Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fe3ce580-d204-4167-8723-0a480c50b6ad.roa
File: fe3ce580-d204-4167-8723-0a480c50b6ad.roa (raw, json)
Hash identifier: 6oX3NoFX1wdg3Mv+oYuxExWOdT2K2DG8N0R9rNglQtg=
Subject key identifier: 72:90:BD:CA:44:FB:9E:8A:18:8E:75:B1:22:F0:E9:8D:A6:55:C3:ED
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 62CA4B0AF720C9406F4E8EADFD6EE0219434862E
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fe3ce580-d204-4167-8723-0a480c50b6ad.roa
Signing time: Wed 05 Aug 2026 02:00:06 +0000
ROA not before: Wed 05 Aug 2026 02:00:06 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 193.202.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ca:4b:0a:f7:20:c9:40:6f:4e:8e:ad:fd:6e:e0:21:94:34:86:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:06 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=7beadb947611b5017b291e95e57378c331e74bbd0bea8df844e4a46923cada9d, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:d6:da:fd:1c:57:db:17:dd:b2:f6:98:b6:
a0:b0:40:fb:b8:44:c1:cd:28:c7:01:91:f6:3d:6f:
c4:52:1c:15:a5:d5:d8:86:19:cb:61:44:86:8c:1f:
47:eb:f1:89:5e:06:23:08:ba:8a:26:70:57:04:f4:
ae:c2:71:ea:a4:a0:ed:93:76:99:33:24:40:c6:9d:
27:a8:e3:64:bc:98:9b:e3:be:93:ed:d8:e9:8c:ae:
2e:4d:cf:a3:05:76:46:2e:92:4b:74:1f:4e:76:a8:
3f:5f:4a:41:7c:16:ba:9b:da:28:2b:4a:5e:8f:f6:
00:c5:9c:56:ef:55:fa:a1:c3:7e:8c:29:25:79:a8:
9c:db:ad:b1:a7:f9:3a:a0:89:cf:0b:39:90:02:b9:
36:a7:86:bd:f1:e4:e8:ce:75:27:bf:be:0e:d4:69:
1b:3b:b1:66:67:2a:fe:be:33:8c:d1:38:40:6b:ba:
9a:dc:9c:42:0b:ce:f5:2e:bd:7e:10:db:7b:f5:4e:
03:27:c6:29:36:9c:51:ba:1e:74:8b:6d:f6:61:0e:
07:68:dc:6d:10:93:13:5f:a6:72:dd:05:2b:67:8e:
17:f6:9a:44:06:57:bc:c9:62:3c:9f:96:e4:bf:28:
f5:24:36:bc:3c:67:53:f4:e0:70:8b:33:fc:f5:39:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:90:BD:CA:44:FB:9E:8A:18:8E:75:B1:22:F0:E9:8D:A6:55:C3:ED
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fe3ce580-d204-4167-8723-0a480c50b6ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.192.0/19
Signature Algorithm: sha256WithRSAEncryption
ca:0f:91:b1:76:1a:0e:df:38:7e:33:c8:5e:e9:6d:90:e1:a1:
4f:81:6d:bd:b7:92:f2:0e:a6:73:2d:9c:0f:a9:bf:7f:fa:9d:
01:1a:15:40:58:d9:77:81:94:9c:9a:88:2c:58:6a:58:74:23:
62:b9:34:7f:5b:07:ec:42:3c:50:73:c5:53:b3:10:61:87:13:
7e:40:20:f8:23:11:fa:9b:eb:d8:57:07:52:5d:9d:e3:26:33:
71:df:0c:0d:79:5c:40:fc:06:93:0a:ea:5d:1b:90:4b:0f:ff:
0a:d5:08:91:d8:70:e3:8a:14:eb:8e:1c:2f:78:5f:87:8b:2f:
41:9f:a2:f0:25:64:bb:d0:cf:1b:e6:b4:f4:53:f9:2a:90:bd:
0d:3e:b4:5a:b4:95:a0:58:c9:e5:81:fc:f5:21:0a:c6:de:0f:
34:f1:67:ed:6c:07:d3:ec:46:3c:fd:fc:c4:43:1a:b8:2f:a1:
b1:b2:f5:51:a3:4c:2a:e2:fb:7a:f9:72:2a:46:c0:8e:5d:2a:
c4:a6:56:f0:9f:c4:7c:b8:93:3e:54:f9:b1:00:bc:9f:84:83:
6c:26:82:75:69:e9:a7:c4:cc:e5:74:e6:3c:14:84:fe:f1:62:
fb:bf:0e:e6:1a:4c:6f:cf:80:30:69:f3:de:ad:27:f4:81:69:
42:e5:ef:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:02:18 2026 by rpki-client