Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fda00aef-6886-4665-94fd-a76addf441b7.roa
File: fda00aef-6886-4665-94fd-a76addf441b7.roa (raw, json)
Hash identifier: fZ+AsanCg+2rTpLxU+KOf/EaiOcUJIn2pE9k79qo26o=
Subject key identifier: 6B:08:37:F0:EC:A8:43:17:C3:E2:E0:BD:42:07:C7:05:60:4A:9C:A8
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2EBCF69D28A02FABB12145BB8A7E18DF7526FEAA
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fda00aef-6886-4665-94fd-a76addf441b7.roa
Signing time: Thu 30 Jul 2026 01:30:34 +0000
ROA not before: Thu 30 Jul 2026 01:30:34 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:bc:f6:9d:28:a0:2f:ab:b1:21:45:bb:8a:7e:18:df:75:26:fe:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:34 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=6816fd9ced4448d526468248cad1ea02fc5d72e58bd66a90c5517cad0272eba0, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:16:9c:f6:80:02:a6:4f:ba:b2:72:62:bf:d9:
f2:3a:13:2d:4e:42:85:1c:b7:c7:77:b0:30:6f:a3:
38:a0:3c:88:97:6f:fc:f3:3c:3d:3a:82:84:bb:b0:
b2:2c:f1:d2:41:58:fc:d0:1c:27:ac:d8:a8:92:92:
44:58:ee:61:49:ba:3d:3f:b0:bb:15:db:e7:f5:8f:
90:6c:26:3d:5e:5d:34:01:ab:23:05:36:1d:69:cf:
20:f8:7c:0a:9d:2a:43:00:b6:68:42:36:bc:4c:b1:
06:8b:2b:db:4a:1e:50:bb:58:c5:38:26:c6:f3:00:
df:7d:f1:89:b2:3e:56:02:6b:49:5a:6e:79:c6:06:
1a:81:3c:4e:28:f2:b2:53:6a:b4:ef:d9:17:c6:ea:
58:d2:dc:3c:f1:77:9d:f6:6f:ca:c9:8d:84:5c:ef:
1c:78:28:3d:05:f3:ba:f3:03:38:1d:79:9b:2c:f1:
55:f2:c5:ff:81:54:bf:47:59:65:6a:f3:fd:7e:61:
8b:58:6c:1d:62:bf:1b:2e:82:db:7b:39:b8:47:1c:
04:0b:26:3f:4a:42:46:fb:47:dd:b0:0d:44:d2:31:
a2:8d:a8:32:6c:8f:2f:c2:a0:ff:0b:2d:10:72:69:
22:cc:01:71:56:c3:59:a5:09:84:28:a6:4b:9d:03:
3d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:08:37:F0:EC:A8:43:17:C3:E2:E0:BD:42:07:C7:05:60:4A:9C:A8
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fda00aef-6886-4665-94fd-a76addf441b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:8000::/36
Signature Algorithm: sha256WithRSAEncryption
01:1f:6c:56:8b:b9:c3:92:b7:d7:56:65:7d:ad:d2:c0:f0:79:
40:20:77:4f:60:55:3b:fd:48:b3:4f:b6:2e:85:13:3a:e5:ec:
9d:30:bf:fc:c4:1e:4b:f0:95:fe:dc:dd:88:1a:3c:bc:16:f0:
f0:0e:b7:f8:0b:03:d8:22:68:05:df:8c:5a:c1:31:85:dc:aa:
6f:4a:f3:ee:62:63:eb:f7:ff:d5:84:da:34:d0:df:d2:3b:c6:
b8:04:72:e7:c0:96:c3:d7:f3:e1:7c:0e:19:13:bb:97:e3:7f:
60:ae:6f:df:8c:65:dd:90:14:74:dd:e1:b5:65:06:3a:83:a2:
0e:d7:bc:07:4d:9d:73:07:61:9e:82:b7:d6:a5:e7:6a:94:6a:
7a:3d:61:73:b2:4e:c0:b1:ff:a6:fb:1d:79:c9:7d:fd:7a:6d:
14:71:fe:61:34:9f:cf:b4:65:65:08:7a:a5:10:1b:06:5b:a3:
b3:b7:af:f9:ca:d7:f6:6f:b9:79:22:23:fc:33:4d:2a:7c:7a:
ef:7a:69:7d:6c:f2:9d:44:16:9a:18:57:48:8f:d4:87:c6:9f:
00:00:ff:e1:f5:81:0a:a3:35:d1:9a:80:b8:20:47:ca:90:82:
6b:b5:aa:95:0b:c8:74:67:62:f5:9d:19:f4:74:7b:0c:af:b3:
3f:e5:60:fd
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULrz2nSigL6uxIUW7in4Y33Um/qowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA3MzAwMTMwMzRaFw0yNjEwMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQDY4MTZmZDljZWQ0NDQ4ZDUyNjQ2ODI0OGNhZDFlYTAyZmM1ZDcyZTU4YmQ2
NmE5MGM1NTE3Y2FkMDI3MmViYTAxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANIWnPaAAqZPurJyYr/Z8joTLU5ChRy3x3ewMG+jOKA8iJdv/PM8PTqChLuw
sizx0kFY/NAcJ6zYqJKSRFjuYUm6PT+wuxXb5/WPkGwmPV5dNAGrIwU2HWnPIPh8
Cp0qQwC2aEI2vEyxBosr20oeULtYxTgmxvMA333xibI+VgJrSVpuecYGGoE8Tijy
slNqtO/ZF8bqWNLcPPF3nfZvysmNhFzvHHgoPQXzuvMDOB15myzxVfLF/4FUv0dZ
ZWrz/X5hi1hsHWK/Gy6C23s5uEccBAsmP0pCRvtH3bANRNIxoo2oMmyPL8Kg/wst
EHJpIswBcVbDWaUJhCimS50DPY0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRrCDfw
7KhDF8Pi4L1CB8cFYEqcqDAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
ZmRhMDBhZWYtNjg4Ni00NjY1LTk0ZmQtYTc2YWRkZjQ0MWI3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8OA
MA0GCSqGSIb3DQEBCwUAA4IBAQABH2xWi7nDkrfXVmV9rdLA8HlAIHdPYFU7/Uiz
T7YuhRM65eydML/8xB5L8JX+3N2IGjy8FvDwDrf4CwPYImgF34xawTGF3KpvSvPu
YmPr9//VhNo00N/SO8a4BHLnwJbD1/PhfA4ZE7uX439grm/fjGXdkBR03eG1ZQY6
g6IO17wHTZ1zB2GegrfWpedqlGp6PWFzsk7Asf+m+x15yX39em0Ucf5hNJ/PtGVl
CHqlEBsGW6Ozt6/5ytf2b7l5IiP8M00qfHrveml9bPKdRBaaGFdIj9SHxp8AAP/h
9YEKozXRmoC4IEfKkIJrtaqVC8h0Z2L1nRn0dHsMr7M/5WD9
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:35 2026 by rpki-client