Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ee70ca3e-a7dd-43d8-bb30-01cc2f46e1fc.roa
File: ee70ca3e-a7dd-43d8-bb30-01cc2f46e1fc.roa (raw, json)
Hash identifier: oMeJlw16U7PJSyvYyUykX+lW7eE+PFj5vma4uFHoATA=
Subject key identifier: A5:55:EA:50:8E:81:04:F2:90:99:C6:C0:DA:A0:11:7F:CE:75:27:8D
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2D504B9E8ACBFDF25E6E4FA7B6DD302F1ABB7F47
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ee70ca3e-a7dd-43d8-bb30-01cc2f46e1fc.roa
Signing time: Thu 30 Jul 2026 01:20:27 +0000
ROA not before: Thu 30 Jul 2026 01:20:27 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:50:4b:9e:8a:cb:fd:f2:5e:6e:4f:a7:b6:dd:30:2f:1a:bb:7f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:27 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=d68ed6eb1d86f712ed2c08bf7f21dac5145122fdbf2c917d89d3cfbd1ce6d11b, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:b5:87:99:27:04:46:86:04:96:6a:31:2f:
85:da:50:3a:0e:c4:3b:81:b3:e9:c1:b5:ab:b4:74:
a6:74:18:5c:27:f8:c5:ce:1c:7f:8a:13:2c:b7:6e:
3c:5e:92:ad:c1:e5:81:de:55:21:8c:27:06:59:43:
a3:bc:d0:3d:4d:38:4b:cd:73:77:7f:4a:6e:c3:e8:
f5:c0:d4:ed:39:45:53:0f:29:25:07:c4:67:db:01:
53:38:06:f2:c8:34:9b:1e:60:fe:7d:00:4f:75:25:
94:b7:d6:8e:f0:04:56:23:c7:47:f7:cc:b9:1b:40:
05:ba:e3:78:c4:1e:a4:29:b2:98:31:54:c8:7a:ec:
32:94:32:d7:ae:94:14:a3:e6:dc:0c:55:74:6f:b4:
1f:db:5a:a0:04:03:27:30:5c:e0:dd:11:10:96:c9:
17:5f:78:44:ff:28:27:00:65:94:65:a3:1e:e9:80:
93:ea:29:7f:dc:ca:c6:8d:ba:12:2b:d1:81:04:b5:
cd:29:b1:b2:13:4c:65:15:7e:5c:f4:67:fe:07:97:
ec:9b:c3:20:5f:78:c9:0c:49:c1:aa:5b:3b:01:c3:
e2:08:b3:20:4e:c8:08:ee:cf:47:b7:52:22:9d:61:
d2:56:78:64:f7:69:81:1f:4e:f2:b4:21:9d:03:3f:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:55:EA:50:8E:81:04:F2:90:99:C6:C0:DA:A0:11:7F:CE:75:27:8D
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ee70ca3e-a7dd-43d8-bb30-01cc2f46e1fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:800::/40
Signature Algorithm: sha256WithRSAEncryption
1b:5c:5d:14:46:52:92:f9:9f:80:57:23:c8:f4:eb:87:44:ec:
a6:df:2d:16:2c:36:3b:9c:9b:c7:e7:96:0e:1d:6a:f7:b4:c2:
ee:0a:8b:a8:8b:6a:35:42:6e:25:17:a5:5d:10:94:00:ef:31:
13:d8:bc:26:5f:44:26:65:c9:ee:19:02:19:86:c5:e2:4f:fa:
af:de:52:fa:b9:9e:df:9f:0d:38:4b:f7:e1:be:9b:a5:cb:54:
85:a5:a9:3d:b1:5a:3d:fd:bc:16:c4:5a:8b:73:2d:e1:3b:b8:
27:d9:ae:d4:60:cc:48:09:a0:d3:63:14:83:48:49:7f:27:18:
58:ad:49:32:17:fd:1f:96:b7:4b:db:57:8c:67:e9:30:79:2e:
fb:08:56:f2:c3:ac:ad:19:f2:25:af:ed:70:7e:22:36:08:1b:
2d:84:46:e9:d0:37:27:d4:7f:ba:2a:22:e2:ce:81:66:58:d7:
7e:db:f6:1b:9a:92:fe:6f:50:44:11:2f:ed:06:7b:35:93:8d:
b7:d7:d2:f0:16:06:d7:da:92:55:fe:c7:92:af:9e:96:09:92:
e6:b8:74:ec:58:b5:58:7c:88:b6:d6:6e:ef:f9:86:d3:1b:cd:
42:8c:63:7b:73:2b:bc:48:82:09:31:9b:ea:0a:f3:3b:1f:8a:
07:c7:5b:b5
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULVBLnorL/fJebk+ntt0wLxq7f0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA3MzAwMTIwMjdaFw0yNjEwMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ2OGVkNmViMWQ4NmY3MTJlZDJjMDhiZjdmMjFkYWM1MTQ1MTIyZmRiZjJj
OTE3ZDg5ZDNjZmJkMWNlNmQxMWIxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALPYtYeZJwRGhgSWajEvhdpQOg7EO4Gz6cG1q7R0pnQYXCf4xc4cf4oTLLdu
PF6SrcHlgd5VIYwnBllDo7zQPU04S81zd39KbsPo9cDU7TlFUw8pJQfEZ9sBUzgG
8sg0mx5g/n0AT3UllLfWjvAEViPHR/fMuRtABbrjeMQepCmymDFUyHrsMpQy166U
FKPm3AxVdG+0H9taoAQDJzBc4N0REJbJF194RP8oJwBllGWjHumAk+opf9zKxo26
EivRgQS1zSmxshNMZRV+XPRn/geX7JvDIF94yQxJwapbOwHD4gizIE7ICO7PR7dS
Ip1h0lZ4ZPdpgR9O8rQhnQM/4MUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSlVepQ
joEE8pCZxsDaoBF/znUnjTAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
ZWU3MGNhM2UtYTdkZC00M2Q4LWJiMzAtMDFjYzJmNDZlMWZjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8MI
MA0GCSqGSIb3DQEBCwUAA4IBAQAbXF0URlKS+Z+AVyPI9OuHROym3y0WLDY7nJvH
55YOHWr3tMLuCouoi2o1Qm4lF6VdEJQA7zET2LwmX0QmZcnuGQIZhsXiT/qv3lL6
uZ7fnw04S/fhvpuly1SFpak9sVo9/bwWxFqLcy3hO7gn2a7UYMxICaDTYxSDSEl/
JxhYrUkyF/0flrdL21eMZ+kweS77CFbyw6ytGfIlr+1wfiI2CBsthEbp0Dcn1H+6
KiLizoFmWNd+2/YbmpL+b1BEES/tBns1k42319LwFgbX2pJV/seSr56WCZLmuHTs
WLVYfIi21m7v+YbTG81CjGN7cyu8SIIJMZvqCvM7H4oHx1u1
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:38 2026 by rpki-client