:fe:da:a0:de:68:c3:5d:a5:00:b3:95:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:30:C5:31:00:60:7A:A8:39:0A:E8:13:4F:72:CA:23:F0:F6:91:CA
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/546cfd08-b81d-4272-8862-184f9f677df0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:3000::/48
Signature Algorithm: sha256WithRSAEncryption
a0:72:7a:b9:36:6c:6a:6f:87:3e:91:d9:26:33:e2:ac:c3:40:
d9:da:9f:36:3b:f6:d7:ed:39:5d:dc:85:9d:9d:30:86:1f:8a:
48:75:f2:fc:5e:37:06:92:ca:9a:5e:17:22:62:91:a0:3e:85:
be:9b:63:fa:eb:e9:59:0a:98:01:68:d0:de:2c:86:f6:91:0a:
0d:a2:79:eb:37:89:4d:81:8c:df:55:a0:8b:e3:5d:ab:99:06:
e3:bc:26:4b:4e:96:7f:f8:12:b2:b8:a6:44:99:2b:12:6b:bc:
50:cf:b8:19:b7:70:92:3f:30:37:bd:a3:b7:6b:27:da:4a:3a:
35:50:2e:ce:42:b6:79:35:f8:31:14:de:b1:28:6e:53:9c:83:
fa:45:eb:ae:ce:6f:62:dd:24:26:b1:16:24:fe:37:e9:af:65:
a7:95:da:82:7c:b1:8d:9c:db:38:a3:92:7e:bd:b9:37:81:c1:
47:41:48:bf:ff:28:58:0d:44:69:c4:b2:20:da:1c:85:dc:52:
af:0c:6f:ae:72:90:ec:1a:e7:1b:0c:e4:9d:8a:17:f6:b4:ad:
43:f1:1f:66:a7:5b:b3:8c:ca:e8:31:87:70:77:e9:33:2e:8f:
41:00:8e:ef:75:bb:e5:cb:6d:e0:7c:a4:f8:0c:e5:75:83:82:
a6:fa:ce:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:27:58 2026 by rpki-client