Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/381b8bd2-48c9-4352-a3dd-bdca306f7048.roa
File: 381b8bd2-48c9-4352-a3dd-bdca306f7048.roa (raw, json)
Hash identifier: A+VXpOYmcR+LzyouITKaKsglvEK7rcetsDtlh5jrPcg=
Subject key identifier: 33:78:D6:8D:AC:44:18:D5:5E:C1:11:AD:E0:FE:B9:99:59:27:BD:C3
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 0A9F9E89945D300C964E35AD2DDEAA695B5F4721
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/381b8bd2-48c9-4352-a3dd-bdca306f7048.roa
Signing time: Wed 12 Aug 2026 21:06:53 +0000
ROA not before: Wed 12 Aug 2026 21:06:53 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9f:9e:89:94:5d:30:0c:96:4e:35:ad:2d:de:aa:69:5b:5f:47:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:53 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=5c572912d96112148f2f40b5a84279846c63c45b91babaaeb847f95b2249423e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:7c:71:aa:6e:aa:4a:8d:6e:d2:a2:5a:a2:
ad:74:d3:0c:c8:67:01:80:34:2e:00:43:29:ef:2d:
18:51:f1:1c:81:47:1e:0e:5a:64:a2:48:fb:42:0c:
56:4a:c9:ab:a1:91:46:ad:7c:69:b1:ef:a7:43:d7:
b7:c3:8d:35:6c:03:bf:20:92:bc:5f:0e:e1:e0:f6:
97:63:37:d1:9d:00:59:c8:ef:38:a1:62:ed:e4:83:
fc:de:ff:36:97:ea:ac:a3:f6:71:fc:97:35:ab:ec:
f5:99:69:ad:ca:b8:37:af:70:be:ef:39:ab:03:f3:
15:9c:06:37:d8:c7:bc:f6:46:64:dc:37:fd:4f:f9:
ec:fc:66:d7:13:01:74:6d:0e:f1:6f:f5:58:0f:04:
04:9e:b6:fe:70:44:78:33:c3:4a:00:7e:9b:17:5d:
0a:dc:98:bc:e8:fc:cd:e8:5c:fc:40:af:b3:51:a1:
0f:6e:d9:d6:bd:d6:16:ab:b3:a9:1f:12:f3:4f:37:
62:93:11:11:12:be:af:37:10:bd:eb:c1:1f:03:23:
53:ce:7f:5b:c5:7c:58:85:c0:1a:c2:1e:a1:88:48:
6d:bc:ca:f8:5c:3c:e2:24:14:da:f6:5a:40:2f:f1:
57:34:44:2a:b6:e4:4a:ee:99:cc:d0:e5:98:78:45:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:78:D6:8D:AC:44:18:D5:5E:C1:11:AD:E0:FE:B9:99:59:27:BD:C3
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/381b8bd2-48c9-4352-a3dd-bdca306f7048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:6000::/36
Signature Algorithm: sha256WithRSAEncryption
63:4d:fa:8c:11:c1:2d:fb:fb:48:3e:cf:a8:d6:9a:3d:05:91:
cf:32:1d:14:2a:dc:85:e4:73:60:dd:30:17:35:d2:f1:61:0e:
70:4b:c2:a9:8a:10:d8:6d:bb:7f:2e:32:80:e1:f0:86:f0:58:
19:95:54:78:c9:96:38:55:ce:77:71:a2:bd:e5:0f:4b:4d:6d:
6b:06:d5:66:ea:b7:83:2b:8a:18:39:2e:ea:14:91:fa:92:ef:
81:21:be:0d:65:9c:06:29:de:d0:25:13:90:a9:56:52:cf:7b:
8c:8c:36:90:83:9d:1e:4d:2b:c7:5e:fc:ba:9a:87:74:0a:e4:
dc:8b:03:0c:1e:ae:2a:8a:6d:c7:90:1c:4f:af:c4:bd:5a:66:
cc:75:0b:61:f5:02:bd:df:e4:f2:36:25:c0:f8:b3:e7:9b:18:
26:e1:89:1c:b2:05:37:01:96:97:ef:63:e2:2e:10:a4:43:19:
ee:d8:12:0c:bd:1d:67:1f:ed:4a:e2:61:4f:02:65:45:58:e3:
ae:bd:48:24:0a:5e:66:8b:65:2d:44:28:73:f2:05:4d:d8:dc:
29:10:76:32:6c:1b:9e:7a:4b:1c:f2:42:be:f7:be:87:7b:08:
b6:f0:b8:09:2f:77:3e:39:9c:3c:73:4b:26:d4:ad:d7:ca:c4:
13:ce:49:01
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUCp+eiZRdMAyWTjWtLd6qaVtfRyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMTA2NTNaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDVjNTcyOTEyZDk2MTEyMTQ4ZjJmNDBiNWE4NDI3OTg0NmM2M2M0NWI5MWJh
YmFhZWI4NDdmOTViMjI0OTQyM2UxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKZefHGqbqpKjW7SolqirXTTDMhnAYA0LgBDKe8tGFHxHIFHHg5aZKJI+0IM
VkrJq6GRRq18abHvp0PXt8ONNWwDvyCSvF8O4eD2l2M30Z0AWcjvOKFi7eSD/N7/
NpfqrKP2cfyXNavs9Zlprcq4N69wvu85qwPzFZwGN9jHvPZGZNw3/U/57Pxm1xMB
dG0O8W/1WA8EBJ62/nBEeDPDSgB+mxddCtyYvOj8zehc/ECvs1GhD27Z1r3WFquz
qR8S8083YpMRERK+rzcQvevBHwMjU85/W8V8WIXAGsIeoYhIbbzK+Fw84iQU2vZa
QC/xVzREKrbkSu6ZzNDlmHhF3KECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQzeNaN
rEQY1V7BEa3g/rmZWSe9wzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
MzgxYjhiZDItNDhjOS00MzUyLWEzZGQtYmRjYTMwNmY3MDQ4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8dg
MA0GCSqGSIb3DQEBCwUAA4IBAQBjTfqMEcEt+/tIPs+o1po9BZHPMh0UKtyF5HNg
3TAXNdLxYQ5wS8KpihDYbbt/LjKA4fCG8FgZlVR4yZY4Vc53caK95Q9LTW1rBtVm
6reDK4oYOS7qFJH6ku+BIb4NZZwGKd7QJROQqVZSz3uMjDaQg50eTSvHXvy6mod0
CuTciwMMHq4qim3HkBxPr8S9WmbMdQth9QK93+TyNiXA+LPnmxgm4YkcsgU3AZaX
72PiLhCkQxnu2BIMvR1nH+1K4mFPAmVFWOOuvUgkCl5mi2UtRChz8gVN2NwpEHYy
bBueeksc8kK+976Hewi28LgJL3c+OZw8c0sm1K3XysQTzkkB
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:53 2026 by rpki-client