Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9e51a10e-4122-46c4-8ad6-fd3986182184.roa
File: 9e51a10e-4122-46c4-8ad6-fd3986182184.roa (raw, json)
Hash identifier: 55wq4oQ1e60mg2Z7kn9gzpIWlVE+X+mfCRndx0Y4MBc=
Subject key identifier: 7C:71:47:EC:1A:76:79:C8:83:80:7A:EF:33:61:BB:55:24:37:24:07
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 78AF82F4E8D9AE7D7AC0E3F80860E6A77A1E85F9
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9e51a10e-4122-46c4-8ad6-fd3986182184.roa
Signing time: Mon 03 Aug 2026 00:40:07 +0000
ROA not before: Mon 03 Aug 2026 00:40:07 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2001:3fc2:8000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:af:82:f4:e8:d9:ae:7d:7a:c0:e3:f8:08:60:e6:a7:7a:1e:85:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 3 00:40:07 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=8aed4867c0f53b5cf2543e7247181c5c868e1b80fde76040a20d259539296761, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:08:eb:c7:b4:89:9f:cf:39:e6:42:ea:de:
76:f2:ba:11:8b:31:c2:ab:7c:bc:3e:04:ed:dd:62:
a3:c2:14:be:dc:03:4e:a5:36:18:b5:e3:55:b5:34:
75:7c:16:68:19:d3:00:c5:95:3d:19:f3:b6:ad:eb:
04:69:c3:46:b1:cd:74:99:23:e3:e8:41:74:43:f2:
1c:93:73:77:11:2e:dd:36:24:1d:d9:48:fd:44:39:
e3:de:6d:5b:e4:80:88:3c:8d:e1:ea:07:35:a8:13:
84:8b:a3:ff:a3:ee:b9:63:be:3a:0a:5b:ef:b5:10:
e9:43:17:6b:0a:94:e8:0f:81:f6:a9:ef:8f:1a:59:
1d:84:f8:70:64:98:17:75:71:ff:59:6b:d3:1b:48:
1a:8e:88:a1:98:b6:47:97:7e:13:df:35:23:40:9e:
d9:c4:b3:5b:45:b3:7c:c3:ee:1c:23:0a:1b:7f:c0:
6e:76:58:80:7c:73:a3:c0:27:82:7e:04:12:c4:51:
aa:41:3d:d5:c9:ef:5b:bd:37:ef:15:65:f9:9c:c6:
d3:d7:0a:44:99:6e:6f:56:6d:bc:48:0f:d8:90:68:
f6:2d:2e:76:a3:8a:e8:e4:76:0a:8d:82:22:27:43:
73:3e:aa:c1:e5:ab:99:ca:90:31:93:5c:be:df:6e:
16:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:71:47:EC:1A:76:79:C8:83:80:7A:EF:33:61:BB:55:24:37:24:07
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9e51a10e-4122-46c4-8ad6-fd3986182184.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc2:8000::/36
Signature Algorithm: sha256WithRSAEncryption
64:04:1f:e2:4c:f5:b1:72:b6:8e:2c:c6:14:da:49:80:bc:28:
d0:36:fa:f4:39:2b:79:f9:df:28:96:66:cd:52:cc:53:e9:d2:
ea:06:ef:41:7a:c6:30:95:7a:06:c3:44:db:e7:94:d4:21:66:
82:ce:0b:ea:76:34:c9:84:ad:11:36:73:24:ba:9f:df:00:cd:
ae:a3:2c:f1:b5:2e:f5:1c:cb:ad:c6:6e:8e:51:9c:d2:d4:0a:
84:b6:de:83:10:76:46:62:83:20:53:2b:0a:04:e0:39:8f:90:
57:62:ef:fe:11:1d:a4:77:85:5a:fa:8f:9c:ea:ef:33:39:cc:
b8:24:b6:09:b2:7c:97:28:dd:41:97:12:ae:c8:77:af:5e:d7:
5a:a6:2b:40:40:27:02:af:e0:e2:2d:1b:58:d1:af:03:04:ea:
64:4d:1c:31:0a:35:ae:2f:59:59:32:25:59:08:a2:a6:dd:40:
21:82:4b:26:ae:d8:0f:22:33:33:c8:96:aa:d1:ca:ce:6e:10:
5a:14:c3:42:ff:9d:f5:5f:2a:e7:32:38:7b:6b:5e:07:d5:93:
00:61:d1:da:c5:fa:57:01:81:5c:58:d8:66:70:47:db:88:28:
4c:23:a3:c8:2b:6a:6a:e5:cb:df:2e:87:8a:3c:4c:90:23:33:
a2:81:72:98
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUeK+C9OjZrn16wOP4CGDmp3oehfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MDMwMDQwMDdaFw0yNjExMDEyMzU5NTlaMHoxSTBHBgNV
BAUTQDhhZWQ0ODY3YzBmNTNiNWNmMjU0M2U3MjQ3MTgxYzVjODY4ZTFiODBmZGU3
NjA0MGEyMGQyNTk1MzkyOTY3NjExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANtBCOvHtImfzznmQuredvK6EYsxwqt8vD4E7d1io8IUvtwDTqU2GLXjVbU0
dXwWaBnTAMWVPRnztq3rBGnDRrHNdJkj4+hBdEPyHJNzdxEu3TYkHdlI/UQ5495t
W+SAiDyN4eoHNagThIuj/6PuuWO+Ogpb77UQ6UMXawqU6A+B9qnvjxpZHYT4cGSY
F3Vx/1lr0xtIGo6IoZi2R5d+E981I0Ce2cSzW0WzfMPuHCMKG3/AbnZYgHxzo8An
gn4EEsRRqkE91cnvW7037xVl+ZzG09cKRJlub1ZtvEgP2JBo9i0udqOK6OR2Co2C
IidDcz6qweWrmcqQMZNcvt9uFtMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR8cUfs
GnZ5yIOAeu8zYbtVJDckBzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
OWU1MWExMGUtNDEyMi00NmM0LThhZDYtZmQzOTg2MTgyMTg0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8KA
MA0GCSqGSIb3DQEBCwUAA4IBAQBkBB/iTPWxcraOLMYU2kmAvCjQNvr0OSt5+d8o
lmbNUsxT6dLqBu9BesYwlXoGw0Tb55TUIWaCzgvqdjTJhK0RNnMkup/fAM2uoyzx
tS71HMutxm6OUZzS1AqEtt6DEHZGYoMgUysKBOA5j5BXYu/+ER2kd4Va+o+c6u8z
Ocy4JLYJsnyXKN1BlxKuyHevXtdapitAQCcCr+DiLRtY0a8DBOpkTRwxCjWuL1lZ
MiVZCKKm3UAhgksmrtgPIjMzyJaq0crObhBaFMNC/531XyrnMjh7a14H1ZMAYdHa
xfpXAYFcWNhmcEfbiChMI6PIK2pq5cvfLoeKPEyQIzOigXKY
-----END CERTIFICATE-----
Generated at Thu Aug 20 21:55:03 2026 by rpki-client