Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5c493492-3435-4c2a-8586-43c861e7e60e.roa
File: 5c493492-3435-4c2a-8586-43c861e7e60e.roa (raw, json)
Hash identifier: e5aBdkel8s0iWfoIXwHajE7N2SZBIDF7JQddud/vr7c=
Subject key identifier: 44:4E:A4:59:29:B3:61:4C:EE:DA:C3:BE:A1:46:45:85:A9:82:E1:77
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1178AFCCC61038313C390D94508E778570ED896F
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5c493492-3435-4c2a-8586-43c861e7e60e.roa
Signing time: Wed 12 Aug 2026 21:04:15 +0000
ROA not before: Wed 12 Aug 2026 21:04:15 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc3:4000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:78:af:cc:c6:10:38:31:3c:39:0d:94:50:8e:77:85:70:ed:89:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:15 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=2ebbeaf078d0f9d2c9b5adf7d7c2b91c1f0247797c2d1266f389cb87670b1ced, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:27:4a:dd:66:3f:ea:08:46:dc:c2:40:e8:
c9:45:f8:56:d8:a0:a0:c7:20:ef:72:d3:2d:be:c1:
8c:d3:9c:31:89:bc:59:80:09:c0:fa:45:2b:78:52:
1e:52:49:84:c1:98:67:11:e6:fd:fc:1f:f5:79:4c:
e9:26:b2:94:fd:c4:65:9f:b2:46:b7:17:85:3e:d7:
40:68:06:03:f3:7e:2a:20:20:91:f3:14:42:5e:62:
da:49:6a:b6:18:1d:1b:ff:79:61:28:d8:b5:e7:bc:
d3:a1:91:4d:9a:26:19:e5:de:a1:4c:9d:1e:f5:96:
f4:23:d4:7b:12:31:d1:cd:ef:c0:5a:08:e2:73:fe:
9d:d3:83:a8:32:48:3d:3b:dd:cf:39:f6:79:30:64:
5a:18:bc:42:4b:49:d2:66:a2:0d:16:38:9a:55:a4:
bd:68:fe:3e:d6:b5:48:93:a2:54:5c:f0:f0:dc:0e:
9f:8f:bb:89:21:d7:17:2c:24:e2:90:4c:f1:80:f9:
f9:df:14:eb:a5:e7:58:7b:99:c6:76:41:cb:2b:55:
eb:13:a2:b7:3a:be:37:d4:88:ae:91:e5:f1:c3:7e:
cf:90:ba:54:0e:b9:32:03:1d:ca:41:88:13:3f:31:
22:07:ce:c3:6c:bc:56:23:26:c8:9f:ac:de:09:96:
b1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4E:A4:59:29:B3:61:4C:EE:DA:C3:BE:A1:46:45:85:A9:82:E1:77
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5c493492-3435-4c2a-8586-43c861e7e60e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:4000::/36
Signature Algorithm: sha256WithRSAEncryption
44:98:71:a3:67:10:b9:13:77:22:7a:e2:d2:6b:f3:91:12:36:
44:c2:30:e3:4f:f3:90:43:74:91:e4:d2:3e:1f:a1:e0:45:b6:
e5:ca:6e:98:99:e6:21:96:45:17:f4:fc:fc:f5:5a:a7:8b:e2:
bd:f6:08:fa:3a:31:84:42:7f:02:05:6a:69:e3:61:15:ef:f6:
fc:1a:d0:92:25:2b:36:5e:3e:b0:7c:ae:97:d8:b6:d2:5b:2f:
d0:fa:e6:9a:c5:8d:21:82:2b:52:74:fa:e6:2f:b5:ba:1c:da:
9f:a5:a7:26:e6:e3:d2:94:59:af:df:51:04:8b:83:ce:ea:02:
48:c1:bb:d4:a2:70:b7:6a:5d:99:27:a3:17:48:c5:ee:9a:a3:
ed:e4:a2:96:61:69:b8:e3:9c:ca:44:05:fc:ba:16:11:26:7f:
4a:b8:0d:ec:0e:71:5a:91:44:cd:ab:56:4d:ab:7c:4b:21:e5:
a3:4c:a8:e4:c7:f5:d6:7c:a7:e1:5d:d6:a9:c9:00:8a:a4:68:
f2:1c:3a:40:38:32:20:c2:4f:2c:bb:60:fb:25:04:ad:c6:7e:
0f:84:17:79:21:9a:18:76:51:23:3a:83:b4:1f:77:cd:01:79:
40:1e:ba:39:3c:86:ee:7d:b9:79:74:93:d2:53:c9:31:66:a8:
bc:83:c5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:47 2026 by rpki-client