Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d84171a2-90dc-4e53-8d37-601033f5728d.roa
File: d84171a2-90dc-4e53-8d37-601033f5728d.roa (raw, json)
Hash identifier: 5TBK+1E20p3cJyvufGk/iOOR1YdkRQdz4HePXzVw638=
Subject key identifier: 4B:C8:39:5A:53:E4:18:6F:78:73:6B:6B:B4:E8:FD:61:6E:26:E5:A4
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3AD2E8B183627F99B6E11A3E585DBE22C0B912AB
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d84171a2-90dc-4e53-8d37-601033f5728d.roa
Signing time: Fri 07 Aug 2026 00:00:14 +0000
ROA not before: Fri 07 Aug 2026 00:00:14 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d2:e8:b1:83:62:7f:99:b6:e1:1a:3e:58:5d:be:22:c0:b9:12:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 7 00:00:14 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=1e50a48e45e60344113c846fcf999c814e3a52428503c984d80be3e0b78aa1d3, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:92:a9:4b:97:3d:00:06:aa:5a:c8:49:0a:
dc:0f:ed:2d:59:11:ed:ee:98:56:a3:12:92:88:2b:
55:eb:e1:26:b7:1d:e1:c4:8e:8c:60:b0:3f:2d:32:
81:20:90:e0:1e:43:74:85:d3:01:88:7f:55:75:49:
c3:04:6e:32:bd:17:35:04:5f:6d:1e:41:7d:10:49:
f2:4a:cc:64:6f:bb:45:d2:53:1e:a1:ca:3c:31:66:
24:6c:be:87:09:c6:9b:de:46:5e:b9:35:c4:ec:b8:
4b:e3:a2:85:e2:8e:d2:78:1b:e9:5c:05:d9:d3:43:
e9:5c:2b:db:da:03:e4:4e:2f:0d:d8:19:2f:d7:5a:
f3:07:c4:e2:4e:38:02:b1:2f:24:f5:43:ab:ea:1b:
d5:3c:a0:08:86:98:76:9f:50:a6:37:6a:87:68:da:
3c:6f:ff:db:b7:18:45:bc:0d:31:17:25:d0:5c:8e:
c8:f2:7a:df:f8:bb:07:09:60:ab:44:b1:1c:10:80:
05:61:8f:ca:e9:e6:4a:f5:3c:61:28:ab:f1:4d:8f:
68:8f:f1:5c:fc:59:9a:c9:2f:ea:c1:3b:ab:35:7d:
0d:6a:81:b5:42:e8:96:8c:80:56:c7:27:50:96:e4:
00:8c:8a:08:f9:61:82:fe:c3:cc:20:a9:48:13:33:
46:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C8:39:5A:53:E4:18:6F:78:73:6B:6B:B4:E8:FD:61:6E:26:E5:A4
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d84171a2-90dc-4e53-8d37-601033f5728d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:200::/40
Signature Algorithm: sha256WithRSAEncryption
5b:ee:c7:c1:ab:6e:59:c1:f2:95:43:2e:89:7e:43:cd:94:81:
ac:3b:c9:99:b6:cb:5f:29:8a:39:d2:b6:cf:13:6d:a5:d0:90:
90:4a:16:5c:21:da:69:0b:7e:dc:b3:aa:cf:0f:97:ff:63:23:
2b:f8:a1:00:e4:a9:ef:98:d3:16:48:85:2c:37:3e:bc:94:5a:
36:3c:e8:6e:15:7c:9f:82:a9:be:ab:af:82:ae:b0:87:53:a9:
3e:6b:8e:85:83:17:31:86:3e:d7:a5:ce:7c:58:d8:e0:62:59:
99:ff:5e:fc:90:96:89:5f:ad:52:31:55:3a:96:e4:b8:08:78:
d9:76:f4:7e:fe:8a:2e:75:71:c5:60:e2:3c:21:5a:d1:a2:c7:
60:7a:9e:5b:09:bb:48:a8:fa:8d:64:23:1d:54:c3:67:32:06:
35:95:29:44:ff:d1:a2:44:87:b9:b1:07:24:85:ea:ac:43:40:
f2:3e:e4:e0:47:54:35:4a:df:8b:91:0b:9d:7b:dd:c6:a8:86:
9f:42:8c:c7:91:6d:ff:d6:56:bb:63:fb:1f:40:f1:6e:21:20:
a2:fe:ec:e2:55:66:2d:69:88:5b:ae:ee:db:61:09:ee:ab:0b:
e4:26:9e:7d:02:b5:28:be:2e:48:b8:fe:3f:49:42:b7:37:3b:
53:04:8a:1a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUOtLosYNif5m24Ro+WF2+IsC5EqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MDcwMDAwMTRaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDFlNTBhNDhlNDVlNjAzNDQxMTNjODQ2ZmNmOTk5YzgxNGUzYTUyNDI4NTAz
Yzk4NGQ4MGJlM2UwYjc4YWExZDMxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALYSkqlLlz0ABqpayEkK3A/tLVkR7e6YVqMSkogrVevhJrcd4cSOjGCwPy0y
gSCQ4B5DdIXTAYh/VXVJwwRuMr0XNQRfbR5BfRBJ8krMZG+7RdJTHqHKPDFmJGy+
hwnGm95GXrk1xOy4S+OiheKO0ngb6VwF2dND6Vwr29oD5E4vDdgZL9da8wfE4k44
ArEvJPVDq+ob1TygCIaYdp9Qpjdqh2jaPG//27cYRbwNMRcl0FyOyPJ63/i7Bwlg
q0SxHBCABWGPyunmSvU8YSir8U2PaI/xXPxZmskv6sE7qzV9DWqBtULoloyAVscn
UJbkAIyKCPlhgv7DzCCpSBMzRrkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRLyDla
U+QYb3hza2u06P1hbiblpDAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
ZDg0MTcxYTItOTBkYy00ZTUzLThkMzctNjAxMDMzZjU3MjhkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8YC
MA0GCSqGSIb3DQEBCwUAA4IBAQBb7sfBq25ZwfKVQy6JfkPNlIGsO8mZtstfKYo5
0rbPE22l0JCQShZcIdppC37cs6rPD5f/YyMr+KEA5KnvmNMWSIUsNz68lFo2POhu
FXyfgqm+q6+CrrCHU6k+a46Fgxcxhj7Xpc58WNjgYlmZ/178kJaJX61SMVU6luS4
CHjZdvR+/ooudXHFYOI8IVrRosdgep5bCbtIqPqNZCMdVMNnMgY1lSlE/9GiRIe5
sQckheqsQ0DyPuTgR1Q1St+LkQude93GqIafQozHkW3/1la7Y/sfQPFuISCi/uzi
VWYtaYhbru7bYQnuqwvkJp59ArUovi5IuP4/SUK3NztTBIoa
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:30 2026 by rpki-client