Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2fcf6ce1-27ec-45cb-a728-a88dc1b86bdd.roa
File: 2fcf6ce1-27ec-45cb-a728-a88dc1b86bdd.roa (raw, json)
Hash identifier: wWcNyPV0blx36e4tXqpfKde4C9h1z28hr7QWo4eTmbs=
Subject key identifier: 30:C9:C7:24:1A:02:E5:2B:37:08:46:A2:C8:33:AE:EE:D2:DD:EC:8A
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 55ED70960765626FA9BA3E5BE6C561E34C40E104
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2fcf6ce1-27ec-45cb-a728-a88dc1b86bdd.roa
Signing time: Wed 12 Aug 2026 21:04:27 +0000
ROA not before: Wed 12 Aug 2026 21:04:27 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc5:1020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ed:70:96:07:65:62:6f:a9:ba:3e:5b:e6:c5:61:e3:4c:40:e1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:27 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=c13431346f8f28b7b0cb1a6be84515deac4fb88ed10fcce59d67ba06e2594f10, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:06:10:b0:62:95:20:dd:25:2a:99:d4:40:
6d:06:af:16:b9:75:56:6b:df:90:b0:18:cb:1f:ca:
47:eb:48:34:c3:fd:9b:33:b1:9f:52:94:c8:bb:91:
54:9a:41:e8:71:91:41:1a:7e:0b:a7:cc:b8:97:2f:
f7:95:08:b7:ae:6e:04:80:67:20:ba:2c:6c:50:d0:
29:46:2a:13:c4:cd:69:46:4b:28:79:72:fd:18:b9:
ea:4d:f7:b9:16:0d:41:e2:ef:2f:45:da:3b:2f:be:
57:6c:d0:92:74:44:a5:ed:37:20:5e:48:bb:d3:dd:
54:39:2e:6c:fa:c4:5a:e8:f7:e7:65:1f:32:8c:96:
a9:c2:77:b2:b0:90:5c:51:e7:27:d4:21:89:98:81:
4f:c3:c4:41:61:af:ae:fd:2a:11:6f:69:ee:e2:b5:
e2:54:d8:51:69:e9:66:44:e7:4c:a5:73:c6:1f:e4:
f2:00:42:aa:c7:0d:9a:b8:8c:e9:0a:95:70:84:e7:
45:22:d6:3f:f1:28:9d:98:56:d7:4d:8b:6a:68:8c:
50:12:2d:a9:40:99:c1:75:05:1b:95:41:44:51:3f:
d3:d1:2c:9f:d9:8a:54:91:f8:28:ad:0c:35:91:e0:
99:41:67:0f:c7:8f:f4:ea:5a:1a:9e:a5:c1:43:9f:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C9:C7:24:1A:02:E5:2B:37:08:46:A2:C8:33:AE:EE:D2:DD:EC:8A
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2fcf6ce1-27ec-45cb-a728-a88dc1b86bdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:1020::/48
Signature Algorithm: sha256WithRSAEncryption
58:36:09:ae:41:28:26:96:21:bf:fd:5f:5c:3d:b8:1c:01:7d:
f5:76:25:08:c9:02:19:6c:65:d4:92:19:e5:8a:41:97:cc:3a:
a3:04:67:8c:a2:80:95:a0:a2:bd:63:4e:de:49:35:83:a6:ce:
82:d5:ba:17:30:b0:69:3c:d5:28:dd:c9:06:80:55:6a:64:a6:
92:f8:a4:f6:55:fb:72:67:c7:02:e6:40:e9:c2:dd:ca:58:60:
70:33:64:f7:66:f1:90:d9:04:53:63:ce:9d:d1:a0:26:67:10:
f9:bc:04:b9:3b:68:98:b4:fd:64:39:33:c8:7e:ee:80:1c:d1:
b6:5e:87:2a:33:83:15:f0:cc:b0:36:fc:9b:c7:63:ed:fc:3f:
25:c0:78:ed:dc:23:ff:6f:3b:aa:4c:40:3c:a1:5c:4e:17:f9:
6c:13:16:d9:b5:6a:ce:fc:e2:f1:14:fd:04:03:13:1c:54:3d:
1d:47:5d:ca:1b:8d:44:0f:07:7e:71:08:61:d3:6b:93:70:88:
52:3b:49:16:90:fd:a9:b3:d5:a1:b0:22:b5:41:ff:45:f3:fb:
83:63:8a:21:d2:86:34:ac:f7:24:63:b3:86:22:f4:4a:38:12:
8a:a4:74:c3:ed:6f:62:24:49:fe:1e:c4:e4:6e:ab:94:e7:59:
14:c3:10:67
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUVe1wlgdlYm+puj5b5sVh40xA4QQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMTA0MjdaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGMxMzQzMTM0NmY4ZjI4YjdiMGNiMWE2YmU4NDUxNWRlYWM0ZmI4OGVkMTBm
Y2NlNTlkNjdiYTA2ZTI1OTRmMTAxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALSvBhCwYpUg3SUqmdRAbQavFrl1VmvfkLAYyx/KR+tINMP9mzOxn1KUyLuR
VJpB6HGRQRp+C6fMuJcv95UIt65uBIBnILosbFDQKUYqE8TNaUZLKHly/Ri56k33
uRYNQeLvL0XaOy++V2zQknREpe03IF5Iu9PdVDkubPrEWuj352UfMoyWqcJ3srCQ
XFHnJ9QhiZiBT8PEQWGvrv0qEW9p7uK14lTYUWnpZkTnTKVzxh/k8gBCqscNmriM
6QqVcITnRSLWP/EonZhW102LamiMUBItqUCZwXUFG5VBRFE/09Esn9mKVJH4KK0M
NZHgmUFnD8eP9OpaGp6lwUOfG08CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQwycck
GgLlKzcIRqLIM67u0t3sijAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
MmZjZjZjZTEtMjdlYy00NWNiLWE3MjgtYTg4ZGMxYjg2YmRkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABP8UQ
IDANBgkqhkiG9w0BAQsFAAOCAQEAWDYJrkEoJpYhv/1fXD24HAF99XYlCMkCGWxl
1JIZ5YpBl8w6owRnjKKAlaCivWNO3kk1g6bOgtW6FzCwaTzVKN3JBoBVamSmkvik
9lX7cmfHAuZA6cLdylhgcDNk92bxkNkEU2POndGgJmcQ+bwEuTtomLT9ZDkzyH7u
gBzRtl6HKjODFfDMsDb8m8dj7fw/JcB47dwj/287qkxAPKFcThf5bBMW2bVqzvzi
8RT9BAMTHFQ9HUddyhuNRA8HfnEIYdNrk3CIUjtJFpD9qbPVobAitUH/RfP7g2OK
IdKGNKz3JGOzhiL0SjgSiqR0w+1vYiRJ/h7E5G6rlOdZFMMQZw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:35 2026 by rpki-client