Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a2d3566c-c7de-4d66-b3af-eb0ba48c7b5d.roa
File: a2d3566c-c7de-4d66-b3af-eb0ba48c7b5d.roa (raw, json)
Hash identifier: agm+pqswqcqI53ZIpY+Oaun80b3GufNAsZ3k2tUGQKY=
Subject key identifier: EC:4B:18:12:87:C1:21:FB:FA:8C:FF:D6:BE:F0:0A:96:BA:A7:3E:44
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 59C98D66CA1B90CC7E41312E539B80AAEA9212C1
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a2d3566c-c7de-4d66-b3af-eb0ba48c7b5d.roa
Signing time: Wed 12 Aug 2026 21:06:49 +0000
ROA not before: Wed 12 Aug 2026 21:06:49 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc3:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:c9:8d:66:ca:1b:90:cc:7e:41:31:2e:53:9b:80:aa:ea:92:12:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:49 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=c89bf216df4259accd8001329ffe4056d0bc04bc5d879299cf8d19ea3e6958c8, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:99:3e:0c:74:bb:af:d7:b4:0c:ba:f4:68:
97:b9:53:b4:0d:16:c8:42:61:55:17:b4:04:54:b0:
11:48:8e:4c:68:ed:d6:00:3d:1b:87:33:dd:f1:eb:
d4:e1:95:e2:00:65:65:3e:7b:07:0e:5e:f0:34:89:
7f:5a:0f:49:84:3f:73:65:3d:99:d5:51:b2:68:7d:
06:e5:1f:14:3a:58:9c:0e:cf:c1:39:93:dd:2e:26:
e3:9a:45:31:ff:37:f8:ef:dc:c2:39:dc:ec:53:31:
d1:84:3c:a4:64:0e:10:dd:e2:58:80:25:46:ee:b6:
ce:ad:29:36:5d:24:62:fb:68:c5:20:4c:8f:fb:91:
59:53:c2:0b:4f:f5:f6:89:1d:ac:ff:01:0d:34:fe:
87:7a:9e:60:d9:84:fa:fc:4e:65:ea:df:1d:47:18:
83:36:fa:ba:99:1a:42:7a:f4:2a:b2:eb:d1:80:34:
ae:aa:d3:87:36:26:cf:c5:14:7b:25:a4:98:f8:e4:
4b:1d:51:12:45:df:4b:fa:ed:22:bb:2c:81:47:10:
10:25:bd:32:1a:d5:7a:44:10:e3:5e:d6:35:2c:bc:
6f:f3:44:7e:aa:3f:09:1f:5e:94:66:8a:ab:ee:bf:
68:ea:a5:8d:62:79:a5:34:0c:db:2b:dc:a4:0b:bf:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4B:18:12:87:C1:21:FB:FA:8C:FF:D6:BE:F0:0A:96:BA:A7:3E:44
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a2d3566c-c7de-4d66-b3af-eb0ba48c7b5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:6000::/36
Signature Algorithm: sha256WithRSAEncryption
53:15:e4:9d:10:7f:51:6e:c4:46:d8:11:34:6b:b6:16:7b:42:
6d:bd:ff:14:d3:e6:32:85:95:d1:0b:4b:44:49:eb:51:fb:ba:
44:b3:07:ff:58:b3:ac:af:0e:42:be:ae:7e:bc:9e:d7:5d:59:
93:a1:63:77:40:41:9b:d3:70:90:6b:83:0b:25:2c:fa:e8:45:
d6:83:74:e7:64:7d:03:65:bd:be:e1:8f:40:1f:e3:8c:ad:3e:
9e:e2:0b:51:38:94:81:b4:fc:8a:a8:05:5d:ae:90:bd:98:4d:
71:96:57:cb:6b:5b:ef:e7:d9:52:0f:bd:02:79:74:35:99:d2:
43:72:25:a4:76:f9:81:d5:88:ba:df:09:9d:9a:51:11:d6:1a:
e4:d4:b2:83:56:39:52:dc:cb:a7:7a:d6:27:c8:f9:6a:f3:3f:
ae:5d:ad:c8:4f:71:16:29:ef:14:96:76:b3:84:46:95:cb:4e:
2f:07:65:f1:fe:83:8f:b7:3d:03:d9:9a:fc:43:da:51:16:10:
cc:99:19:5a:f3:9b:f2:11:41:98:52:69:57:03:5b:12:1f:62:
57:ef:65:41:12:54:c6:c5:83:a2:60:31:b6:d1:97:d8:64:0e:
f4:cc:a2:e4:ae:1f:c3:ba:39:f3:ec:00:a7:f7:b0:c8:cc:d8:
8c:dc:7c:f1
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWcmNZsobkMx+QTEuU5uAquqSEsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMTA2NDlaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGM4OWJmMjE2ZGY0MjU5YWNjZDgwMDEzMjlmZmU0MDU2ZDBiYzA0YmM1ZDg3
OTI5OWNmOGQxOWVhM2U2OTU4YzgxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM94mT4MdLuv17QMuvRol7lTtA0WyEJhVRe0BFSwEUiOTGjt1gA9G4cz3fHr
1OGV4gBlZT57Bw5e8DSJf1oPSYQ/c2U9mdVRsmh9BuUfFDpYnA7PwTmT3S4m45pF
Mf83+O/cwjnc7FMx0YQ8pGQOEN3iWIAlRu62zq0pNl0kYvtoxSBMj/uRWVPCC0/1
9okdrP8BDTT+h3qeYNmE+vxOZerfHUcYgzb6upkaQnr0KrLr0YA0rqrThzYmz8UU
eyWkmPjkSx1REkXfS/rtIrssgUcQECW9MhrVekQQ417WNSy8b/NEfqo/CR9elGaK
q+6/aOqljWJ5pTQM2yvcpAu/9bsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTsSxgS
h8Eh+/qM/9a+8AqWuqc+RDAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
YTJkMzU2NmMtYzdkZS00ZDY2LWIzYWYtZWIwYmE0OGM3YjVkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8Ng
MA0GCSqGSIb3DQEBCwUAA4IBAQBTFeSdEH9RbsRG2BE0a7YWe0Jtvf8U0+YyhZXR
C0tESetR+7pEswf/WLOsrw5Cvq5+vJ7XXVmToWN3QEGb03CQa4MLJSz66EXWg3Tn
ZH0DZb2+4Y9AH+OMrT6e4gtROJSBtPyKqAVdrpC9mE1xllfLa1vv59lSD70CeXQ1
mdJDciWkdvmB1Yi63wmdmlER1hrk1LKDVjlS3MunetYnyPlq8z+uXa3IT3EWKe8U
lnazhEaVy04vB2Xx/oOPtz0D2Zr8Q9pRFhDMmRla85vyEUGYUmlXA1sSH2JX72VB
ElTGxYOiYDG20ZfYZA70zKLkrh/Dujnz7ACn97DIzNiM3Hzx
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:37 2026 by rpki-client