Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/731f7c91-0ba7-488a-903f-d8372bd8224b.roa
File: 731f7c91-0ba7-488a-903f-d8372bd8224b.roa (raw, json)
Hash identifier: wrJJgfjwscwVkUF9un0eBeFzB2+bUmzDaTjp8q0Cy4Q=
Subject key identifier: 2C:B4:57:55:AB:64:95:14:D2:B7:FA:CB:7D:A7:B1:53:F1:77:67:20
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2B1F5B247A1CEA5641A78F9AB66A16F7F1D4756A
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/731f7c91-0ba7-488a-903f-d8372bd8224b.roa
Signing time: Wed 12 Aug 2026 21:06:51 +0000
ROA not before: Wed 12 Aug 2026 21:06:51 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:1f:5b:24:7a:1c:ea:56:41:a7:8f:9a:b6:6a:16:f7:f1:d4:75:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:51 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=ff24f2782c9b206c3f95a3bffc47a3259102f2d5ffb4bc9f99ba0808a39e61ff, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:34:ad:1c:46:76:be:dd:25:a8:d8:48:85:92:
99:2f:c5:ff:b6:52:aa:8b:de:2a:12:04:eb:8b:a6:
7a:cd:3a:34:6b:5c:76:1a:f2:65:3d:3e:de:ed:2e:
e7:39:2d:fd:bf:1d:57:77:48:83:77:45:01:8b:c5:
e1:67:ad:ef:15:90:39:ab:32:c8:80:80:50:68:38:
04:d4:ee:10:eb:fb:09:f9:a1:96:fb:5d:a4:05:58:
e8:6f:d7:33:40:26:41:73:6c:1f:7c:05:51:3a:89:
f4:a5:e2:84:a2:fe:da:98:d0:c2:5c:c9:ce:46:8c:
3f:e0:b2:6b:aa:6c:c6:69:02:50:dd:1d:70:62:8e:
c5:07:50:23:0a:33:87:19:5f:23:3e:18:5e:ef:59:
c5:e1:a8:43:75:0c:41:a5:de:2f:59:2a:58:1c:9b:
90:ca:fa:65:81:95:e7:14:bd:60:06:ce:23:be:c4:
43:fa:9c:3d:d8:c1:8a:df:e9:54:20:42:3a:1c:11:
b3:5f:ee:7c:4e:e4:a1:9f:86:0d:44:8d:97:d1:ea:
6c:27:02:df:16:4c:a7:db:03:a8:f0:f3:88:ca:9a:
84:92:60:ae:bf:84:72:ca:df:78:ab:44:b8:26:d8:
15:63:3b:b6:94:f4:96:32:74:22:bb:36:a7:79:f3:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B4:57:55:AB:64:95:14:D2:B7:FA:CB:7D:A7:B1:53:F1:77:67:20
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/731f7c91-0ba7-488a-903f-d8372bd8224b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:1000::/36
Signature Algorithm: sha256WithRSAEncryption
8a:ac:65:6a:b1:7e:dc:d4:de:dd:9e:22:36:95:e7:eb:56:85:
92:b9:c4:14:f8:af:48:9e:66:46:93:83:e7:7c:05:0e:70:98:
e2:c6:ae:02:5c:72:a2:79:78:b2:7f:cc:ec:0f:8f:50:cf:3b:
7c:91:a7:17:c3:4e:11:f8:df:63:d7:a4:54:38:c2:5d:b6:e4:
47:d6:67:7c:6e:cb:34:e0:85:7c:51:3f:9c:01:7d:9c:04:97:
cb:0f:f6:8b:86:23:e5:dc:e3:7b:97:7b:75:dd:ff:79:db:2f:
12:e9:a5:ce:6d:6a:53:c5:45:2a:dd:94:86:7c:44:0f:1e:1f:
3c:b4:e4:bb:8b:0c:bc:47:14:0d:c4:13:98:f9:c0:dc:1d:aa:
b1:b9:8d:34:16:b6:e6:3c:97:fd:7c:9a:fe:31:0c:4e:1a:ec:
6d:a7:7c:70:07:0c:d7:82:d6:09:82:16:69:c9:ed:60:a8:25:
66:42:cf:1c:ee:29:a9:71:8c:a9:23:21:b5:78:1e:1b:00:30:
b6:0b:3d:2e:77:3c:44:a5:d9:e4:c2:bf:b1:b0:80:b2:3b:71:
fe:d1:16:27:67:1a:bd:12:15:58:b3:f2:39:41:bf:b9:88:97:
6b:38:b8:9c:ac:b7:be:02:fb:df:d0:b6:b0:14:02:77:d9:70:
56:8f:74:58
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUKx9bJHoc6lZBp4+atmoW9/HUdWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMTA2NTFaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGZmMjRmMjc4MmM5YjIwNmMzZjk1YTNiZmZjNDdhMzI1OTEwMmYyZDVmZmI0
YmM5Zjk5YmEwODA4YTM5ZTYxZmYxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN80rRxGdr7dJajYSIWSmS/F/7ZSqoveKhIE64umes06NGtcdhryZT0+3u0u
5zkt/b8dV3dIg3dFAYvF4Wet7xWQOasyyICAUGg4BNTuEOv7CfmhlvtdpAVY6G/X
M0AmQXNsH3wFUTqJ9KXihKL+2pjQwlzJzkaMP+Cya6psxmkCUN0dcGKOxQdQIwoz
hxlfIz4YXu9ZxeGoQ3UMQaXeL1kqWBybkMr6ZYGV5xS9YAbOI77EQ/qcPdjBit/p
VCBCOhwRs1/ufE7koZ+GDUSNl9HqbCcC3xZMp9sDqPDziMqahJJgrr+EcsrfeKtE
uCbYFWM7tpT0ljJ0Irs2p3nzNkcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQstFdV
q2SVFNK3+st9p7FT8XdnIDAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NzMxZjdjOTEtMGJhNy00ODhhLTkwM2YtZDgzNzJiZDgyMjRiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8cQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCKrGVqsX7c1N7dniI2lefrVoWSucQU+K9InmZG
k4PnfAUOcJjixq4CXHKieXiyf8zsD49Qzzt8kacXw04R+N9j16RUOMJdtuRH1md8
bss04IV8UT+cAX2cBJfLD/aLhiPl3ON7l3t13f952y8S6aXObWpTxUUq3ZSGfEQP
Hh88tOS7iwy8RxQNxBOY+cDcHaqxuY00FrbmPJf9fJr+MQxOGuxtp3xwBwzXgtYJ
ghZpye1gqCVmQs8c7impcYypIyG1eB4bADC2Cz0udzxEpdnkwr+xsICyO3H+0RYn
Zxq9EhVYs/I5Qb+5iJdrOLicrLe+Avvf0LawFAJ32XBWj3RY
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:17 2026 by rpki-client