Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa
File: 3558ad32-215e-47a4-9f5b-477ec71e940f.roa (raw, json)
Hash identifier: PlN+pw2ZS3pNsao+LQ/zS4Tkj0BZq/ZzhigGmzklzBA=
Subject key identifier: B9:6A:29:95:C9:20:46:17:CF:47:80:6E:C2:2C:93:2C:CD:B0:41:5A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5C96175EA53CC3CE7EB3E54B590B8562106CC999
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa
Signing time: Mon 26 Oct 2026 05:50:22 +0000
ROA not before: Mon 26 Oct 2026 05:50:22 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a01:578:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:96:17:5e:a5:3c:c3:ce:7e:b3:e5:4b:59:0b:85:62:10:6c:c9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:22 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=43e517f3fde8fbbe5894dc2ea74c26c32f18f79f849704d46d059d4e7f585b25, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8f:13:ae:a9:cd:cb:f0:21:a2:68:99:8e:8a:
71:d6:8b:e7:17:83:50:bc:c4:ca:1d:d3:93:3d:56:
6d:34:5c:c9:de:df:be:31:b9:ba:98:56:f7:cc:ea:
1e:58:c9:0f:28:6e:4e:32:b0:20:cc:e0:94:05:a5:
92:7d:88:95:54:8a:86:70:e0:38:80:65:c6:fa:3b:
df:a4:67:b6:ca:b8:c8:23:c2:21:98:9d:e3:e5:b0:
cd:c1:9a:52:36:60:7b:1d:86:9d:90:87:12:ed:60:
49:bf:11:5e:f3:03:32:5b:b3:aa:5a:a2:6e:f4:b9:
cc:dc:01:28:17:39:99:bb:0e:64:da:13:49:41:f6:
1f:24:86:1e:ca:c6:69:52:3a:ed:73:62:fa:97:8b:
6e:64:50:03:11:9d:09:a4:b4:00:cf:db:7f:e4:97:
28:bc:1b:a9:bb:06:9d:1e:9a:dd:2a:e4:53:1d:16:
07:6c:0f:21:b7:c0:30:b5:db:ef:b9:62:17:77:dd:
c7:43:57:91:8c:82:c0:42:b5:3f:fb:19:02:f9:0c:
86:b3:bc:03:ac:64:56:39:8e:01:3c:02:83:1d:2a:
32:07:f8:2c:ee:e3:bc:bf:ab:21:a2:00:17:c8:16:
ee:55:b8:1e:c1:1c:42:26:b2:0e:8e:d0:94:a1:9a:
72:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6A:29:95:C9:20:46:17:CF:47:80:6E:C2:2C:93:2C:CD:B0:41:5A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:3::/48
Signature Algorithm: sha256WithRSAEncryption
52:ed:97:d1:e7:ea:5b:02:a6:ae:54:24:8b:da:7b:39:35:34:
0c:15:b9:4c:b2:cb:46:63:56:b4:0e:5f:db:b0:da:28:2d:5c:
e4:b0:6b:bd:b5:3c:86:79:b9:46:8b:a4:4e:41:a6:1d:5b:66:
10:4d:d1:b6:e2:04:0f:1f:fc:de:7e:e4:59:d9:95:14:8e:ee:
23:b4:c7:1a:91:dd:62:cd:92:32:11:09:ad:3a:f3:15:fa:46:
ec:01:12:91:61:0a:f7:7a:b1:8c:fd:fd:57:2d:36:89:d4:18:
07:19:aa:02:5c:4a:12:83:75:61:68:4b:7c:1e:f9:71:e2:fb:
89:34:55:7b:4a:b8:45:94:63:8c:40:51:77:85:fc:0b:fd:70:
42:b8:ef:f9:19:9e:5b:7d:18:81:8f:de:35:e7:13:31:48:92:
b2:f4:cd:24:fd:69:8f:fe:a7:60:3d:94:e2:eb:ef:ac:c3:28:
82:ea:8c:11:94:a0:b6:58:f7:a9:cd:5e:b7:c0:63:11:52:ab:
60:f1:9c:0b:6b:0e:f3:1e:a1:63:49:51:d4:1d:a4:d9:8b:53:
2a:c1:3f:8f:14:97:28:4b:35:50:39:3d:6d:b4:11:9a:ae:7c:
64:f5:5d:1f:5a:ac:7b:e7:c3:55:61:74:d3:84:5e:28:b2:5d:
4e:9d:36:e8
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUXJYXXqU8w85+s+VLWQuFYhBsyZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTUwMjJaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDQzZTUxN2YzZmRlOGZiYmU1ODk0ZGMyZWE3NGMyNmMzMmYxOGY3OWY4NDk3
MDRkNDZkMDU5ZDRlN2Y1ODViMjUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANKPE66pzcvwIaJomY6KcdaL5xeDULzEyh3Tkz1WbTRcyd7fvjG5uphW98zq
HljJDyhuTjKwIMzglAWlkn2IlVSKhnDgOIBlxvo736Rntsq4yCPCIZid4+WwzcGa
UjZgex2GnZCHEu1gSb8RXvMDMluzqlqibvS5zNwBKBc5mbsOZNoTSUH2HySGHsrG
aVI67XNi+peLbmRQAxGdCaS0AM/bf+SXKLwbqbsGnR6a3SrkUx0WB2wPIbfAMLXb
77liF3fdx0NXkYyCwEK1P/sZAvkMhrO8A6xkVjmOATwCgx0qMgf4LO7jvL+rIaIA
F8gW7lW4HsEcQiayDo7QlKGacqMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS5aimV
ySBGF89HgG7CLJMszbBBWjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MzU1OGFkMzItMjE1ZS00N2E0LTlmNWItNDc3ZWM3MWU5NDBmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoBBXgA
AzANBgkqhkiG9w0BAQsFAAOCAQEAUu2X0efqWwKmrlQki9p7OTU0DBW5TLLLRmNW
tA5f27DaKC1c5LBrvbU8hnm5RoukTkGmHVtmEE3RtuIEDx/83n7kWdmVFI7uI7TH
GpHdYs2SMhEJrTrzFfpG7AESkWEK93qxjP39Vy02idQYBxmqAlxKEoN1YWhLfB75
ceL7iTRVe0q4RZRjjEBRd4X8C/1wQrjv+RmeW30YgY/eNecTMUiSsvTNJP1pj/6n
YD2U4uvvrMMoguqMEZSgtlj3qc1et8BjEVKrYPGcC2sO8x6hY0lR1B2k2YtTKsE/
jxSXKEs1UDk9bbQRmq58ZPVdH1qse+fDVWF004ReKLJdTp026A==
-----END CERTIFICATE-----
Generated at Wed Nov 11 14:27:47 2026 by rpki-client