Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/46e32814-385a-4d49-a06e-595685067063.roa
File: 46e32814-385a-4d49-a06e-595685067063.roa (raw, json)
Hash identifier: oYUgD3bqFxBmVwQdwzM/5OtR52lCFDTQtf1iH75o//0=
Subject key identifier: 70:7C:63:03:E2:43:7E:6F:22:B6:BF:87:80:DC:29:B0:0E:C2:C1:48
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 01776D73E76D19C04A4EA1F72C93547A0D2DD826
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/46e32814-385a-4d49-a06e-595685067063.roa
Signing time: Mon 14 Sep 2026 19:03:01 +0000
ROA not before: Mon 14 Sep 2026 19:03:01 +0000
ROA not after: Sun 13 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a0e:9780::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:77:6d:73:e7:6d:19:c0:4a:4e:a1:f7:2c:93:54:7a:0d:2d:d8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Sep 14 19:03:01 2026 GMT
Not After : Dec 13 23:59:59 2026 GMT
Subject: serialNumber=556c5477cafc0d1a2418f4f288253fea5c7aa0b110a44ab6fc33ef8176c62bc4, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:ee:28:bf:6e:81:1c:6e:08:45:19:2a:a9:
82:ed:52:b1:62:77:cd:86:7a:5a:05:41:b9:cd:87:
75:4c:f0:4b:66:a0:61:71:9e:c9:38:70:d3:97:51:
0c:7b:65:3b:dd:f8:9c:a1:04:f6:dd:cb:e6:85:98:
f5:70:61:92:b6:5c:36:8f:2c:64:ac:76:5b:da:62:
e3:5b:b0:d4:f2:5e:6c:06:d0:d5:73:a2:39:37:84:
f4:ea:4c:02:23:d8:54:21:e6:ea:78:a7:48:2e:fb:
d7:b4:93:e5:33:80:7c:4d:81:db:fe:a7:23:28:29:
a0:62:d5:8d:51:87:79:7e:f8:0d:a6:73:3b:96:0e:
44:2d:9e:17:e9:72:8f:1d:6f:0f:24:c7:81:89:d0:
c2:f4:b5:09:65:ae:22:5f:06:5c:33:54:52:1a:1d:
6a:dc:c0:2a:0a:62:48:b8:64:43:45:a7:50:58:b1:
e7:5f:b9:d9:06:41:aa:08:9c:c2:74:82:41:d9:c6:
74:25:2b:20:c9:3e:70:a5:fc:0f:30:c0:21:11:79:
4f:f9:d2:07:6a:9f:9f:57:08:e4:d3:b7:21:47:fa:
cd:32:bb:c3:d9:4a:a1:b3:2b:09:98:87:20:42:a0:
12:65:95:1b:34:a8:b2:c0:bf:8c:7c:da:6d:cb:d2:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7C:63:03:E2:43:7E:6F:22:B6:BF:87:80:DC:29:B0:0E:C2:C1:48
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/46e32814-385a-4d49-a06e-595685067063.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:9780::/29
Signature Algorithm: sha256WithRSAEncryption
9d:d4:42:14:37:d6:d3:ed:e1:d7:45:6a:fc:35:18:d9:fb:d6:
ef:62:d0:34:8e:fe:10:3b:bc:b8:22:07:da:1e:cf:aa:68:36:
f4:bb:31:23:16:6e:95:58:e4:77:99:c7:32:a3:ed:97:d7:03:
48:be:fa:01:64:58:1d:9c:d5:1a:25:c2:cc:20:10:77:6d:49:
1e:b9:6f:fc:6b:11:38:d7:d4:83:04:6a:d0:f7:b4:10:d0:7e:
20:56:5c:77:42:98:87:cd:1d:12:db:24:16:77:d4:3e:bd:37:
72:98:6b:a6:3e:c9:f2:dc:59:52:bb:a0:f7:54:68:e0:e4:ad:
4b:71:eb:61:b6:8d:70:41:82:71:6c:31:eb:b5:1d:f1:40:d0:
8a:77:a8:8d:d9:f9:3d:40:da:9d:83:84:76:d2:63:a5:9b:40:
89:3a:af:15:62:9f:6f:b4:92:16:18:49:35:62:5e:a8:50:6c:
34:d0:04:dd:5f:33:e9:c7:d6:97:71:e2:fd:47:ac:a6:2e:db:
ae:e3:f7:20:29:23:84:06:3e:4c:64:8a:f6:b4:50:7b:1e:32:
70:4e:11:01:22:0b:97:07:0c:28:3b:0d:47:12:47:1a:2c:00:
7c:5f:09:cc:49:00:32:7b:eb:e7:62:bb:2d:fb:a3:1a:3b:5b:
18:6e:f0:e7
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUAXdtc+dtGcBKTqH3LJNUeg0t2CYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA5MTQxOTAzMDFaFw0yNjEyMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQDU1NmM1NDc3Y2FmYzBkMWEyNDE4ZjRmMjg4MjUzZmVhNWM3YWEwYjExMGE0
NGFiNmZjMzNlZjgxNzZjNjJiYzQxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMMA7ii/boEcbghFGSqpgu1SsWJ3zYZ6WgVBuc2HdUzwS2agYXGeyThw05dR
DHtlO934nKEE9t3L5oWY9XBhkrZcNo8sZKx2W9pi41uw1PJebAbQ1XOiOTeE9OpM
AiPYVCHm6ninSC7717ST5TOAfE2B2/6nIygpoGLVjVGHeX74DaZzO5YORC2eF+ly
jx1vDyTHgYnQwvS1CWWuIl8GXDNUUhodatzAKgpiSLhkQ0WnUFix51+52QZBqgic
wnSCQdnGdCUrIMk+cKX8DzDAIRF5T/nSB2qfn1cI5NO3IUf6zTK7w9lKobMrCZiH
IEKgEmWVGzSossC/jHzabcvSzf8CAwEAAaOCAiIwggIeMB0GA1UdDgQWBBRwfGMD
4kN+byK2v4eA3CmwDsLBSDAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NDZlMzI4MTQtMzg1YS00ZDQ5LWEwNmUtNTk1Njg1MDY3MDYzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoOl4Aw
DQYJKoZIhvcNAQELBQADggEBAJ3UQhQ31tPt4ddFavw1GNn71u9i0DSO/hA7vLgi
B9oez6poNvS7MSMWbpVY5HeZxzKj7ZfXA0i++gFkWB2c1RolwswgEHdtSR65b/xr
ETjX1IMEatD3tBDQfiBWXHdCmIfNHRLbJBZ31D69N3KYa6Y+yfLcWVK7oPdUaODk
rUtx62G2jXBBgnFsMeu1HfFA0Ip3qI3Z+T1A2p2DhHbSY6WbQIk6rxVin2+0khYY
STViXqhQbDTQBN1fM+nH1pdx4v1HrKYu267j9yApI4QGPkxkiva0UHseMnBOEQEi
C5cHDCg7DUcSRxosAHxfCcxJADJ76+diuy37oxo7Wxhu8Oc=
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:37:24 2026 by rpki-client