Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c3004f10-b81a-41c8-91c0-f79229792f17.roa
File: c3004f10-b81a-41c8-91c0-f79229792f17.roa (raw, json)
Hash identifier: g4gCAz4uJXGklJuuXE2pgrvIBHI8hSnrho5wL8HCuwA=
Subject key identifier: 59:2F:1C:AA:D9:E4:19:66:0A:22:22:23:9D:45:E8:0D:A7:E6:5C:01
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 28FE685A534EA074936F23C10DFC4C1C30E1F2F5
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c3004f10-b81a-41c8-91c0-f79229792f17.roa
Signing time: Wed 12 Aug 2026 21:06:47 +0000
ROA not before: Wed 12 Aug 2026 21:06:47 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc0::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:fe:68:5a:53:4e:a0:74:93:6f:23:c1:0d:fc:4c:1c:30:e1:f2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:47 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=4386d902c393701a8c68b1186042b237e8d533b44865357749f781b7debb1821, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:31:91:43:cf:b3:97:bb:ff:af:31:fa:4e:
5b:17:10:df:0a:86:1f:7f:23:d1:04:b4:fe:dd:28:
81:38:af:7e:d2:24:a1:11:ca:0f:d8:6b:b1:ff:a2:
16:cb:5c:e8:c6:92:4e:ff:b8:8d:06:01:a5:b1:ea:
25:df:d1:53:68:8c:b7:b5:9e:8f:04:2b:e3:27:41:
95:20:f7:33:be:f6:10:65:af:91:27:9f:75:20:93:
eb:3f:41:64:96:af:d7:b8:0e:bd:e4:da:81:cf:73:
19:fc:ec:a0:4b:51:81:d4:b8:19:23:68:e0:84:d7:
fb:8d:5c:c5:21:13:08:f0:d9:31:a8:d5:00:f3:d5:
6e:18:4d:ef:50:44:8f:30:91:96:34:4a:2f:ed:a5:
6e:d6:a5:6b:6d:88:33:30:4f:a5:82:f0:82:d2:7b:
ac:69:5b:98:8a:e8:df:19:0d:22:89:59:2d:b0:35:
cd:71:91:af:82:9c:d0:66:32:b7:08:c9:e0:c9:a0:
8e:da:f1:52:61:08:80:ed:1f:80:53:6b:46:d9:85:
c0:46:d8:03:c7:57:6b:9d:dc:66:14:6e:01:09:58:
3a:69:0a:b5:16:0f:43:36:81:41:d6:3a:bb:f0:d5:
8b:f6:37:23:b2:6d:52:b6:a5:b5:51:e0:50:9c:4e:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2F:1C:AA:D9:E4:19:66:0A:22:22:23:9D:45:E8:0D:A7:E6:5C:01
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c3004f10-b81a-41c8-91c0-f79229792f17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0::/36
Signature Algorithm: sha256WithRSAEncryption
17:49:66:61:b8:37:d1:d5:17:3d:f3:4f:03:e8:61:85:1c:fb:
4f:2d:f1:9f:35:07:18:5a:b7:34:48:0f:21:58:2f:99:9b:f1:
a1:49:db:91:d4:31:78:d9:8b:50:b4:de:ce:73:d7:1e:5d:3d:
f3:93:f8:87:39:2f:99:20:90:8a:b1:32:77:d5:8f:66:39:0f:
5d:85:cc:79:e3:c9:95:8c:cc:19:ce:25:31:11:e5:c5:54:5a:
fa:44:28:98:1e:01:3c:28:8a:ee:00:25:ad:87:26:6e:14:8a:
d0:4a:c4:5a:d3:74:ca:da:26:00:c4:7c:c1:fe:fc:5f:33:21:
74:b2:62:ea:47:43:4e:82:42:58:a4:74:fb:8f:35:5e:7c:29:
1a:88:6e:1c:6e:14:82:93:b9:21:e0:71:32:28:81:39:76:92:
50:5a:0a:64:f3:89:81:ba:2b:f0:a2:9f:5a:c1:c7:cc:c5:44:
62:f6:02:bc:6e:13:ad:e2:e3:df:b8:55:35:f4:b2:0e:55:48:
22:9f:5b:01:6e:d2:28:a6:aa:20:b0:16:9c:24:75:7c:ea:18:
b0:fd:82:60:db:fa:ad:51:01:9e:ec:5e:be:da:01:2f:b5:c8:
5a:e9:b7:0b:1d:28:57:72:4e:ad:26:5d:60:0c:97:6c:64:b6:
26:6a:4b:1b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUKP5oWlNOoHSTbyPBDfxMHDDh8vUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMTA2NDdaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDQzODZkOTAyYzM5MzcwMWE4YzY4YjExODYwNDJiMjM3ZThkNTMzYjQ0ODY1
MzU3NzQ5Zjc4MWI3ZGViYjE4MjExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ1mMZFDz7OXu/+vMfpOWxcQ3wqGH38j0QS0/t0ogTivftIkoRHKD9hrsf+i
Fstc6MaSTv+4jQYBpbHqJd/RU2iMt7WejwQr4ydBlSD3M772EGWvkSefdSCT6z9B
ZJav17gOveTagc9zGfzsoEtRgdS4GSNo4ITX+41cxSETCPDZMajVAPPVbhhN71BE
jzCRljRKL+2lbtala22IMzBPpYLwgtJ7rGlbmIro3xkNIolZLbA1zXGRr4Kc0GYy
twjJ4MmgjtrxUmEIgO0fgFNrRtmFwEbYA8dXa53cZhRuAQlYOmkKtRYPQzaBQdY6
u/DVi/Y3I7JtUraltVHgUJxOmyECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRZLxyq
2eQZZgoiIiOdRegNp+ZcATAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
YzMwMDRmMTAtYjgxYS00MWM4LTkxYzAtZjc5MjI5NzkyZjE3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8AA
MA0GCSqGSIb3DQEBCwUAA4IBAQAXSWZhuDfR1Rc9808D6GGFHPtPLfGfNQcYWrc0
SA8hWC+Zm/GhSduR1DF42YtQtN7Oc9ceXT3zk/iHOS+ZIJCKsTJ31Y9mOQ9dhcx5
48mVjMwZziUxEeXFVFr6RCiYHgE8KIruACWthyZuFIrQSsRa03TK2iYAxHzB/vxf
MyF0smLqR0NOgkJYpHT7jzVefCkaiG4cbhSCk7kh4HEyKIE5dpJQWgpk84mBuivw
op9awcfMxURi9gK8bhOt4uPfuFU19LIOVUgin1sBbtIopqogsBacJHV86hiw/YJg
2/qtUQGe7F6+2gEvtcha6bcLHShXck6tJl1gDJdsZLYmaksb
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:36:00 2026 by rpki-client