Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4851f4d9-96fd-48e3-9218-7d79d3422d7a.roa
File: 4851f4d9-96fd-48e3-9218-7d79d3422d7a.roa (raw, json)
Hash identifier: TAMwuSpoV8E/27aPAtXGqO/fG9Fkvuww7Dzshqd/PP0=
Subject key identifier: B7:20:21:77:02:E5:A7:0C:65:4A:84:8B:CA:4F:DC:88:39:4C:46:8B
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 39DF212ABE2052F1EB8402C8599C4BD9513EAAA0
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4851f4d9-96fd-48e3-9218-7d79d3422d7a.roa
Signing time: Wed 12 Aug 2026 21:05:33 +0000
ROA not before: Wed 12 Aug 2026 21:05:33 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:28c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:df:21:2a:be:20:52:f1:eb:84:02:c8:59:9c:4b:d9:51:3e:aa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:33 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=168f4fc427d4376893283b31553fdb61758ca51d0118543159d3e3884f4df6cb, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:52:cb:0e:e9:10:b2:03:d4:2b:41:8d:a0:
a9:e0:2b:c4:69:bd:d2:b9:79:b3:5b:13:5e:5a:68:
b3:db:d5:5f:d3:e4:a1:0d:40:53:40:5b:ff:38:7e:
1a:e7:f1:89:63:5e:e9:6e:41:2d:38:fa:04:9e:df:
c2:87:60:be:e5:d2:7a:01:c3:fa:ca:02:82:70:17:
cf:1f:1f:77:69:19:4c:6c:dc:f2:1b:9e:33:49:97:
1a:7b:99:a4:29:ce:41:7f:3c:6c:6b:57:1e:50:be:
66:1e:97:fa:35:7e:6c:31:8d:d9:f5:12:6d:35:59:
91:d3:dc:cc:37:d1:39:71:2d:bd:9a:e3:3f:c5:41:
0a:8c:07:c7:d0:c9:3f:c0:03:e3:21:dd:80:51:c8:
3f:ae:a8:56:2a:e1:c4:11:6c:42:89:62:4e:da:5d:
89:42:75:18:54:c8:e1:9f:06:ed:bb:56:ee:9a:44:
1b:c4:a2:fb:5f:62:9a:c8:9b:41:3a:58:93:d9:ad:
6f:76:ca:d8:52:28:48:72:d5:9c:a8:c0:f6:1d:7f:
f7:e9:e5:13:7e:40:61:db:f5:32:1c:88:1e:3a:80:
08:ae:8e:95:ea:1e:ba:0c:60:c5:69:3a:93:44:21:
23:43:f6:35:2e:a0:fa:29:e3:a4:a9:54:c0:a7:96:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:20:21:77:02:E5:A7:0C:65:4A:84:8B:CA:4F:DC:88:39:4C:46:8B
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4851f4d9-96fd-48e3-9218-7d79d3422d7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:28c0::/48
Signature Algorithm: sha256WithRSAEncryption
b5:c3:9f:2a:d4:c2:b4:0d:76:39:0d:a7:40:d1:c6:e7:af:18:
78:c7:ef:61:d9:35:ae:c6:41:18:5b:48:fb:85:25:c3:42:db:
09:56:77:32:6f:69:7a:13:f5:7a:31:d0:1f:98:4b:8f:31:82:
9d:db:f0:a3:fe:c9:54:56:f5:57:f7:6d:f5:41:ed:77:50:33:
45:96:70:be:85:2b:8e:f4:28:e7:9a:e7:aa:b3:37:4f:70:98:
95:25:b6:4b:63:34:35:c0:7d:39:10:a4:e0:20:41:9b:6c:5f:
fa:c2:03:20:10:3f:2a:e3:69:dd:b7:e0:0b:26:a2:45:78:9c:
2f:1f:5f:d1:e0:bc:36:88:3e:90:13:1e:de:8a:66:45:01:55:
9c:80:8f:00:00:e9:e0:4a:ec:45:be:78:b9:17:f7:05:30:fa:
11:03:40:a5:f6:98:69:3e:78:68:22:bb:52:0a:62:19:b4:ff:
15:1b:97:b2:6e:c1:86:bb:c8:ca:44:f6:71:06:2f:71:99:c2:
43:c8:39:c8:2d:42:e2:10:5f:6f:f8:cc:05:6f:f4:f6:bc:73:
bb:29:96:37:79:87:3e:ba:eb:ba:01:25:03:1a:ca:ca:08:5e:
a7:c5:96:12:a2:38:66:f4:8b:c9:cc:07:86:c4:64:89:33:32:
a5:39:6e:df
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUOd8hKr4gUvHrhALIWZxL2VE+qqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMTA1MzNaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDE2OGY0ZmM0MjdkNDM3Njg5MzI4M2IzMTU1M2ZkYjYxNzU4Y2E1MWQwMTE4
NTQzMTU5ZDNlMzg4NGY0ZGY2Y2IxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALoNUssO6RCyA9QrQY2gqeArxGm90rl5s1sTXlpos9vVX9PkoQ1AU0Bb/zh+
GufxiWNe6W5BLTj6BJ7fwodgvuXSegHD+soCgnAXzx8fd2kZTGzc8hueM0mXGnuZ
pCnOQX88bGtXHlC+Zh6X+jV+bDGN2fUSbTVZkdPczDfROXEtvZrjP8VBCowHx9DJ
P8AD4yHdgFHIP66oVirhxBFsQoliTtpdiUJ1GFTI4Z8G7btW7ppEG8Si+19imsib
QTpYk9mtb3bK2FIoSHLVnKjA9h1/9+nlE35AYdv1MhyIHjqACK6OleoeugxgxWk6
k0QhI0P2NS6g+injpKlUwKeW5NcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS3ICF3
AuWnDGVKhIvKT9yIOUxGizAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NDg1MWY0ZDktOTZmZC00OGUzLTkyMTgtN2Q3OWQzNDIyZDdhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABP8co
wDANBgkqhkiG9w0BAQsFAAOCAQEAtcOfKtTCtA12OQ2nQNHG568YeMfvYdk1rsZB
GFtI+4Ulw0LbCVZ3Mm9pehP1ejHQH5hLjzGCndvwo/7JVFb1V/dt9UHtd1AzRZZw
voUrjvQo55rnqrM3T3CYlSW2S2M0NcB9ORCk4CBBm2xf+sIDIBA/KuNp3bfgCyai
RXicLx9f0eC8Nog+kBMe3opmRQFVnICPAADp4ErsRb54uRf3BTD6EQNApfaYaT54
aCK7UgpiGbT/FRuXsm7BhrvIykT2cQYvcZnCQ8g5yC1C4hBfb/jMBW/09rxzuymW
N3mHPrrrugElAxrKyghep8WWEqI4ZvSLycwHhsRkiTMypTlu3w==
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:10 2026 by rpki-client