Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/414f8b3d-a47b-4b6f-9a24-e99cd78a951b.roa
File: 414f8b3d-a47b-4b6f-9a24-e99cd78a951b.roa (raw, json)
Hash identifier: wkix+kSW/Z7+YQexUk3+x7ebhJVu1gAkLlL82yIA3VU=
Subject key identifier: 2E:BE:62:CE:8F:39:36:01:61:AD:7B:F3:62:6D:B8:54:47:17:88:65
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5ADDDA70DDC89EDAFFB07CC5A96A90F44652FDC9
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/414f8b3d-a47b-4b6f-9a24-e99cd78a951b.roa
Signing time: Sun 06 Sep 2026 00:00:09 +0000
ROA not before: Sun 06 Sep 2026 00:00:09 +0000
ROA not after: Sat 05 Dec 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:f440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:dd:da:70:dd:c8:9e:da:ff:b0:7c:c5:a9:6a:90:f4:46:52:fd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Sep 6 00:00:09 2026 GMT
Not After : Dec 5 23:59:59 2026 GMT
Subject: serialNumber=b9ea09aab1ba2fb03ef63b9774cc302570dda23eb00eb850bb74c280eedef489, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:59:cb:75:7d:eb:5d:5a:47:b0:09:0b:bd:
e4:e2:59:0e:5e:9e:5a:f4:33:aa:39:6c:f3:17:76:
85:dc:5c:7a:75:df:ac:67:97:a3:29:c9:65:d6:ab:
36:e0:de:2e:c1:1d:c9:63:f5:1f:3f:d8:d9:24:f5:
9d:d7:78:81:28:fa:80:8e:79:9a:e2:dd:8e:e7:68:
2d:39:02:fe:c0:d1:77:aa:fd:18:c3:69:39:7a:36:
c9:8a:e6:8a:e1:37:ca:58:b8:61:23:71:d5:bc:41:
97:c7:3c:7e:ad:4b:09:c0:de:3f:49:8d:cb:d2:59:
34:5f:77:2f:ea:6e:87:96:67:57:58:b6:f0:73:b9:
27:16:43:95:65:96:77:75:e1:54:a9:5f:55:fd:08:
3f:99:0a:bc:ed:d5:db:3e:a6:c4:b2:b3:0c:ac:1c:
fc:2e:44:69:7a:94:f8:d5:5f:2d:d8:5e:d7:ea:d3:
c5:81:0d:45:9b:16:b5:ab:59:4c:ed:e8:bd:27:63:
d0:68:fa:d8:03:e5:0c:59:ee:35:e8:26:f5:39:6d:
32:2f:50:2f:69:81:2b:78:7b:bd:7e:03:c4:18:57:
46:35:86:c0:44:65:ed:98:13:ea:85:29:88:7d:da:
e9:53:d0:94:57:df:69:27:86:12:ed:76:8c:b0:c5:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BE:62:CE:8F:39:36:01:61:AD:7B:F3:62:6D:B8:54:47:17:88:65
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/414f8b3d-a47b-4b6f-9a24-e99cd78a951b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f440::/48
Signature Algorithm: sha256WithRSAEncryption
19:55:d5:59:6d:6c:62:90:f9:4f:45:49:2f:c2:f3:38:fe:9a:
18:21:d8:7e:3d:11:70:50:38:75:b4:72:7a:4e:ab:e6:12:6b:
a2:e7:5f:06:45:3a:a1:af:d0:fd:54:af:0c:ac:86:04:4b:11:
db:18:23:ad:5d:37:76:90:a1:99:61:bf:18:63:03:a8:27:c7:
69:8f:8f:9b:42:66:0e:ef:45:d2:0f:80:75:82:3c:f6:d8:c0:
2b:57:66:77:8d:0b:8e:ab:e9:f8:bb:5e:5b:5b:a0:8a:72:f0:
43:da:fc:ac:57:53:52:66:4f:27:36:04:de:a2:00:2e:3b:a0:
c6:2f:e2:bf:20:ab:80:06:4b:09:97:f5:8c:8c:f3:9e:23:3b:
91:cb:05:89:21:72:d6:ea:71:a1:a1:c1:56:97:0a:87:b2:4d:
48:41:ab:b5:3d:41:d8:31:68:89:92:3d:28:e5:21:d8:b3:6b:
b3:5c:b4:92:3b:f0:84:1d:d1:20:66:1b:a3:ae:21:c2:b5:fc:
55:94:5d:19:d2:17:51:71:cd:aa:cf:41:ae:54:67:fa:96:35:
96:03:d0:6f:61:19:9f:52:a6:75:05:44:b2:b2:56:c9:bc:19:
71:af:5b:b6:a3:f6:a3:47:39:79:cb:b0:ad:7a:15:b8:be:10:
99:44:0a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:55:09 2026 by rpki-client