Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c51085ee-01b6-4a59-aa2a-f06b7b89a2c7.roa
File: c51085ee-01b6-4a59-aa2a-f06b7b89a2c7.roa (raw, json)
Hash identifier: 4ktb52ETds/W0Bpq0iEQ7+t3lwVKvXYhX6nZCdqc99k=
Subject key identifier: 61:82:9B:DA:6D:D9:AE:C0:31:13:14:87:18:C2:10:25:AA:32:30:32
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 4817722FFC7454BA9FB101A986F3B2DCA02EC08F
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c51085ee-01b6-4a59-aa2a-f06b7b89a2c7.roa
Signing time: Wed 12 Aug 2026 21:04:21 +0000
ROA not before: Wed 12 Aug 2026 21:04:21 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:c000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:17:72:2f:fc:74:54:ba:9f:b1:01:a9:86:f3:b2:dc:a0:2e:c0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:21 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=b2de7b0be64beb1d4845f06baa29b8799f27c8ff3371b3632260930844fa4667, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:2a:d3:c7:2a:52:17:6b:47:93:83:e4:c3:
42:55:01:8b:69:97:83:0a:50:d2:9f:6a:c9:0f:e8:
4b:9b:f9:fa:cc:60:08:d3:37:67:e3:d5:45:30:db:
db:38:c1:bf:fe:e0:8d:da:5e:1d:18:4c:a1:00:d9:
72:8c:e0:41:28:66:ff:d0:33:96:fd:3c:f2:76:a9:
c8:50:14:98:6e:ae:96:24:a8:8a:c6:34:c4:1c:02:
14:60:da:4f:cd:29:30:fe:5f:0d:36:77:c0:eb:17:
9f:ed:52:6b:5a:96:47:84:e2:14:e0:be:a0:c4:c1:
2c:13:2f:8e:59:9e:bb:d9:12:43:92:b4:0f:d9:1a:
68:20:eb:91:6a:f8:cd:1a:77:7c:a4:b0:78:dc:39:
e3:d2:5e:bc:76:8c:11:40:bb:c0:09:dd:9a:1a:2e:
cb:0f:ea:4b:44:00:bd:9b:6e:d6:09:60:a4:d5:14:
fb:14:1e:4c:7a:5f:5b:37:ef:9d:4f:f8:5f:d2:96:
c9:f5:3b:cf:ee:09:de:82:dd:1d:61:dc:9c:50:93:
c8:a5:c4:d2:a1:23:b3:c0:60:0f:a3:87:bd:22:08:
c4:26:92:51:6c:d9:2a:31:e0:9d:8c:e0:90:0d:61:
a1:91:de:9b:9e:dc:55:58:4a:84:e5:d0:bb:5a:35:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:82:9B:DA:6D:D9:AE:C0:31:13:14:87:18:C2:10:25:AA:32:30:32
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c51085ee-01b6-4a59-aa2a-f06b7b89a2c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:c000::/36
Signature Algorithm: sha256WithRSAEncryption
04:e4:5b:08:eb:93:a5:db:95:27:12:f6:2c:44:2a:19:2e:16:
27:38:45:aa:89:d1:94:3c:3d:c8:06:97:f4:ac:5a:b6:ab:f9:
29:48:2f:af:82:5e:86:66:38:51:b5:78:0f:d3:88:5a:3c:43:
24:12:61:cd:b0:ff:b9:40:ba:3a:69:9f:3e:7f:cd:6a:9c:43:
18:f9:9d:32:dc:98:52:8b:16:b2:ce:1d:41:85:a9:5d:bd:b4:
b6:71:f4:9b:a2:8d:49:b7:05:28:16:9e:ce:70:b8:07:0f:91:
75:7c:18:9b:07:de:48:a3:b9:3f:85:03:8d:30:31:f0:6f:9e:
0a:e7:35:f5:51:fe:92:eb:03:08:e1:db:1a:84:c4:c1:06:f3:
a5:b3:fc:82:cf:14:fe:ea:39:89:1b:df:a3:63:cf:ba:13:85:
3d:4d:0d:f9:7d:f4:f8:1f:b7:dd:c6:7f:3b:02:aa:c0:ed:0d:
fe:9a:5e:89:5c:9b:d6:53:22:c5:15:9d:a9:da:2f:50:35:70:
0b:26:cd:5f:7f:80:73:ab:e4:59:9a:67:49:54:e8:06:3b:17:
56:2b:f1:73:f7:a3:66:b3:90:0c:ed:f9:cf:55:a3:1b:26:fd:
33:71:bc:10:60:7b:4d:3c:8e:13:c0:6f:af:5f:2b:92:59:74:
26:53:c3:b5
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSBdyL/x0VLqfsQGphvOy3KAuwI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMTA0MjFaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGIyZGU3YjBiZTY0YmViMWQ0ODQ1ZjA2YmFhMjliODc5OWYyN2M4ZmYzMzcx
YjM2MzIyNjA5MzA4NDRmYTQ2NjcxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK79KtPHKlIXa0eTg+TDQlUBi2mXgwpQ0p9qyQ/oS5v5+sxgCNM3Z+PVRTDb
2zjBv/7gjdpeHRhMoQDZcozgQShm/9Azlv088napyFAUmG6uliSoisY0xBwCFGDa
T80pMP5fDTZ3wOsXn+1Sa1qWR4TiFOC+oMTBLBMvjlmeu9kSQ5K0D9kaaCDrkWr4
zRp3fKSweNw549JevHaMEUC7wAndmhouyw/qS0QAvZtu1glgpNUU+xQeTHpfWzfv
nU/4X9KWyfU7z+4J3oLdHWHcnFCTyKXE0qEjs8BgD6OHvSIIxCaSUWzZKjHgnYzg
kA1hoZHem57cVVhKhOXQu1o1qA8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRhgpva
bdmuwDETFIcYwhAlqjIwMjAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
YzUxMDg1ZWUtMDFiNi00YTU5LWFhMmEtZjA2YjdiODlhMmM3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8fA
MA0GCSqGSIb3DQEBCwUAA4IBAQAE5FsI65Ol25UnEvYsRCoZLhYnOEWqidGUPD3I
Bpf0rFq2q/kpSC+vgl6GZjhRtXgP04haPEMkEmHNsP+5QLo6aZ8+f81qnEMY+Z0y
3JhSixayzh1BhaldvbS2cfSboo1JtwUoFp7OcLgHD5F1fBibB95Io7k/hQONMDHw
b54K5zX1Uf6S6wMI4dsahMTBBvOls/yCzxT+6jmJG9+jY8+6E4U9TQ35ffT4H7fd
xn87AqrA7Q3+ml6JXJvWUyLFFZ2p2i9QNXALJs1ff4Bzq+RZmmdJVOgGOxdWK/Fz
96Nms5AM7fnPVaMbJv0zcbwQYHtNPI4TwG+vXyuSWXQmU8O1
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:18 2026 by rpki-client