Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9e51a10e-4122-46c4-8ad6-fd3986182184.roa
File: 9e51a10e-4122-46c4-8ad6-fd3986182184.roa (raw, json)
Hash identifier: +kUxHetZaxN/ju7tqHpkbaPpvEYeGBCrDMWlZog8t5I=
Subject key identifier: 47:FB:F1:21:D2:5F:17:40:90:60:D3:24:EF:28:DC:78:8B:06:93:5A
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5D93AB95E7C32F1200B72AE53E5732C4CCF26C64
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9e51a10e-4122-46c4-8ad6-fd3986182184.roa
Signing time: Fri 15 May 2026 00:30:10 +0000
ROA not before: Fri 15 May 2026 00:30:10 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2001:3fc2:8000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:93:ab:95:e7:c3:2f:12:00:b7:2a:e5:3e:57:32:c4:cc:f2:6c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 15 00:30:10 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=a1eca14de58799f8def37c389529cae847958031de8093b201fc89434db30695, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:e3:e7:41:50:40:c7:20:e2:4e:4f:e0:2c:
ea:19:50:c8:f6:67:aa:64:bd:5a:5a:62:c5:cd:82:
e0:3d:83:cc:88:1d:e7:96:9a:6c:18:ba:39:b8:75:
a8:af:b8:31:aa:9e:c6:6e:3f:92:62:3c:6c:f0:5b:
36:dd:4d:f4:9c:09:8c:07:28:4f:ae:84:a4:69:c7:
d4:e6:f0:ff:2f:4d:5d:3e:98:6e:77:12:80:7e:af:
61:f7:03:37:7d:4f:a4:37:db:77:d0:8a:45:ae:f4:
45:97:a6:61:14:92:6e:39:9e:60:b9:43:bc:76:84:
60:c9:34:e3:83:ac:a2:6a:8b:a2:a0:1d:c6:5f:76:
e8:60:72:9c:a0:96:48:5b:c6:ef:87:0a:25:5a:f7:
55:04:04:c1:83:a0:43:67:ae:b3:49:1c:38:60:ba:
9b:66:d4:63:89:f2:90:5d:5a:74:b7:73:fd:4f:3c:
f4:68:3e:42:a3:d9:e9:2b:3b:14:31:37:8c:6c:1b:
65:7d:da:91:8c:7e:98:66:aa:d2:c1:dd:35:00:14:
d5:c4:1c:0d:30:ac:ed:c5:ed:d5:2c:7f:29:29:32:
0e:54:e3:e0:92:1a:dc:1a:71:62:8f:2a:d3:d4:3d:
c3:2c:9d:66:32:75:b3:15:e0:cb:f5:11:1a:7c:01:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FB:F1:21:D2:5F:17:40:90:60:D3:24:EF:28:DC:78:8B:06:93:5A
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9e51a10e-4122-46c4-8ad6-fd3986182184.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc2:8000::/36
Signature Algorithm: sha256WithRSAEncryption
1e:71:40:0c:b9:fa:07:2a:ed:0b:4b:27:77:3a:c2:5f:a8:d8:
3e:3d:c9:48:fd:09:09:b0:9b:22:a6:0d:1e:f1:af:60:f4:2c:
1f:80:a3:66:bf:35:f0:4e:1a:87:3b:ba:08:fc:34:0b:68:cc:
7c:53:0f:7a:25:44:61:3a:96:d7:64:b4:df:f6:09:f3:58:af:
46:80:f7:d3:60:32:a6:2f:17:13:17:48:35:1a:af:e4:0b:8d:
95:18:a8:75:d5:bd:65:df:49:02:be:b6:ea:56:2c:13:ca:89:
95:38:b8:0c:f8:37:4d:54:9b:e6:62:77:85:e1:67:92:d2:42:
91:a7:c6:6a:2b:b0:e7:f6:d0:72:ee:12:ff:09:40:e7:d7:1d:
05:8a:70:2b:b3:ee:66:53:a1:26:76:b7:40:00:4f:b2:7a:f9:
fe:ad:b8:63:87:c3:ce:f6:ef:0e:65:7a:b1:76:ab:ae:6b:24:
9b:53:3b:e9:a6:01:f2:bc:c8:5d:69:1f:d1:7f:8c:2e:c9:ad:
50:26:e4:b7:af:e6:6e:4e:4a:ac:3c:da:1f:7c:e8:d1:f4:b4:
35:d2:9b:92:87:67:d6:26:7e:1f:27:ba:9a:33:ef:b4:19:2e:
7d:c8:1e:fc:35:82:6f:cc:6d:58:4a:0d:f2:ef:cd:f3:05:c3:
60:9a:78:37
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXZOrlefDLxIAtyrlPlcyxMzybGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA1MTUwMDMwMTBaFw0yNjA4MTMyMzU5NTlaMHoxSTBHBgNV
BAUTQGExZWNhMTRkZTU4Nzk5ZjhkZWYzN2MzODk1MjljYWU4NDc5NTgwMzFkZTgw
OTNiMjAxZmM4OTQzNGRiMzA2OTUxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMtA4+dBUEDHIOJOT+As6hlQyPZnqmS9Wlpixc2C4D2DzIgd55aabBi6Obh1
qK+4Maqexm4/kmI8bPBbNt1N9JwJjAcoT66EpGnH1Obw/y9NXT6YbncSgH6vYfcD
N31PpDfbd9CKRa70RZemYRSSbjmeYLlDvHaEYMk044OsomqLoqAdxl926GBynKCW
SFvG74cKJVr3VQQEwYOgQ2eus0kcOGC6m2bUY4nykF1adLdz/U889Gg+QqPZ6Ss7
FDE3jGwbZX3akYx+mGaq0sHdNQAU1cQcDTCs7cXt1Sx/KSkyDlTj4JIa3BpxYo8q
09Q9wyydZjJ1sxXgy/URGnwBPdECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRH+/Eh
0l8XQJBg0yTvKNx4iwaTWjAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
OWU1MWExMGUtNDEyMi00NmM0LThhZDYtZmQzOTg2MTgyMTg0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8KA
MA0GCSqGSIb3DQEBCwUAA4IBAQAecUAMufoHKu0LSyd3OsJfqNg+PclI/QkJsJsi
pg0e8a9g9CwfgKNmvzXwThqHO7oI/DQLaMx8Uw96JURhOpbXZLTf9gnzWK9GgPfT
YDKmLxcTF0g1Gq/kC42VGKh11b1l30kCvrbqViwTyomVOLgM+DdNVJvmYneF4WeS
0kKRp8ZqK7Dn9tBy7hL/CUDn1x0FinArs+5mU6EmdrdAAE+yevn+rbhjh8PO9u8O
ZXqxdquuaySbUzvppgHyvMhdaR/Rf4wuya1QJuS3r+ZuTkqsPNoffOjR9LQ10puS
h2fWJn4fJ7qaM++0GS59yB78NYJvzG1YSg3y783zBcNgmng3
-----END CERTIFICATE-----
Generated at Fri May 22 14:19:13 2026 by rpki-client