Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/646d01cb-6b38-49a4-9571-32e023f79582.roa
File: 646d01cb-6b38-49a4-9571-32e023f79582.roa (raw, json)
Hash identifier: ffL12gr8dIqs0E89FJkgIjRPLdAc92fG6o5mmSfG27g=
Subject key identifier: 2D:B9:86:3B:27:2A:A7:DB:7A:25:C9:47:1F:52:EF:88:FF:30:C6:34
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 4DFE69AAC49F682A48BC10985F5266F771F5E9F5
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/646d01cb-6b38-49a4-9571-32e023f79582.roa
Signing time: Wed 12 Aug 2026 21:06:48 +0000
ROA not before: Wed 12 Aug 2026 21:06:48 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc3:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:fe:69:aa:c4:9f:68:2a:48:bc:10:98:5f:52:66:f7:71:f5:e9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:48 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=b427299abcda9b9a5b7193ae1500160c9790dcb10fccd2c0d0f7cbd6808b7b46, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:8b:6e:05:1c:4b:15:f4:58:84:31:f2:4d:
69:91:3d:b2:c9:62:a6:f8:c1:16:b2:78:a6:cc:b2:
ed:9f:5f:94:fd:2d:8e:ab:fc:68:60:f3:15:b8:15:
ee:7f:fc:7c:02:d7:03:7c:7c:75:cd:0b:9f:96:30:
5e:28:c5:88:52:a5:21:57:f9:5c:df:f3:27:98:bd:
55:1f:77:22:e3:49:f8:42:ef:ae:52:ad:13:df:2f:
2b:f9:7c:68:ad:14:c7:de:d0:c5:07:6d:50:a5:17:
b4:27:b6:01:6c:49:14:8c:ec:f2:95:ff:51:da:f0:
71:c0:8a:59:2a:a1:a1:e7:93:8f:60:32:49:cd:42:
21:25:5d:db:a2:47:a5:94:f4:13:f0:f1:69:53:40:
b9:49:48:b5:bf:24:41:60:42:c8:c9:49:63:1e:59:
03:2f:7b:b1:8b:11:ef:29:e6:06:32:d5:38:11:3e:
42:29:dd:b2:ec:23:4e:97:0d:0e:8b:aa:df:a5:9b:
00:1c:22:dc:91:e4:5d:9a:57:aa:aa:1e:e2:10:1b:
de:92:97:b9:a7:7f:26:13:d6:b1:a4:7b:2c:89:98:
e7:18:8d:2d:5c:c3:43:0a:81:55:db:e1:9e:9e:77:
ec:6f:45:b9:3b:02:5a:0c:6a:dc:a5:35:9b:34:b7:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B9:86:3B:27:2A:A7:DB:7A:25:C9:47:1F:52:EF:88:FF:30:C6:34
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/646d01cb-6b38-49a4-9571-32e023f79582.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:3000::/36
Signature Algorithm: sha256WithRSAEncryption
8a:ac:4f:96:e7:9b:d4:5c:21:91:00:58:03:fb:8f:23:c3:26:
11:6b:bd:ae:e8:78:5b:55:5d:4d:c6:3d:b8:22:a2:93:36:aa:
17:81:70:09:cc:10:e3:b1:b9:d6:4b:d7:29:fc:c8:cd:77:42:
19:a3:63:a8:6a:2b:64:4c:23:d0:89:7c:c3:e6:47:ed:d6:b6:
13:d8:16:60:86:69:51:9b:39:ca:4e:55:9c:3c:5e:9f:04:a7:
96:33:9d:18:c3:c5:d0:c7:a1:73:dc:94:e5:65:6a:ce:2c:a0:
e5:9b:8d:4b:a3:50:4f:7a:93:77:b4:67:33:05:9b:19:9f:e7:
08:43:cd:82:25:95:c4:c3:23:f8:7e:6c:a0:72:94:c4:5f:16:
2f:3f:01:5c:04:51:63:9c:ba:fe:be:50:a9:34:92:cd:dd:0e:
70:ac:5b:dd:e6:14:c3:d7:6a:c6:bc:90:8d:cb:7f:d2:0d:f0:
ba:c7:20:c3:bb:f5:db:fb:9c:55:f4:02:4d:1d:8a:7f:8b:6e:
15:1f:d5:fd:18:06:a3:ba:9a:6f:b8:52:fe:fc:d3:0b:14:e3:
aa:16:3c:ba:11:37:2f:22:63:34:d6:08:c3:c2:9e:00:97:53:
49:61:83:ce:9b:3b:6f:f9:56:dc:65:d3:8d:79:10:06:8e:5d:
ac:6a:c9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:36:27 2026 by rpki-client