Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c7ec34db-35f1-498c-8d24-16ea3dc3850c.roa
File: c7ec34db-35f1-498c-8d24-16ea3dc3850c.roa (raw, json)
Hash identifier: zxVD72oFsn0PQumGD5kVnsvE5YGz2G9OtH+/2eQTdj8=
Subject key identifier: 6D:24:BB:22:4B:5B:7D:DC:2E:91:22:BD:FD:FE:F9:8B:5F:F7:6E:D1
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2D33237F779991BB704765ECC0AD93A0634DCFFA
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c7ec34db-35f1-498c-8d24-16ea3dc3850c.roa
Signing time: Wed 12 Aug 2026 21:06:44 +0000
ROA not before: Wed 12 Aug 2026 21:06:44 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:f400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:33:23:7f:77:99:91:bb:70:47:65:ec:c0:ad:93:a0:63:4d:cf:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:44 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=17fd59fad20503d07e0150a7916594571bf909b99bb0fa8898d0ee10400a553f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cf:00:6f:68:8b:7f:2b:bf:84:79:f3:16:ed:
e8:2f:1a:6f:71:0c:06:1d:50:79:b0:e8:ab:22:2a:
de:e1:3c:41:9e:69:c5:d1:53:1c:6b:f7:80:41:ca:
a2:6b:1e:00:41:c5:a1:43:49:41:2e:90:76:2d:86:
af:0c:df:7b:08:32:3c:54:8c:1b:ad:1f:34:8f:eb:
ca:51:39:b4:00:bb:55:b7:da:14:11:a1:46:ef:e9:
c5:5c:cd:7b:ad:aa:58:ab:09:0c:1f:74:6e:85:78:
23:6a:4a:3a:bd:45:63:ea:b3:c8:fb:88:bc:5a:fc:
ae:1e:34:6e:34:33:72:ed:fc:95:06:35:67:2f:42:
99:0f:f2:bf:4b:46:52:de:d5:6c:6a:9c:c2:c4:fd:
44:72:71:80:10:08:f9:0b:c6:f4:69:c0:db:82:51:
0b:47:b2:df:57:7d:45:6e:ca:b7:d5:47:7b:6a:ef:
d9:f9:31:81:ba:fb:52:d1:ec:21:a3:54:da:7b:d0:
e6:16:62:f9:a8:cc:8d:d7:73:5c:7f:01:40:8d:46:
84:05:80:be:eb:5e:6b:3c:2c:64:da:8e:cb:35:06:
16:3e:37:74:d2:8e:62:b3:ad:36:cb:3e:8e:17:6a:
56:9b:b5:bf:9d:fd:9e:2d:36:6d:20:72:23:0a:50:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:24:BB:22:4B:5B:7D:DC:2E:91:22:BD:FD:FE:F9:8B:5F:F7:6E:D1
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c7ec34db-35f1-498c-8d24-16ea3dc3850c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f400::/40
Signature Algorithm: sha256WithRSAEncryption
80:5e:73:e4:64:03:8e:68:4b:aa:51:83:56:e8:aa:cd:5c:e1:
ce:40:16:9a:e2:35:8e:ff:1b:f2:15:ff:3a:16:fe:5c:c0:8e:
43:70:91:1f:82:93:0f:07:57:e6:e6:b9:6b:d6:18:92:ef:f8:
54:7b:1d:25:22:26:9c:f6:af:a6:3e:83:24:2c:a9:ff:4f:75:
f6:3f:07:b4:9b:88:86:ae:a8:f0:8c:d2:5d:d4:33:18:e5:e5:
38:10:0b:68:cd:71:41:fc:e9:04:56:a5:bd:6e:6b:b7:6e:95:
10:df:8c:47:6c:9c:06:47:68:d6:4d:71:5f:fe:a2:ea:ce:30:
b5:1e:83:37:26:c4:c2:2f:69:ff:8a:c0:47:ed:ec:fd:a5:d1:
bf:21:91:0b:43:f1:85:ec:41:40:f0:6c:ab:45:23:b7:7c:6a:
29:dd:f3:c8:1b:fd:e0:0b:1d:c9:3d:b4:fa:cd:0e:8e:13:2b:
47:12:e3:06:57:52:e3:c0:77:d0:c8:c5:0a:2c:e9:2a:b7:6f:
1e:87:a4:58:6d:08:55:34:f3:a8:c4:11:84:a4:1d:04:41:cf:
7c:c9:c7:08:97:e0:99:b9:7f:e0:a4:67:c7:71:93:01:a2:ec:
49:ab:fb:7c:a5:a3:3c:7e:96:b5:3d:a0:53:f8:0e:1e:df:6a:
ee:ed:f5:a6
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULTMjf3eZkbtwR2XswK2ToGNNz/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMTA2NDRaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDE3ZmQ1OWZhZDIwNTAzZDA3ZTAxNTBhNzkxNjU5NDU3MWJmOTA5Yjk5YmIw
ZmE4ODk4ZDBlZTEwNDAwYTU1M2YxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO/PAG9oi38rv4R58xbt6C8ab3EMBh1QebDoqyIq3uE8QZ5pxdFTHGv3gEHK
omseAEHFoUNJQS6Qdi2GrwzfewgyPFSMG60fNI/rylE5tAC7VbfaFBGhRu/pxVzN
e62qWKsJDB90boV4I2pKOr1FY+qzyPuIvFr8rh40bjQzcu38lQY1Zy9CmQ/yv0tG
Ut7VbGqcwsT9RHJxgBAI+QvG9GnA24JRC0ey31d9RW7Kt9VHe2rv2fkxgbr7UtHs
IaNU2nvQ5hZi+ajMjddzXH8BQI1GhAWAvuteazwsZNqOyzUGFj43dNKOYrOtNss+
jhdqVpu1v539ni02bSByIwpQTJMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRtJLsi
S1t93C6RIr39/vmLX/du0TAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
YzdlYzM0ZGItMzVmMS00OThjLThkMjQtMTZlYTNkYzM4NTBjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8f0
MA0GCSqGSIb3DQEBCwUAA4IBAQCAXnPkZAOOaEuqUYNW6KrNXOHOQBaa4jWO/xvy
Ff86Fv5cwI5DcJEfgpMPB1fm5rlr1hiS7/hUex0lIiac9q+mPoMkLKn/T3X2Pwe0
m4iGrqjwjNJd1DMY5eU4EAtozXFB/OkEVqW9bmu3bpUQ34xHbJwGR2jWTXFf/qLq
zjC1HoM3JsTCL2n/isBH7ez9pdG/IZELQ/GF7EFA8GyrRSO3fGop3fPIG/3gCx3J
PbT6zQ6OEytHEuMGV1LjwHfQyMUKLOkqt28eh6RYbQhVNPOoxBGEpB0EQc98yccI
l+CZuX/gpGfHcZMBouxJq/t8paM8fpa1PaBT+A4e32ru7fWm
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:32:10 2026 by rpki-client