Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/cdf607fb-daf0-4767-b47b-4a8c3266c681.roa
File: cdf607fb-daf0-4767-b47b-4a8c3266c681.roa (raw, json)
Hash identifier: AW86kMBw+VY8jVGjzUShSl0A6IMZGqvH5nmJlRQXXEk=
Subject key identifier: C4:3B:8B:15:5C:4A:C6:BB:23:91:87:CD:38:12:5A:65:4E:B8:4F:09
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 69226753F3D55334137248310EB26117516B1393
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/cdf607fb-daf0-4767-b47b-4a8c3266c681.roa
Signing time: Thu 30 Jul 2026 01:20:25 +0000
ROA not before: Thu 30 Jul 2026 01:20:25 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc1:8c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:22:67:53:f3:d5:53:34:13:72:48:31:0e:b2:61:17:51:6b:13:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:25 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=409e2a94ec35b24386e7408e1b6090448de084ee5af9378a5d70df3d7fec4489, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:27:b6:ba:d4:2c:18:bb:f0:28:d0:05:a9:
38:11:33:1c:ce:72:1d:23:3b:a9:69:4c:47:f9:14:
b0:64:77:d9:e1:43:60:44:1f:cb:2d:d6:0c:c5:06:
9b:ad:fe:79:86:d5:2b:ee:1d:48:5c:3c:a4:d6:c0:
02:5c:57:81:1c:0e:65:cb:6f:79:de:85:89:6e:c6:
99:42:d9:1f:84:84:9f:75:d5:ee:d9:3c:7b:40:86:
95:78:39:96:d0:32:f6:82:e4:f3:a6:a3:97:94:12:
ad:c3:f2:98:72:ec:03:24:21:f1:4c:c4:42:9f:e7:
ef:62:b3:cf:5a:c3:97:ee:d2:eb:f0:81:16:5a:3b:
8b:fa:f0:2f:c1:db:66:94:3e:7c:87:dc:4d:3a:67:
29:c8:b1:b9:82:13:63:ca:8c:77:ca:76:11:7c:5d:
88:9d:3e:2f:22:03:48:c5:9c:53:78:ed:cf:3c:9a:
4f:e6:c4:d9:ad:0f:12:07:ca:a2:99:b4:2c:b6:ed:
c4:cd:71:02:0a:2f:60:14:f6:48:b9:ed:c8:c2:07:
46:76:ec:ce:d5:4d:6c:17:a3:63:63:77:a0:c6:7d:
c6:33:be:60:d4:dc:f9:e1:df:92:9e:40:7d:0d:e0:
b5:08:5a:88:4f:e5:5e:fd:87:29:49:ea:39:ae:cc:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3B:8B:15:5C:4A:C6:BB:23:91:87:CD:38:12:5A:65:4E:B8:4F:09
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/cdf607fb-daf0-4767-b47b-4a8c3266c681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1:8c00::/38
Signature Algorithm: sha256WithRSAEncryption
be:0c:2f:13:d9:b4:f9:cf:1b:a9:6d:1a:98:10:98:24:3a:69:
98:b1:f9:b3:e6:aa:49:6d:45:7d:6b:39:8a:ae:0b:c5:d2:53:
a7:25:00:ed:fe:01:c9:9c:c9:5f:e7:5e:7c:4a:37:be:54:d0:
74:db:83:82:48:8a:15:06:2b:87:89:14:d5:86:82:96:a0:68:
c3:0c:69:10:86:a2:72:d7:b9:05:c1:77:9c:1b:a0:79:80:8f:
6b:e9:46:64:71:f7:5f:28:6b:94:48:b2:41:18:b9:9b:ad:de:
30:0b:b7:8b:15:9d:78:b6:65:d2:d0:db:31:16:ca:b8:57:de:
7d:3c:a1:aa:ad:ac:91:87:15:3e:f6:df:12:64:e6:33:1d:a2:
68:9d:68:88:18:4a:b8:71:18:ec:05:d0:32:13:11:cb:46:a3:
62:ad:67:c9:49:b5:27:76:ee:6b:70:40:a2:f1:34:74:7a:9f:
13:e0:73:08:ed:91:b1:ff:4a:e3:ed:6d:17:61:04:91:dc:8b:
06:ab:f7:47:8f:c1:9d:de:28:c3:17:a2:75:bb:7e:a7:c1:43:
b4:19:3a:02:dc:5c:c8:d7:fc:4a:d8:33:96:14:d2:de:ca:c2:
f8:0e:06:0d:a1:05:a1:79:9c:46:d9:88:aa:62:50:95:f1:75:
f4:4c:2a:41
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUaSJnU/PVUzQTckgxDrJhF1FrE5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA3MzAwMTIwMjVaFw0yNjEwMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQDQwOWUyYTk0ZWMzNWIyNDM4NmU3NDA4ZTFiNjA5MDQ0OGRlMDg0ZWU1YWY5
Mzc4YTVkNzBkZjNkN2ZlYzQ0ODkxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL1yJ7a61CwYu/Ao0AWpOBEzHM5yHSM7qWlMR/kUsGR32eFDYEQfyy3WDMUG
m63+eYbVK+4dSFw8pNbAAlxXgRwOZctved6FiW7GmULZH4SEn3XV7tk8e0CGlXg5
ltAy9oLk86ajl5QSrcPymHLsAyQh8UzEQp/n72Kzz1rDl+7S6/CBFlo7i/rwL8Hb
ZpQ+fIfcTTpnKcixuYITY8qMd8p2EXxdiJ0+LyIDSMWcU3jtzzyaT+bE2a0PEgfK
opm0LLbtxM1xAgovYBT2SLntyMIHRnbsztVNbBejY2N3oMZ9xjO+YNTc+eHfkp5A
fQ3gtQhaiE/lXv2HKUnqOa7MPn8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTEO4sV
XErGuyORh804ElplTrhPCTAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
Y2RmNjA3ZmItZGFmMC00NzY3LWI0N2ItNGE4YzMyNjZjNjgxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAiABP8GM
MA0GCSqGSIb3DQEBCwUAA4IBAQC+DC8T2bT5zxupbRqYEJgkOmmYsfmz5qpJbUV9
azmKrgvF0lOnJQDt/gHJnMlf5158Sje+VNB024OCSIoVBiuHiRTVhoKWoGjDDGkQ
hqJy17kFwXecG6B5gI9r6UZkcfdfKGuUSLJBGLmbrd4wC7eLFZ14tmXS0NsxFsq4
V959PKGqrayRhxU+9t8SZOYzHaJonWiIGEq4cRjsBdAyExHLRqNirWfJSbUndu5r
cECi8TR0ep8T4HMI7ZGx/0rj7W0XYQSR3IsGq/dHj8Gd3ijDF6J1u36nwUO0GToC
3FzI1/xK2DOWFNLeysL4DgYNoQWheZxG2YiqYlCV8XX0TCpB
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:41:23 2026 by rpki-client