Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/75dc8be8-9212-4826-ae3f-4195c6e022eb.roa
File: 75dc8be8-9212-4826-ae3f-4195c6e022eb.roa (raw, json)
Hash identifier: gkqe5c+NU+YC0MVMgoM3aI2XL6HL1QlfA6CvfJIP4/Y=
Subject key identifier: CD:D3:E2:56:C9:1A:6E:DA:6A:EE:2C:31:DA:43:3D:DD:F3:1D:BD:9B
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5CD0BBB5C7A93DA956301C7F3D9A5186505BA086
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/75dc8be8-9212-4826-ae3f-4195c6e022eb.roa
Signing time: Wed 12 Aug 2026 21:06:43 +0000
ROA not before: Wed 12 Aug 2026 21:06:43 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:6800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d0:bb:b5:c7:a9:3d:a9:56:30:1c:7f:3d:9a:51:86:50:5b:a0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:43 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=d8c7fee1ce7239cd41a1a422b4e4e4f253aa13fffdfb060c90558f8c371a3e6c, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:d6:ff:52:5a:88:cb:68:6c:53:80:91:8e:
4e:b7:d7:f3:3e:af:cd:4d:38:8b:4c:48:f4:ee:c3:
4c:58:2a:fd:7e:82:41:d8:95:69:72:f7:54:30:d9:
24:c8:82:f6:f2:32:a5:d4:8e:38:d8:f4:bf:ea:9f:
67:fe:ac:cc:14:00:5d:c0:9c:16:f8:d5:08:b5:c4:
8a:86:0e:cc:c4:32:02:71:76:4f:68:f3:8a:d3:e3:
29:22:3c:9d:b2:85:1f:11:5c:ba:dd:e2:a3:87:1d:
e5:d8:4b:5f:d2:ba:d7:6c:8b:b3:2f:53:e7:b2:68:
95:69:8d:d8:ba:16:a1:33:7e:65:d0:e5:e2:dc:42:
4f:e8:03:9b:97:ee:fe:ca:48:e7:72:42:d4:1d:b7:
ab:c1:13:c4:74:88:6e:64:66:e7:9d:2f:5e:fe:9c:
1d:a9:6e:92:94:83:f8:ae:e7:54:27:fd:56:76:d9:
59:4d:37:5c:16:49:a6:51:89:e7:40:f3:e5:6a:cc:
c7:46:dd:cc:fb:3f:24:ef:2b:1c:c0:aa:b9:f5:94:
ab:72:7e:ae:1d:46:2b:71:34:fb:e3:cf:84:2c:4d:
3a:ca:dd:da:d1:ba:a5:d1:97:e2:5f:f9:f2:54:43:
75:fe:59:e2:cd:26:a9:07:7a:ad:b4:65:a0:04:f7:
b3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D3:E2:56:C9:1A:6E:DA:6A:EE:2C:31:DA:43:3D:DD:F3:1D:BD:9B
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/75dc8be8-9212-4826-ae3f-4195c6e022eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:6800::/40
Signature Algorithm: sha256WithRSAEncryption
23:de:e9:e0:c8:aa:af:51:38:ab:35:7d:a9:ad:c3:fb:08:c9:
a7:b6:28:aa:93:3c:09:16:2a:42:db:ee:80:d7:97:9d:c0:a9:
02:9b:16:ae:6e:be:59:eb:6c:5f:6e:b4:55:5a:bb:db:63:9c:
75:aa:1e:7b:be:c4:44:64:d1:d0:be:0f:c6:cc:ee:88:84:d7:
c7:59:9e:85:d4:a1:c9:a3:97:19:db:40:71:34:ba:6f:ed:f6:
ac:98:2b:a1:86:99:d2:97:34:79:f4:96:ab:5b:c7:8d:30:43:
d8:27:fb:4d:c7:b5:5f:cf:dc:cc:78:81:46:39:db:0e:c0:a8:
99:e8:9b:26:e2:49:73:27:0a:ed:02:4f:18:fd:23:b6:0d:11:
53:08:07:43:a2:ae:3c:cd:c5:73:a9:a3:d2:cf:77:18:3d:42:
56:79:37:87:79:85:63:cd:19:cc:af:e3:52:c5:15:8a:7d:b3:
1e:8b:51:db:b8:46:f7:74:c7:b0:d6:14:40:41:6d:92:0a:71:
f3:a4:3c:66:2b:39:a7:3c:b1:0e:77:e0:0e:b3:ef:27:98:82:
c5:bd:0b:a1:36:05:6d:8e:ee:fa:3c:48:61:bb:dd:b2:c4:7a:
9d:f7:18:d9:5e:c6:08:93:44:2d:da:17:de:23:9f:fc:fe:3e:
30:67:2b:fa
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXNC7tcepPalWMBx/PZpRhlBboIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMTA2NDNaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ4YzdmZWUxY2U3MjM5Y2Q0MWExYTQyMmI0ZTRlNGYyNTNhYTEzZmZmZGZi
MDYwYzkwNTU4ZjhjMzcxYTNlNmMxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKrP1v9SWojLaGxTgJGOTrfX8z6vzU04i0xI9O7DTFgq/X6CQdiVaXL3VDDZ
JMiC9vIypdSOONj0v+qfZ/6szBQAXcCcFvjVCLXEioYOzMQyAnF2T2jzitPjKSI8
nbKFHxFcut3io4cd5dhLX9K612yLsy9T57JolWmN2LoWoTN+ZdDl4txCT+gDm5fu
/spI53JC1B23q8ETxHSIbmRm550vXv6cHalukpSD+K7nVCf9VnbZWU03XBZJplGJ
50Dz5WrMx0bdzPs/JO8rHMCqufWUq3J+rh1GK3E0++PPhCxNOsrd2tG6pdGX4l/5
8lRDdf5Z4s0mqQd6rbRloAT3s1sCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTN0+JW
yRpu2mruLDHaQz3d8x29mzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NzVkYzhiZTgtOTIxMi00ODI2LWFlM2YtNDE5NWM2ZTAyMmViLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8do
MA0GCSqGSIb3DQEBCwUAA4IBAQAj3ungyKqvUTirNX2prcP7CMmntiiqkzwJFipC
2+6A15edwKkCmxaubr5Z62xfbrRVWrvbY5x1qh57vsREZNHQvg/GzO6IhNfHWZ6F
1KHJo5cZ20BxNLpv7fasmCuhhpnSlzR59JarW8eNMEPYJ/tNx7Vfz9zMeIFGOdsO
wKiZ6Jsm4klzJwrtAk8Y/SO2DRFTCAdDoq48zcVzqaPSz3cYPUJWeTeHeYVjzRnM
r+NSxRWKfbMei1HbuEb3dMew1hRAQW2SCnHzpDxmKzmnPLEOd+AOs+8nmILFvQuh
NgVtju76PEhhu92yxHqd9xjZXsYIk0Qt2hfeI5/8/j4wZyv6
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:30 2026 by rpki-client