Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d203f3b7-b0ac-4a90-8d89-cbcf13c69e19.roa
File: d203f3b7-b0ac-4a90-8d89-cbcf13c69e19.roa (raw, json)
Hash identifier: N5I5tMoRXtGs2ge7n7kZY/wlZOO6z/rIiMPU5oyQFpE=
Subject key identifier: 35:8E:CC:83:12:37:2D:3B:80:0F:94:6D:A9:BB:7A:DC:8A:9A:57:06
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 171D0CC2D1E8807F99A8F774991388FC5E6E74A7
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d203f3b7-b0ac-4a90-8d89-cbcf13c69e19.roa
Signing time: Mon 11 May 2026 01:40:52 +0000
ROA not before: Mon 11 May 2026 01:40:52 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:1d:0c:c2:d1:e8:80:7f:99:a8:f7:74:99:13:88:fc:5e:6e:74:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 01:40:52 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=377cb11783ba258ca277ad519f178b67d7c2fe37a53f9bc70715eeb64a72b2ee, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8a:1f:5a:e5:56:6b:83:82:b8:d5:ef:f3:c2:
8c:56:c9:7d:c8:fb:a2:44:bf:62:c6:0b:bd:75:5e:
1b:91:48:c9:79:2c:99:ff:4d:6e:bf:09:09:01:c8:
5a:2d:e3:d3:1d:6f:43:64:e6:86:bf:7c:e9:5b:ec:
95:2e:d7:75:68:35:e3:25:63:a9:08:b1:ae:82:39:
66:3d:4b:ca:5b:66:22:4c:2c:90:c4:e3:e4:45:b1:
f4:af:00:47:7f:fd:c4:89:4a:36:29:10:31:e3:a5:
6f:34:0d:21:ad:6a:3c:72:eb:4d:3d:28:35:7f:27:
a8:6f:c7:08:bb:8f:24:f9:01:a1:57:14:da:d7:c9:
1f:2c:83:4e:cf:64:7f:9b:75:4c:b0:8c:04:29:53:
51:b7:16:26:bd:6b:ce:c0:7c:6c:c2:36:80:c0:7a:
fd:35:da:12:c5:27:52:c2:0c:ab:26:ed:96:68:28:
54:4b:c0:53:7c:e5:ce:44:a7:88:8f:71:8a:0f:be:
ba:14:34:e9:67:66:5b:4e:b1:19:c0:93:6f:dc:b8:
9b:ef:d3:d1:77:bf:67:d7:56:31:7c:f3:99:c4:d8:
f5:56:ae:18:e5:66:f8:8d:e0:89:39:d1:f4:9c:5b:
ee:68:bd:55:9c:de:93:58:4e:51:c0:0c:22:35:92:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8E:CC:83:12:37:2D:3B:80:0F:94:6D:A9:BB:7A:DC:8A:9A:57:06
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d203f3b7-b0ac-4a90-8d89-cbcf13c69e19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:a000::/36
Signature Algorithm: sha256WithRSAEncryption
93:b0:bc:44:b8:0f:e0:cd:5c:3a:74:27:39:f3:79:96:b3:00:
df:96:f0:2c:ca:1f:69:02:ca:d7:b1:8e:b1:50:e6:e7:30:71:
b5:88:1a:ef:9c:a4:75:a5:99:ee:84:24:d1:82:76:7f:99:46:
a6:e0:e6:93:80:e5:44:d0:c6:c6:9f:5d:a3:af:36:53:e4:a8:
82:f9:9b:17:81:6f:95:e0:a9:2b:86:df:d6:be:19:1a:bc:42:
b6:47:d7:de:dc:66:f5:33:1b:b4:cf:24:a3:02:39:7c:36:b3:
d4:33:0c:7d:84:00:29:4b:a9:8f:96:ce:54:79:d0:4a:81:1c:
a1:65:74:a4:92:a0:e6:ef:27:f9:c8:dc:9a:6c:68:b6:1b:3e:
8f:a5:54:4d:6d:ff:3f:6d:72:6f:95:87:04:76:26:47:cc:5f:
5e:77:7d:dc:84:6e:77:30:86:0e:61:91:03:1f:6f:ab:2d:96:
ff:1a:60:e8:ab:aa:46:3c:9e:5c:50:09:15:08:cf:6e:ee:be:
b9:1e:66:89:af:39:cd:f6:0e:72:68:87:4f:ed:79:0e:4c:7c:
33:43:a1:20:4c:46:ec:de:b6:99:f5:4d:b0:8a:b4:bd:65:b4:
0d:57:51:04:81:2a:42:bb:3d:5b:37:bf:40:f9:ae:d7:2f:a4:
1d:f3:21:2d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUFx0MwtHogH+ZqPd0mROI/F5udKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA1MTEwMTQwNTJaFw0yNjA4MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDM3N2NiMTE3ODNiYTI1OGNhMjc3YWQ1MTlmMTc4YjY3ZDdjMmZlMzdhNTNm
OWJjNzA3MTVlZWI2NGE3MmIyZWUxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIyKH1rlVmuDgrjV7/PCjFbJfcj7okS/YsYLvXVeG5FIyXksmf9Nbr8JCQHI
Wi3j0x1vQ2Tmhr986VvslS7XdWg14yVjqQixroI5Zj1LyltmIkwskMTj5EWx9K8A
R3/9xIlKNikQMeOlbzQNIa1qPHLrTT0oNX8nqG/HCLuPJPkBoVcU2tfJHyyDTs9k
f5t1TLCMBClTUbcWJr1rzsB8bMI2gMB6/TXaEsUnUsIMqybtlmgoVEvAU3zlzkSn
iI9xig++uhQ06WdmW06xGcCTb9y4m+/T0Xe/Z9dWMXzzmcTY9VauGOVm+I3giTnR
9Jxb7mi9VZzek1hOUcAMIjWSnpsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ1jsyD
EjctO4APlG2pu3rcippXBjAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
ZDIwM2YzYjctYjBhYy00YTkwLThkODktY2JjZjEzYzY5ZTE5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8Og
MA0GCSqGSIb3DQEBCwUAA4IBAQCTsLxEuA/gzVw6dCc583mWswDflvAsyh9pAsrX
sY6xUObnMHG1iBrvnKR1pZnuhCTRgnZ/mUam4OaTgOVE0MbGn12jrzZT5KiC+ZsX
gW+V4Kkrht/WvhkavEK2R9fe3Gb1Mxu0zySjAjl8NrPUMwx9hAApS6mPls5UedBK
gRyhZXSkkqDm7yf5yNyabGi2Gz6PpVRNbf8/bXJvlYcEdiZHzF9ed33chG53MIYO
YZEDH2+rLZb/GmDoq6pGPJ5cUAkVCM9u7r65HmaJrznN9g5yaIdP7XkOTHwzQ6Eg
TEbs3raZ9U2wirS9ZbQNV1EEgSpCuz1bN79A+a7XL6Qd8yEt
-----END CERTIFICATE-----
Generated at Tue May 12 22:22:41 2026 by rpki-client