Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/061919fe-35ca-480a-af10-b947c33d5b67.roa
File: 061919fe-35ca-480a-af10-b947c33d5b67.roa (raw, json)
Hash identifier: 5xPKIMusWDP4hKu6I7JscFsm5NMrdPnhcZgJWLt6tHk=
Subject key identifier: F2:0A:4C:0B:4B:B3:7C:A2:22:30:6A:8F:D7:6E:42:08:6D:0C:2E:5D
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 15755A501124E556EBD53EF97BA9F2BFA12D33FE
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/061919fe-35ca-480a-af10-b947c33d5b67.roa
Signing time: Wed 12 Aug 2026 21:06:50 +0000
ROA not before: Wed 12 Aug 2026 21:06:50 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc5:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:75:5a:50:11:24:e5:56:eb:d5:3e:f9:7b:a9:f2:bf:a1:2d:33:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:50 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=b11101548f01ff8cd4398e3f5ad0def060260b8000abeea1ab276f62dc046f8a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:f4:ad:53:29:97:d0:4a:cb:c7:8a:d4:b3:
b7:1a:3e:fc:0c:33:c2:dc:70:a7:0e:94:9b:aa:96:
b9:57:c7:e7:39:a6:f8:59:12:f9:dd:ab:00:6c:4c:
49:9c:ca:2c:e2:fc:e3:e4:a2:b5:17:30:07:4d:e4:
5d:93:ba:8d:77:67:b7:79:bf:12:a5:b4:fb:8d:d4:
19:e6:16:9b:c1:39:ce:6c:f6:88:c4:c8:a5:1e:95:
a4:d0:da:06:8d:c3:58:2c:fd:70:ed:b8:4b:f1:11:
e1:c0:a0:30:a9:00:6c:66:97:45:38:f2:85:a0:f5:
a2:93:92:65:58:ac:fe:ca:b7:02:53:60:4e:67:ad:
cd:36:38:b2:38:a4:e8:06:68:c0:4a:05:6a:67:da:
67:da:67:29:f8:5b:f1:ff:09:04:31:0d:5e:a7:34:
95:53:a4:fa:a8:5d:58:8c:93:dc:e4:a1:34:a4:63:
95:b9:e2:e3:c9:8f:a1:26:97:0e:60:e1:82:5c:a9:
05:76:86:da:7d:a8:8a:1a:85:64:d4:b0:5f:33:39:
79:86:a7:5c:04:72:88:74:d2:d6:3a:93:86:da:4a:
37:f9:7a:81:92:f1:14:58:7c:c4:07:db:4e:ac:4c:
95:65:f5:d6:2c:29:af:df:99:a6:39:3b:cd:e6:7b:
a3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0A:4C:0B:4B:B3:7C:A2:22:30:6A:8F:D7:6E:42:08:6D:0C:2E:5D
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/061919fe-35ca-480a-af10-b947c33d5b67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:1000::/36
Signature Algorithm: sha256WithRSAEncryption
60:97:e3:45:ee:7c:cc:13:e1:f3:98:19:54:e2:5d:29:06:a6:
58:e4:0c:7e:e5:d6:1b:35:88:95:9e:cd:75:50:a4:35:17:58:
4f:99:1e:59:81:0d:84:f0:ef:91:31:5b:e4:6e:26:d4:40:ca:
70:ef:d2:1e:6f:48:e7:15:33:33:2e:32:77:8f:c1:77:a1:ba:
cd:c6:02:80:e5:ff:d7:35:f0:4d:c8:91:c8:fe:4b:b4:08:28:
ea:25:a7:a2:d8:89:8b:d3:a9:04:3a:0c:5d:bb:c9:63:cb:72:
ae:48:62:97:ed:ab:1f:81:f3:d6:0e:57:93:42:51:87:b6:0c:
4f:b8:8b:fb:d7:06:20:a9:4d:70:e5:d3:93:cd:9b:ee:c4:d5:
72:91:9f:c8:f0:97:05:7d:c1:e4:11:88:4f:eb:fe:0e:e9:86:
e6:40:44:d9:11:9b:4e:a9:af:a4:d7:bd:c1:f3:c7:77:25:b0:
2f:4c:06:72:bf:b9:82:57:bc:5b:34:c4:5c:58:af:a4:c0:05:
51:53:34:e3:41:a8:a0:6f:58:4b:26:cd:d6:55:58:70:c0:4e:
7f:da:08:1c:8f:fc:2f:1b:57:49:b8:42:e5:f4:61:eb:e6:b0:
31:c6:64:f1:b7:d7:3f:ab:e8:b9:34:8d:1a:21:c2:ad:99:23:
dc:19:25:c7
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUFXVaUBEk5Vbr1T75e6nyv6EtM/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMTA2NTBaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGIxMTEwMTU0OGYwMWZmOGNkNDM5OGUzZjVhZDBkZWYwNjAyNjBiODAwMGFi
ZWVhMWFiMjc2ZjYyZGMwNDZmOGExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJYi9K1TKZfQSsvHitSztxo+/Awzwtxwpw6Um6qWuVfH5zmm+FkS+d2rAGxM
SZzKLOL84+SitRcwB03kXZO6jXdnt3m/EqW0+43UGeYWm8E5zmz2iMTIpR6VpNDa
Bo3DWCz9cO24S/ER4cCgMKkAbGaXRTjyhaD1opOSZVis/sq3AlNgTmetzTY4sjik
6AZowEoFamfaZ9pnKfhb8f8JBDENXqc0lVOk+qhdWIyT3OShNKRjlbni48mPoSaX
DmDhglypBXaG2n2oihqFZNSwXzM5eYanXARyiHTS1jqThtpKN/l6gZLxFFh8xAfb
TqxMlWX11iwpr9+Zpjk7zeZ7o/cCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTyCkwL
S7N8oiIwao/XbkIIbQwuXTAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
MDYxOTE5ZmUtMzVjYS00ODBhLWFmMTAtYjk0N2MzM2Q1YjY3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8UQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBgl+NF7nzME+HzmBlU4l0pBqZY5Ax+5dYbNYiV
ns11UKQ1F1hPmR5ZgQ2E8O+RMVvkbibUQMpw79Ieb0jnFTMzLjJ3j8F3obrNxgKA
5f/XNfBNyJHI/ku0CCjqJaei2ImL06kEOgxdu8ljy3KuSGKX7asfgfPWDleTQlGH
tgxPuIv71wYgqU1w5dOTzZvuxNVykZ/I8JcFfcHkEYhP6/4O6YbmQETZEZtOqa+k
173B88d3JbAvTAZyv7mCV7xbNMRcWK+kwAVRUzTjQaigb1hLJs3WVVhwwE5/2ggc
j/wvG1dJuELl9GHr5rAxxmTxt9c/q+i5NI0aIcKtmSPcGSXH
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:18 2026 by rpki-client