Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/093ade9d-c4ff-42d1-b843-d47a43ab0cab.roa
File: 093ade9d-c4ff-42d1-b843-d47a43ab0cab.roa (raw, json)
Hash identifier: WlX8xtWlWTO+NEUhAPm/Sy83BRaS/zBKNIB3PhUDWPo=
Subject key identifier: 76:76:5C:A0:FA:9D:8F:DE:73:2A:91:A1:EB:5C:56:21:C3:16:76:3C
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 10F4AD7509D41F9D83DFC968528BC08424D7C236
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/093ade9d-c4ff-42d1-b843-d47a43ab0cab.roa
Signing time: Thu 30 Jul 2026 01:30:37 +0000
ROA not before: Thu 30 Jul 2026 01:30:37 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f4:ad:75:09:d4:1f:9d:83:df:c9:68:52:8b:c0:84:24:d7:c2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:37 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=ac221e0eda9922a1fabd87dbbee3b6196f423034c19a1dd011d099b712326d3b, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:38:44:b7:3e:a2:d5:4f:c1:09:e5:91:bf:
1d:a1:4e:1e:c4:30:a6:d2:68:b8:00:fe:91:0f:9c:
a1:da:d0:22:83:d0:8f:41:62:2a:35:84:e5:f6:e9:
4a:4c:a0:94:09:82:ea:85:0a:82:0b:4e:2f:67:21:
c9:a7:ea:26:7a:be:8f:bf:24:48:a0:51:0c:b0:a9:
b0:1b:63:17:d4:14:91:8a:e1:18:c7:7c:21:85:0b:
48:89:e1:42:87:a9:d8:40:f1:ea:96:ce:8d:75:c8:
6d:f2:ea:5c:2f:0a:73:3b:d6:c2:2a:9e:90:22:e9:
f1:5e:18:04:b3:5c:75:18:15:e5:9d:78:bd:7c:1a:
ea:71:95:4f:c8:df:32:64:dc:85:2f:ec:fd:f8:d0:
bb:c6:06:39:5f:94:13:85:40:f9:e6:ac:65:c6:ab:
e9:b8:0c:7a:ed:b8:16:5c:1f:77:0f:66:3c:ae:e8:
f9:e0:86:50:09:ae:d5:d3:48:07:08:b3:c6:1e:d0:
61:cd:c6:27:61:d4:2d:95:01:5a:73:9c:39:df:2c:
28:fa:81:c7:3b:8c:ab:87:6d:a5:53:c5:fb:71:01:
f9:4a:f4:19:65:d8:eb:be:fa:42:3f:94:65:41:a7:
cc:c3:83:2a:bb:a0:cf:bf:ff:cc:4c:9e:25:15:5c:
5a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:76:5C:A0:FA:9D:8F:DE:73:2A:91:A1:EB:5C:56:21:C3:16:76:3C
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/093ade9d-c4ff-42d1-b843-d47a43ab0cab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:3000::/36
Signature Algorithm: sha256WithRSAEncryption
89:86:00:e6:26:a5:e6:d8:0f:88:75:1b:f4:8e:c1:9a:56:fd:
5d:c8:a7:56:3a:80:5d:3a:8f:c7:48:93:22:1a:a1:58:06:b3:
e3:55:bc:86:db:3c:96:e8:be:9c:b3:62:40:97:cc:09:15:db:
2e:ac:85:b2:92:35:e7:62:89:ff:80:e5:bf:11:5c:ec:33:97:
60:9c:69:73:fd:f1:b2:1e:38:47:4a:58:8a:7a:9d:e8:0d:c9:
1c:1a:ac:32:44:22:6b:f3:b2:ad:49:33:2f:9e:9b:d7:35:44:
ae:75:39:80:c0:02:34:82:1d:11:95:73:2e:82:00:f7:5f:a7:
04:fa:c6:2c:86:66:e4:5f:89:a9:34:5d:a0:c9:b1:ea:c9:4e:
65:2b:a5:ae:18:b6:69:5d:ba:44:a2:2a:b2:c3:4b:83:07:25:
4c:d8:b1:0b:9f:6b:9e:32:d4:c0:dd:53:4b:aa:1b:be:95:08:
0f:20:59:b8:59:ce:69:41:b2:aa:d8:a9:a0:ee:35:5a:aa:e0:
e7:11:c1:97:92:88:c1:2c:a7:1c:d7:6c:73:db:6a:9d:9f:67:
0e:ac:fc:51:4d:59:ee:a6:aa:4c:a6:b8:7b:cf:1c:2e:9b:fc:
27:eb:cd:13:9e:12:11:f9:3c:34:00:2f:3c:47:dd:3f:d1:ff:
be:c8:ad:31
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUEPStdQnUH52D38loUovAhCTXwjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA3MzAwMTMwMzdaFw0yNjEwMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQGFjMjIxZTBlZGE5OTIyYTFmYWJkODdkYmJlZTNiNjE5NmY0MjMwMzRjMTlh
MWRkMDExZDA5OWI3MTIzMjZkM2IxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANHWOES3PqLVT8EJ5ZG/HaFOHsQwptJouAD+kQ+codrQIoPQj0FiKjWE5fbp
SkyglAmC6oUKggtOL2chyafqJnq+j78kSKBRDLCpsBtjF9QUkYrhGMd8IYULSInh
Qoep2EDx6pbOjXXIbfLqXC8KczvWwiqekCLp8V4YBLNcdRgV5Z14vXwa6nGVT8jf
MmTchS/s/fjQu8YGOV+UE4VA+easZcar6bgMeu24Flwfdw9mPK7o+eCGUAmu1dNI
Bwizxh7QYc3GJ2HULZUBWnOcOd8sKPqBxzuMq4dtpVPF+3EB+Ur0GWXY6776Qj+U
ZUGnzMODKrugz7//zEyeJRVcWt8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR2dlyg
+p2P3nMqkaHrXFYhwxZ2PDAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
MDkzYWRlOWQtYzRmZi00MmQxLWI4NDMtZDQ3YTQzYWIwY2FiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8Mw
MA0GCSqGSIb3DQEBCwUAA4IBAQCJhgDmJqXm2A+IdRv0jsGaVv1dyKdWOoBdOo/H
SJMiGqFYBrPjVbyG2zyW6L6cs2JAl8wJFdsurIWykjXnYon/gOW/EVzsM5dgnGlz
/fGyHjhHSliKep3oDckcGqwyRCJr87KtSTMvnpvXNUSudTmAwAI0gh0RlXMuggD3
X6cE+sYshmbkX4mpNF2gybHqyU5lK6WuGLZpXbpEoiqyw0uDByVM2LELn2ueMtTA
3VNLqhu+lQgPIFm4Wc5pQbKq2Kmg7jVaquDnEcGXkojBLKcc12xz22qdn2cOrPxR
TVnupqpMprh7zxwum/wn680TnhIR+Tw0AC88R90/0f++yK0x
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:25 2026 by rpki-client