Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0ba7c95b-32b6-4997-be62-2b1530a313c6.roa
File: 0ba7c95b-32b6-4997-be62-2b1530a313c6.roa (raw, json)
Hash identifier: qzuB2WEqW3YP0cezbF0oOszer7UbIPelDPINeoCKfz4=
Subject key identifier: 27:11:B6:C9:76:AF:35:D7:6A:73:0B:A9:0B:58:4B:86:AE:56:7A:8F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2E4AE2431DC789AC1B6BBE787BCFCE3E93E9F74B
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0ba7c95b-32b6-4997-be62-2b1530a313c6.roa
Signing time: Mon 11 May 2026 01:40:10 +0000
ROA not before: Mon 11 May 2026 01:40:10 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc0:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:4a:e2:43:1d:c7:89:ac:1b:6b:be:78:7b:cf:ce:3e:93:e9:f7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 01:40:10 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=1b85a899d006f6740075dbc22f3826fdcf4d8fe6ecd06c46e7465a5d4d5e1d40, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:3c:b5:ca:bf:bf:3d:61:93:74:8f:81:e6:
fb:df:99:a5:4a:fb:ff:33:3d:aa:3e:56:ca:09:b2:
5f:74:5a:84:2b:74:2a:c4:aa:e1:f8:22:66:93:bc:
98:1a:29:fc:28:02:8c:c8:d2:ca:a5:24:5f:00:cb:
ea:44:20:6f:d7:3d:36:db:c4:f3:c2:af:82:44:f4:
39:0c:ca:b2:f2:4b:c1:c5:d8:9f:73:09:48:31:16:
96:90:18:1b:df:a1:45:d0:0f:78:66:19:56:6c:8d:
ad:5b:d7:0e:fc:2d:2b:89:7d:f6:c8:b5:7a:25:99:
2f:0c:48:c3:98:a8:ab:3c:8d:42:fc:8b:0f:4a:92:
0b:84:91:24:fd:50:ee:de:4d:e0:91:61:f3:3c:73:
6d:60:b0:bd:04:e1:7c:c2:56:b4:63:b9:14:c6:e2:
5a:6d:05:0a:1d:66:18:31:46:f7:cc:51:99:34:04:
d7:72:58:92:72:5a:2e:34:82:35:4e:6b:36:46:99:
bf:a8:4a:17:03:3f:00:b3:bb:77:a2:55:85:9a:b7:
88:04:34:19:84:48:5d:7f:97:bf:5e:5c:54:dc:15:
1b:bb:cc:37:2b:23:5f:17:be:87:b4:4e:17:9d:7c:
5e:29:83:7a:9a:a2:a5:5f:2c:11:a5:a8:01:55:dd:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:11:B6:C9:76:AF:35:D7:6A:73:0B:A9:0B:58:4B:86:AE:56:7A:8F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0ba7c95b-32b6-4997-be62-2b1530a313c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0:800::/40
Signature Algorithm: sha256WithRSAEncryption
3b:be:7a:0e:8f:b4:37:50:60:ff:7f:97:f5:94:3e:20:cc:ef:
5b:cf:b2:ec:32:7d:37:fa:dd:7a:b1:f1:c0:fa:dc:3a:96:9a:
ee:90:74:88:d4:0f:da:ff:40:ad:87:ab:58:84:c1:31:c3:8b:
5e:c6:4e:0f:57:e8:48:dd:32:be:9c:11:22:b4:94:c3:ca:88:
98:32:30:90:5b:97:25:54:f0:21:9d:22:c4:20:e1:51:65:c3:
fc:c6:52:0d:7a:1d:84:e9:99:0d:4c:fd:7a:df:4e:15:99:25:
82:6f:05:68:99:5c:4f:03:d6:e3:38:4b:88:f0:0a:43:d2:28:
57:f4:cc:19:60:b3:2c:55:87:3d:c5:41:73:19:fb:6d:6e:c9:
54:46:e0:9c:6e:8b:01:ec:9a:95:ca:43:ed:fa:7c:25:a7:e2:
eb:39:07:96:90:9e:13:6a:be:d9:30:35:df:59:c5:41:12:c5:
ec:a1:da:9d:65:b6:e9:28:b3:9d:11:45:55:08:f5:8f:20:ea:
fd:cf:ee:d6:c8:61:da:71:07:5b:f4:c7:04:46:48:37:e6:78:
58:6e:2a:e9:bd:d8:41:8b:13:97:08:84:cf:3f:93:62:ef:fe:
d5:0f:e0:00:73:9e:97:48:82:5b:c7:07:ca:30:11:29:60:3c:
e3:ad:46:7d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULkriQx3Hiawba754e8/OPpPp90swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA1MTEwMTQwMTBaFw0yNjA4MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDFiODVhODk5ZDAwNmY2NzQwMDc1ZGJjMjJmMzgyNmZkY2Y0ZDhmZTZlY2Qw
NmM0NmU3NDY1YTVkNGQ1ZTFkNDAxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKzpPLXKv789YZN0j4Hm+9+ZpUr7/zM9qj5WygmyX3RahCt0KsSq4fgiZpO8
mBop/CgCjMjSyqUkXwDL6kQgb9c9NtvE88KvgkT0OQzKsvJLwcXYn3MJSDEWlpAY
G9+hRdAPeGYZVmyNrVvXDvwtK4l99si1eiWZLwxIw5ioqzyNQvyLD0qSC4SRJP1Q
7t5N4JFh8zxzbWCwvQThfMJWtGO5FMbiWm0FCh1mGDFG98xRmTQE13JYknJaLjSC
NU5rNkaZv6hKFwM/ALO7d6JVhZq3iAQ0GYRIXX+Xv15cVNwVG7vMNysjXxe+h7RO
F518XimDepqipV8sEaWoAVXdYXECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQnEbbJ
dq8112pzC6kLWEuGrlZ6jzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
MGJhN2M5NWItMzJiNi00OTk3LWJlNjItMmIxNTMwYTMxM2M2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8AI
MA0GCSqGSIb3DQEBCwUAA4IBAQA7vnoOj7Q3UGD/f5f1lD4gzO9bz7LsMn03+t16
sfHA+tw6lprukHSI1A/a/0Cth6tYhMExw4texk4PV+hI3TK+nBEitJTDyoiYMjCQ
W5clVPAhnSLEIOFRZcP8xlINeh2E6ZkNTP16304VmSWCbwVomVxPA9bjOEuI8ApD
0ihX9MwZYLMsVYc9xUFzGfttbslURuCcbosB7JqVykPt+nwlp+LrOQeWkJ4Tar7Z
MDXfWcVBEsXsodqdZbbpKLOdEUVVCPWPIOr9z+7WyGHacQdb9McERkg35nhYbirp
vdhBixOXCITPP5Ni7/7VD+AAc56XSIJbxwfKMBEpYDzjrUZ9
-----END CERTIFICATE-----
Generated at Tue May 12 22:12:05 2026 by rpki-client