Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/222bf775-2bba-4790-943c-82c7a38f7efd.roa
File: 222bf775-2bba-4790-943c-82c7a38f7efd.roa (raw, json)
Hash identifier: 4ZEXBgSJDuOab+conohUu34VLD6wq9559hIpYwhqzsw=
Subject key identifier: 12:3B:CD:E7:96:6D:53:3C:4B:28:0F:80:B3:A7:F4:81:E3:BC:9F:39
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 0A4DA8940F184A94814F460F9D03472847DB66DE
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/222bf775-2bba-4790-943c-82c7a38f7efd.roa
Signing time: Thu 30 Jul 2026 01:20:25 +0000
ROA not before: Thu 30 Jul 2026 01:20:25 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc4::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:4d:a8:94:0f:18:4a:94:81:4f:46:0f:9d:03:47:28:47:db:66:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:25 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=f10465fe815377bd5604b307d3f219ff34aa1e6db797843f4505c7599c08b6f3, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:44:45:4e:25:a1:59:a0:f1:d8:65:ed:f5:c4:
c1:5a:a8:6d:f9:ce:15:9e:95:fe:41:fa:bf:62:c8:
d6:f1:19:48:bb:6d:8b:eb:81:fb:e7:93:95:5b:13:
51:f1:b4:49:aa:01:68:5f:83:69:88:fe:d6:05:14:
ea:fb:2b:a6:66:24:4c:ea:41:7b:c4:e9:c6:5d:8d:
27:19:6e:1c:84:2b:d4:ee:e5:f7:82:e5:40:3c:0f:
40:9b:da:aa:54:6e:7b:29:2b:49:00:6d:8f:87:e3:
c3:0c:cd:37:e3:01:37:70:56:66:fe:91:57:5d:f4:
5d:d3:f8:77:8f:7a:b0:3e:fa:77:29:c8:55:83:dd:
aa:f0:5a:1b:bb:bf:ed:06:18:4a:8d:f8:d8:d0:43:
fd:0c:15:4f:b8:c8:b3:69:d7:2d:23:94:5f:ef:3f:
c5:6b:db:ac:4c:e7:ca:7e:df:48:c0:4b:a9:31:48:
7c:c3:b9:eb:5f:c6:ba:3b:3a:f9:bb:8a:ba:7d:3c:
3b:ab:a3:de:f6:7f:7b:dc:20:e7:ac:cf:23:c8:62:
34:6c:2c:99:65:b0:85:57:01:3c:bb:8f:cb:6f:c8:
19:a5:cc:c6:eb:22:d5:4c:4f:a1:55:ef:15:46:59:
2e:5a:b4:f4:1d:5b:19:bf:61:15:b9:f6:40:f6:dc:
51:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3B:CD:E7:96:6D:53:3C:4B:28:0F:80:B3:A7:F4:81:E3:BC:9F:39
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/222bf775-2bba-4790-943c-82c7a38f7efd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc4::/36
Signature Algorithm: sha256WithRSAEncryption
6b:a7:7a:65:db:a9:fb:ef:06:70:ae:a3:54:88:8e:2c:8b:ad:
35:9a:2c:57:21:16:76:cb:7c:20:ea:c1:b0:f2:67:98:c4:71:
69:a0:fa:91:72:cb:f0:1f:ad:08:d2:9b:01:c9:1a:73:ab:8b:
c1:ae:32:04:2f:52:d3:29:9b:25:a0:e4:13:39:68:81:96:65:
6a:d0:dd:a7:ec:92:3b:0c:41:18:91:98:f1:3c:e4:56:0b:95:
f0:47:14:21:27:eb:eb:20:f4:6c:f3:fd:8d:50:38:54:6d:3e:
c4:34:80:91:c7:4c:af:2e:78:ee:3a:1a:70:41:41:5e:d8:e2:
3c:26:3d:9a:ee:17:a6:fc:0a:14:34:03:69:71:e7:da:09:96:
c7:a7:74:03:8a:0e:b1:64:b1:35:5c:0e:77:58:1b:e3:62:e9:
8c:85:7c:bc:c9:77:4a:8b:d7:2b:cd:49:26:4f:ff:8b:b9:1a:
5a:ff:55:8f:19:f7:fb:df:b6:c1:a4:24:d8:db:5d:7b:97:61:
bc:2d:32:ba:4c:57:0e:71:dd:10:93:d3:ec:b2:99:15:e7:81:
2f:d9:68:2f:2f:47:a2:65:ef:7e:74:83:7a:d1:ce:13:c8:f3:
29:92:da:03:f4:f5:8d:71:e8:55:6a:6e:dd:06:3f:dc:1c:cb:
02:5e:b7:2a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUCk2olA8YSpSBT0YPnQNHKEfbZt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA3MzAwMTIwMjVaFw0yNjEwMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQGYxMDQ2NWZlODE1Mzc3YmQ1NjA0YjMwN2QzZjIxOWZmMzRhYTFlNmRiNzk3
ODQzZjQ1MDVjNzU5OWMwOGI2ZjMxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM9ERU4loVmg8dhl7fXEwVqobfnOFZ6V/kH6v2LI1vEZSLtti+uB++eTlVsT
UfG0SaoBaF+DaYj+1gUU6vsrpmYkTOpBe8Tpxl2NJxluHIQr1O7l94LlQDwPQJva
qlRueykrSQBtj4fjwwzNN+MBN3BWZv6RV130XdP4d496sD76dynIVYPdqvBaG7u/
7QYYSo342NBD/QwVT7jIs2nXLSOUX+8/xWvbrEznyn7fSMBLqTFIfMO561/Gujs6
+buKun08O6uj3vZ/e9wg56zPI8hiNGwsmWWwhVcBPLuPy2/IGaXMxusi1UxPoVXv
FUZZLlq09B1bGb9hFbn2QPbcUS8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQSO83n
lm1TPEsoD4Czp/SB47yfOTAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
MjIyYmY3NzUtMmJiYS00NzkwLTk0M2MtODJjN2EzOGY3ZWZkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8QA
MA0GCSqGSIb3DQEBCwUAA4IBAQBrp3pl26n77wZwrqNUiI4si601mixXIRZ2y3wg
6sGw8meYxHFpoPqRcsvwH60I0psByRpzq4vBrjIEL1LTKZsloOQTOWiBlmVq0N2n
7JI7DEEYkZjxPORWC5XwRxQhJ+vrIPRs8/2NUDhUbT7ENICRx0yvLnjuOhpwQUFe
2OI8Jj2a7hem/AoUNANpcefaCZbHp3QDig6xZLE1XA53WBvjYumMhXy8yXdKi9cr
zUkmT/+LuRpa/1WPGff737bBpCTY2117l2G8LTK6TFcOcd0Qk9PsspkV54Ev2Wgv
L0eiZe9+dIN60c4TyPMpktoD9PWNcehVam7dBj/cHMsCXrcq
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:22 2026 by rpki-client