Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/288fe48a-a32f-455c-98d4-b9aa49d2804a.roa
File: 288fe48a-a32f-455c-98d4-b9aa49d2804a.roa (raw, json)
Hash identifier: P11hwCSYDVdgJRFwpX7W5HvmmQAKxxC2iEYJz5qwtXE=
Subject key identifier: C2:6E:ED:D6:D2:7A:F3:BA:45:8F:16:00:C3:19:2D:93:CD:EB:A0:0F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 53787C959791DB20AB7892536AADC5986FBFE6E2
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/288fe48a-a32f-455c-98d4-b9aa49d2804a.roa
Signing time: Wed 12 Aug 2026 21:06:50 +0000
ROA not before: Wed 12 Aug 2026 21:06:50 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc3:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:78:7c:95:97:91:db:20:ab:78:92:53:6a:ad:c5:98:6f:bf:e6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:50 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=554719dcf41574b08b0069c42887582daf71ac9191151cacb1cdcf8ff2ce6858, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:32:cb:c2:e5:85:81:cf:01:13:5e:d6:fc:
90:63:ce:3e:0f:93:d2:82:3e:0b:3f:81:a9:ae:37:
28:23:d1:4c:7d:a8:a9:fe:88:35:69:13:12:45:27:
6d:70:0c:04:b8:38:ad:27:31:9a:8b:84:2a:9c:52:
75:ea:fe:c8:50:af:34:9f:8e:75:1b:eb:83:26:30:
f0:c8:47:f8:2c:0f:c9:93:6f:44:14:b2:fc:ea:73:
77:71:af:9b:c7:e5:84:c0:5e:5b:f9:67:64:30:36:
0c:4a:a4:a9:98:05:13:37:de:59:90:c0:02:d4:de:
e0:4a:de:44:94:c8:fd:54:60:61:b9:00:e8:92:73:
82:40:83:6a:8b:84:77:c4:a6:3c:1c:ba:a1:1b:1a:
51:b0:33:91:21:74:ea:13:91:80:2f:c2:8e:09:f7:
52:9a:89:ba:65:db:8e:3c:d3:24:73:d5:df:fa:27:
ca:0f:cd:1b:a3:ae:f5:52:2d:5e:ce:bb:83:4b:e5:
9e:13:33:77:7c:93:da:54:5b:5b:15:8c:e9:c4:7d:
5c:b6:a6:51:e5:b3:61:c6:66:de:2b:aa:ed:f0:d4:
9d:3f:10:5c:60:f4:12:b2:60:05:9b:0d:52:7c:07:
e5:f2:36:61:db:45:b4:e9:f7:91:ae:c4:46:99:f5:
98:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6E:ED:D6:D2:7A:F3:BA:45:8F:16:00:C3:19:2D:93:CD:EB:A0:0F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/288fe48a-a32f-455c-98d4-b9aa49d2804a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:8000::/36
Signature Algorithm: sha256WithRSAEncryption
89:90:9c:5a:fe:2c:19:65:50:ba:42:0f:c0:5b:00:c7:c7:45:
03:a1:e1:e8:43:88:eb:11:c6:b1:d9:40:b6:9a:50:69:c6:ad:
54:6a:3c:b4:9c:0f:90:16:35:df:48:42:59:c1:0d:c4:66:25:
e1:92:62:ef:5b:c9:a9:66:8c:bb:9a:2e:cd:bd:7d:8a:75:ee:
d0:bb:73:f5:6d:6e:97:08:84:9d:78:8b:a2:d9:47:01:43:8c:
de:09:80:9b:81:be:15:19:4b:3f:4f:1e:1c:05:1f:49:96:51:
74:7a:8c:3d:a6:d7:57:9b:bc:63:69:43:d2:18:70:1d:37:0c:
41:de:25:4a:c2:b5:01:bf:4a:04:8b:11:9b:af:82:1f:42:62:
82:04:3e:d5:3c:31:f3:c3:c1:18:84:d4:b7:81:8b:b0:b6:95:
07:db:d0:9b:da:2c:4c:77:39:70:0d:44:da:2c:2b:1b:74:4d:
93:0a:a3:f9:a3:81:ed:45:ee:c0:72:79:4a:23:94:80:a7:db:
25:e1:ac:51:37:b0:d8:d0:d5:bc:92:19:e0:0a:84:89:94:3f:
16:9d:5a:6c:88:50:45:fd:7d:dd:53:43:0f:77:b8:07:44:0b:
a1:4a:5b:d2:88:51:29:2c:38:3a:9c:2d:a4:52:e8:ee:92:79:
35:80:fa:19
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUU3h8lZeR2yCreJJTaq3FmG+/5uIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMTA2NTBaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDU1NDcxOWRjZjQxNTc0YjA4YjAwNjljNDI4ODc1ODJkYWY3MWFjOTE5MTE1
MWNhY2IxY2RjZjhmZjJjZTY4NTgxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALg5MsvC5YWBzwETXtb8kGPOPg+T0oI+Cz+Bqa43KCPRTH2oqf6INWkTEkUn
bXAMBLg4rScxmouEKpxSder+yFCvNJ+OdRvrgyYw8MhH+CwPyZNvRBSy/Opzd3Gv
m8flhMBeW/lnZDA2DEqkqZgFEzfeWZDAAtTe4EreRJTI/VRgYbkA6JJzgkCDaouE
d8SmPBy6oRsaUbAzkSF06hORgC/Cjgn3UpqJumXbjjzTJHPV3/onyg/NG6Ou9VIt
Xs67g0vlnhMzd3yT2lRbWxWM6cR9XLamUeWzYcZm3iuq7fDUnT8QXGD0ErJgBZsN
UnwH5fI2YdtFtOn3ka7ERpn1mI0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTCbu3W
0nrzukWPFgDDGS2TzeugDzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
Mjg4ZmU0OGEtYTMyZi00NTVjLTk4ZDQtYjlhYTQ5ZDI4MDRhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8OA
MA0GCSqGSIb3DQEBCwUAA4IBAQCJkJxa/iwZZVC6Qg/AWwDHx0UDoeHoQ4jrEcax
2UC2mlBpxq1Uajy0nA+QFjXfSEJZwQ3EZiXhkmLvW8mpZoy7mi7NvX2Kde7Qu3P1
bW6XCISdeIui2UcBQ4zeCYCbgb4VGUs/Tx4cBR9JllF0eow9ptdXm7xjaUPSGHAd
NwxB3iVKwrUBv0oEixGbr4IfQmKCBD7VPDHzw8EYhNS3gYuwtpUH29Cb2ixMdzlw
DUTaLCsbdE2TCqP5o4HtRe7AcnlKI5SAp9sl4axRN7DY0NW8khngCoSJlD8WnVps
iFBF/X3dU0MPd7gHRAuhSlvSiFEpLDg6nC2kUujuknk1gPoZ
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:32:09 2026 by rpki-client