Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c5a8891f-2cfd-49db-84c7-7a149ce6f868.roa
File: c5a8891f-2cfd-49db-84c7-7a149ce6f868.roa (raw, json)
Hash identifier: DoAyI7pXu5oZtJs6rC9HMggXmnckfebCKHBDVO96aro=
Subject key identifier: 9E:4D:63:88:76:5A:30:82:54:BA:BB:49:7A:6F:FB:96:0F:2B:DD:BE
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3E9B1ED8732D24753DA4EDF6045DFF647D8C326A
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c5a8891f-2cfd-49db-84c7-7a149ce6f868.roa
Signing time: Thu 30 Jul 2026 01:30:15 +0000
ROA not before: Thu 30 Jul 2026 01:30:15 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:9b:1e:d8:73:2d:24:75:3d:a4:ed:f6:04:5d:ff:64:7d:8c:32:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:15 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=8c3445444fce2942cab93cb130bdb2629d42378d8f92547e56fc04ec1c76f8ba, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:f8:e5:fc:cf:f0:9d:b1:1d:1a:83:80:ea:
56:ab:12:e3:79:20:44:1e:6d:be:8c:99:fd:78:98:
d1:82:6e:8c:5c:f2:3e:08:d1:9a:0f:ff:8b:14:50:
4e:7b:e1:83:1b:46:a7:fa:41:27:14:a3:7d:4a:63:
41:c2:5e:bd:8e:9d:40:5c:8c:53:06:af:7e:23:7f:
fb:60:26:b3:83:d1:e4:84:1d:90:77:13:c7:d0:de:
e0:1a:91:75:12:75:fc:29:8c:c6:3c:67:6a:f0:ea:
c9:e3:b1:e4:96:1e:0d:6c:14:24:11:68:31:0e:89:
8b:78:7a:56:13:dc:ba:1c:07:67:2d:aa:91:ef:cd:
9b:e3:39:12:cc:ab:b7:c5:2e:f6:a7:b2:76:93:cc:
0b:8d:39:63:a6:cb:b5:cc:b3:52:7e:a1:a8:5a:d0:
b4:e1:13:f9:f0:ff:01:31:3a:5c:a9:50:fd:43:09:
01:3c:e5:85:68:81:a1:20:38:96:81:de:15:67:71:
bc:17:d4:ba:9b:de:bd:55:6f:7b:fe:59:8b:8c:27:
5d:b1:e2:67:37:b1:61:83:78:f0:78:19:7d:68:74:
8b:e4:c4:53:c0:3d:5e:22:0d:67:90:65:87:70:4f:
62:f4:93:a6:49:37:a5:40:9e:fe:c0:10:f0:70:e2:
f5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4D:63:88:76:5A:30:82:54:BA:BB:49:7A:6F:FB:96:0F:2B:DD:BE
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c5a8891f-2cfd-49db-84c7-7a149ce6f868.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7::/36
Signature Algorithm: sha256WithRSAEncryption
54:12:5f:0d:d9:d1:84:b1:8a:ab:02:48:4f:07:71:90:fd:7a:
03:88:ee:b4:b4:3a:bf:31:f7:ab:d1:32:8c:0b:5b:cf:2d:12:
4e:42:31:f0:93:d7:2f:4a:03:d6:ab:48:63:c4:30:1f:b7:f5:
cf:7a:75:16:3d:11:c0:95:4c:f9:62:6f:fa:27:16:60:b9:dd:
55:b9:e8:9f:62:00:fc:0b:64:29:20:9a:40:93:4d:50:21:05:
d3:7a:36:f5:49:46:7f:fc:9c:55:fc:1e:17:08:0a:17:01:e1:
b3:c2:d6:32:e1:75:f7:47:4b:f6:41:c0:30:22:b5:eb:55:5d:
7c:f1:9d:aa:87:66:1d:32:0b:6d:92:52:1a:bd:ee:7d:cc:b1:
ef:87:67:02:36:d1:ab:a5:0e:be:00:2c:32:3a:39:8b:1c:00:
d2:8c:c7:ac:15:81:64:14:42:a2:00:05:a7:63:e4:82:15:91:
63:a0:6d:d4:bd:99:a3:59:25:53:ee:6b:86:f1:cb:eb:91:a5:
c6:c5:ae:b6:dc:39:03:03:de:54:cb:1d:d5:a3:b3:7f:fe:e2:
e5:32:e4:1f:7b:04:31:75:fe:d3:4d:f1:00:de:a7:bb:5f:40:
c3:65:28:38:b9:a8:3e:00:6c:08:cb:87:1d:76:d8:15:df:cc:
92:21:9c:a9
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUPpse2HMtJHU9pO32BF3/ZH2MMmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA3MzAwMTMwMTVaFw0yNjEwMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQDhjMzQ0NTQ0NGZjZTI5NDJjYWI5M2NiMTMwYmRiMjYyOWQ0MjM3OGQ4Zjky
NTQ3ZTU2ZmMwNGVjMWM3NmY4YmExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ/k+OX8z/CdsR0ag4DqVqsS43kgRB5tvoyZ/XiY0YJujFzyPgjRmg//ixRQ
TnvhgxtGp/pBJxSjfUpjQcJevY6dQFyMUwavfiN/+2Ams4PR5IQdkHcTx9De4BqR
dRJ1/CmMxjxnavDqyeOx5JYeDWwUJBFoMQ6Ji3h6VhPcuhwHZy2qke/Nm+M5Esyr
t8Uu9qeydpPMC405Y6bLtcyzUn6hqFrQtOET+fD/ATE6XKlQ/UMJATzlhWiBoSA4
loHeFWdxvBfUupvevVVve/5Zi4wnXbHiZzexYYN48HgZfWh0i+TEU8A9XiINZ5Bl
h3BPYvSTpkk3pUCe/sAQ8HDi9RECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSeTWOI
dlowglS6u0l6b/uWDyvdvjAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
YzVhODg5MWYtMmNmZC00OWRiLTg0YzctN2ExNDljZTZmODY4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8cA
MA0GCSqGSIb3DQEBCwUAA4IBAQBUEl8N2dGEsYqrAkhPB3GQ/XoDiO60tDq/Mfer
0TKMC1vPLRJOQjHwk9cvSgPWq0hjxDAft/XPenUWPRHAlUz5Ym/6JxZgud1Vueif
YgD8C2QpIJpAk01QIQXTejb1SUZ//JxV/B4XCAoXAeGzwtYy4XX3R0v2QcAwIrXr
VV188Z2qh2YdMgttklIave59zLHvh2cCNtGrpQ6+ACwyOjmLHADSjMesFYFkFEKi
AAWnY+SCFZFjoG3UvZmjWSVT7muG8cvrkaXGxa623DkDA95Uyx3Vo7N//uLlMuQf
ewQxdf7TTfEA3qe7X0DDZSg4uag+AGwIy4cddtgV38ySIZyp
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:29 2026 by rpki-client