Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/605bf038-2ecc-4ad1-943d-78882dea3d7d.roa
File: 605bf038-2ecc-4ad1-943d-78882dea3d7d.roa (raw, json)
Hash identifier: rKh0e8tesd4UxwgOZn0jiLIhvh4sGXMP3P6/wzc+iLo=
Subject key identifier: 51:3D:66:BD:65:0C:15:0B:46:73:66:F5:2A:BF:23:4A:A9:22:90:11
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 177D9E387C0F79AEE91DD2956525C301EC0624DA
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/605bf038-2ecc-4ad1-943d-78882dea3d7d.roa
Signing time: Wed 12 Aug 2026 21:04:18 +0000
ROA not before: Wed 12 Aug 2026 21:04:18 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:4000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:7d:9e:38:7c:0f:79:ae:e9:1d:d2:95:65:25:c3:01:ec:06:24:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:18 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=a6f8afec34cdda04dd273dedb237b238a901cfc8760518dbf37797d5a62c5e7a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:28:40:16:3f:d3:20:6a:7f:a2:05:bb:04:a7:
0f:fd:b5:02:64:19:25:49:07:ea:a0:26:31:72:98:
de:41:68:5b:b1:65:6c:71:8a:33:49:b3:bb:c4:b3:
de:fe:be:44:dd:1a:ea:0f:af:07:cf:e8:ee:99:52:
ad:a4:45:11:42:b4:a4:6e:9d:be:7a:81:52:40:46:
4a:4c:ee:9f:28:88:6f:3e:96:40:72:67:43:80:b7:
ac:15:db:77:26:a8:a2:b8:04:71:5a:8b:10:8c:51:
e4:79:9f:e6:d1:6d:ef:36:22:46:46:f4:8f:1e:bd:
ab:29:62:d8:0d:1f:e4:86:67:2b:6c:d9:18:57:db:
e0:02:f8:12:74:d5:11:e0:1a:ce:19:ab:58:f8:fd:
35:fd:56:1e:6c:84:8b:88:68:8b:47:7e:55:df:06:
9b:6e:25:24:44:ac:b3:0a:6b:ee:e7:0c:b2:74:15:
91:3a:34:93:61:f2:f5:15:1b:6f:21:b0:56:36:b7:
8d:bd:68:64:38:c8:fe:e6:fa:96:71:bd:17:33:2b:
3b:8f:49:b9:38:02:67:60:35:05:8d:08:74:89:25:
70:ef:b5:c7:55:65:32:79:44:0f:7c:23:de:aa:b6:
e8:d0:10:ea:8f:43:28:ad:f4:f0:ec:4b:01:77:b0:
43:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3D:66:BD:65:0C:15:0B:46:73:66:F5:2A:BF:23:4A:A9:22:90:11
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/605bf038-2ecc-4ad1-943d-78882dea3d7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:4000::/36
Signature Algorithm: sha256WithRSAEncryption
23:3d:d9:04:7d:54:b1:b9:26:54:ac:e8:3e:73:b8:18:48:49:
fa:d3:f0:ff:0b:94:63:2e:b0:f7:5d:2a:c5:2a:66:3f:48:e7:
24:fb:8c:4f:06:0d:b0:11:b4:2a:22:1e:e2:06:d3:e1:cf:7c:
7a:79:f4:89:6b:d6:e7:6d:c1:ae:e8:e2:a9:33:ad:b8:6e:4e:
bd:84:9f:c6:9a:15:e4:c8:96:38:e9:fb:87:c5:ba:e8:fe:4d:
91:9e:d7:cb:3d:72:3b:12:fc:82:5d:07:c8:8a:1a:8c:d0:27:
32:c0:a3:4e:b1:46:13:66:4b:76:f8:3a:e0:a0:fb:f1:ba:02:
fc:32:89:88:8f:2b:57:1b:b5:a1:30:03:aa:c2:bf:12:3e:f6:
5b:99:c6:f6:26:f5:63:30:ab:b0:f9:d7:e2:4b:9d:94:5c:64:
74:52:6f:af:54:8c:80:92:51:7e:33:22:0a:79:01:3a:4b:37:
c2:a4:c1:72:a6:1a:ef:83:68:f6:f4:f3:b0:9e:a3:00:f2:00:
6b:51:a9:a2:12:e5:09:9b:72:1f:13:58:ae:fb:30:55:a4:7a:
da:11:c8:cf:7e:58:e1:60:e3:57:46:89:3c:30:3d:ca:95:3c:
79:d0:f8:7f:e0:0a:f8:de:d4:13:fe:5d:d8:f7:89:dc:87:98:
57:97:50:cd
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUF32eOHwPea7pHdKVZSXDAewGJNowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMTA0MThaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGE2ZjhhZmVjMzRjZGRhMDRkZDI3M2RlZGIyMzdiMjM4YTkwMWNmYzg3NjA1
MThkYmYzNzc5N2Q1YTYyYzVlN2ExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOooQBY/0yBqf6IFuwSnD/21AmQZJUkH6qAmMXKY3kFoW7FlbHGKM0mzu8Sz
3v6+RN0a6g+vB8/o7plSraRFEUK0pG6dvnqBUkBGSkzunyiIbz6WQHJnQ4C3rBXb
dyaoorgEcVqLEIxR5Hmf5tFt7zYiRkb0jx69qyli2A0f5IZnK2zZGFfb4AL4EnTV
EeAazhmrWPj9Nf1WHmyEi4hoi0d+Vd8Gm24lJESsswpr7ucMsnQVkTo0k2Hy9RUb
byGwVja3jb1oZDjI/ub6lnG9FzMrO49JuTgCZ2A1BY0IdIklcO+1x1VlMnlED3wj
3qq26NAQ6o9DKK308OxLAXewQ8kCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRRPWa9
ZQwVC0ZzZvUqvyNKqSKQETAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NjA1YmYwMzgtMmVjYy00YWQxLTk0M2QtNzg4ODJkZWEzZDdkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8dA
MA0GCSqGSIb3DQEBCwUAA4IBAQAjPdkEfVSxuSZUrOg+c7gYSEn60/D/C5RjLrD3
XSrFKmY/SOck+4xPBg2wEbQqIh7iBtPhz3x6efSJa9bnbcGu6OKpM624bk69hJ/G
mhXkyJY46fuHxbro/k2RntfLPXI7EvyCXQfIihqM0CcywKNOsUYTZkt2+DrgoPvx
ugL8MomIjytXG7WhMAOqwr8SPvZbmcb2JvVjMKuw+dfiS52UXGR0Um+vVIyAklF+
MyIKeQE6SzfCpMFyphrvg2j29POwnqMA8gBrUamiEuUJm3IfE1iu+zBVpHraEcjP
fljhYONXRok8MD3KlTx50Ph/4Ar43tQT/l3Y94nch5hXl1DN
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:32:45 2026 by rpki-client