Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1669140d-1945-4335-8da0-3c0fa301d378.roa
File: 1669140d-1945-4335-8da0-3c0fa301d378.roa (raw, json)
Hash identifier: eH9P6tzhuQevrkoH43i69Nnyu2knstHDDiEulXOEYW0=
Subject key identifier: 52:11:94:37:6B:8B:57:68:2B:D8:56:B9:C0:BF:9A:D6:42:54:FE:AF
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 74CCC7A4DD3FD726283A1BD13A177BE19CA6ED73
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1669140d-1945-4335-8da0-3c0fa301d378.roa
Signing time: Wed 12 Aug 2026 21:04:14 +0000
ROA not before: Wed 12 Aug 2026 21:04:14 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc2::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:cc:c7:a4:dd:3f:d7:26:28:3a:1b:d1:3a:17:7b:e1:9c:a6:ed:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:14 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=f47e46d707cd17648d62c9f8c22bf999f71d0a3e016efc72dea50d038739c1df, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:f6:d1:78:7e:1f:40:3b:d2:83:5b:f8:e5:
1c:61:e7:c4:93:a1:5a:dd:5a:fe:4c:45:47:3d:1b:
37:ba:bd:e7:30:e5:1d:2f:fa:70:3b:8b:ff:94:19:
46:41:e7:64:df:78:72:0e:10:00:ba:37:77:61:08:
93:ab:ea:fc:5b:28:69:3b:95:43:1b:bb:bf:0c:2e:
24:ec:11:e9:67:ee:5c:09:93:48:41:70:33:2b:e8:
e2:1b:65:9e:bd:bd:6d:80:05:4c:a0:9d:72:36:45:
d4:53:09:e7:9e:5a:3a:c2:88:4f:d1:1e:c4:eb:62:
89:43:d0:29:95:2c:14:f7:3c:a0:52:53:0b:92:6c:
aa:19:c7:3e:6f:19:07:19:9c:20:54:f8:98:83:2f:
47:55:de:2c:18:13:8b:9d:9e:94:0c:3e:33:d3:85:
a9:1c:4c:96:44:01:fd:aa:51:65:4b:21:24:77:39:
5f:b3:d4:b2:69:b8:98:96:2f:8c:a1:47:42:0d:3a:
a2:f9:d8:7e:71:65:a5:4e:89:1c:de:68:ce:1c:99:
21:5b:cf:58:d7:2e:5d:4c:03:2c:7a:d4:fc:1f:30:
27:2f:f7:c8:63:aa:e3:dc:e0:9c:9f:d0:88:3d:39:
27:6f:0e:fc:94:33:61:2f:7f:52:a8:2a:f5:49:8e:
23:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:11:94:37:6B:8B:57:68:2B:D8:56:B9:C0:BF:9A:D6:42:54:FE:AF
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1669140d-1945-4335-8da0-3c0fa301d378.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc2::/32
Signature Algorithm: sha256WithRSAEncryption
67:b0:a1:06:d7:50:d0:50:4b:95:43:d2:b4:a6:ef:61:d3:b6:
76:28:7d:ea:2f:60:a4:23:94:40:f2:ea:49:ad:01:9c:90:40:
fe:85:d1:cb:0c:8a:96:28:95:3c:5d:8a:6b:89:21:1f:2c:70:
46:d8:ea:df:d4:e8:32:ff:78:07:ff:ed:00:48:16:19:b3:23:
c5:9d:48:fb:dc:a0:23:a4:0c:32:98:01:39:b6:be:77:db:5b:
70:4e:42:93:4e:cb:5e:5f:3b:ab:7f:88:8b:21:d1:00:27:d9:
48:4e:ac:89:36:42:51:c3:03:3c:0e:ab:02:c7:a7:65:79:0c:
76:51:75:86:77:1c:7a:7b:80:5c:b0:76:2f:02:0a:36:5d:be:
8e:1c:79:11:c7:02:f5:51:65:f0:6c:17:18:d6:8a:24:b7:21:
83:16:3d:c1:65:41:5b:bb:33:a8:0f:db:2d:2e:e4:fa:3a:b5:
85:3d:05:dc:47:02:e4:f2:20:b4:a6:7a:c9:99:7f:c9:9e:fd:
e5:17:fd:f4:63:ac:08:9c:6f:19:a0:a3:1c:ef:d7:5b:8b:0a:
4a:af:df:7b:f1:53:fb:ac:67:62:ac:2f:7f:7f:e8:9b:30:0e:
7f:02:4b:f7:f0:db:46:e0:3a:5d:48:16:f0:b9:4b:d5:f6:2a:
39:21:ef:00
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUdMzHpN0/1yYoOhvROhd74Zym7XMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMTA0MTRaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGY0N2U0NmQ3MDdjZDE3NjQ4ZDYyYzlmOGMyMmJmOTk5ZjcxZDBhM2UwMTZl
ZmM3MmRlYTUwZDAzODczOWMxZGYxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALq09tF4fh9AO9KDW/jlHGHnxJOhWt1a/kxFRz0bN7q95zDlHS/6cDuL/5QZ
RkHnZN94cg4QALo3d2EIk6vq/FsoaTuVQxu7vwwuJOwR6WfuXAmTSEFwMyvo4htl
nr29bYAFTKCdcjZF1FMJ555aOsKIT9EexOtiiUPQKZUsFPc8oFJTC5JsqhnHPm8Z
BxmcIFT4mIMvR1XeLBgTi52elAw+M9OFqRxMlkQB/apRZUshJHc5X7PUsmm4mJYv
jKFHQg06ovnYfnFlpU6JHN5ozhyZIVvPWNcuXUwDLHrU/B8wJy/3yGOq49zgnJ/Q
iD05J28O/JQzYS9/Uqgq9UmOI5kCAwEAAaOCAiIwggIeMB0GA1UdDgQWBBRSEZQ3
a4tXaCvYVrnAv5rWQlT+rzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
MTY2OTE0MGQtMTk0NS00MzM1LThkYTAtM2MwZmEzMDFkMzc4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACABP8Iw
DQYJKoZIhvcNAQELBQADggEBAGewoQbXUNBQS5VD0rSm72HTtnYofeovYKQjlEDy
6kmtAZyQQP6F0csMipYolTxdimuJIR8scEbY6t/U6DL/eAf/7QBIFhmzI8WdSPvc
oCOkDDKYATm2vnfbW3BOQpNOy15fO6t/iIsh0QAn2UhOrIk2QlHDAzwOqwLHp2V5
DHZRdYZ3HHp7gFywdi8CCjZdvo4ceRHHAvVRZfBsFxjWiiS3IYMWPcFlQVu7M6gP
2y0u5Po6tYU9BdxHAuTyILSmesmZf8me/eUX/fRjrAicbxmgoxzv11uLCkqv33vx
U/usZ2KsL39/6JswDn8CS/fw20bgOl1IFvC5S9X2Kjkh7wA=
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:48 2026 by rpki-client