Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4385f0b9-6e02-4e47-9a00-c64aafffd4e9.roa
File: 4385f0b9-6e02-4e47-9a00-c64aafffd4e9.roa (raw, json)
Hash identifier: tmyTXxRPhk8mS+kS2uVBQ416yPT9El3RJHSmq5eWKy8=
Subject key identifier: 4A:3A:61:FB:18:47:98:2C:BE:AA:AC:81:72:D2:63:09:97:0A:CD:D1
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5C9F83F7EC937E1C89C7A50807C70125A1512499
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4385f0b9-6e02-4e47-9a00-c64aafffd4e9.roa
Signing time: Fri 11 Sep 2026 00:00:07 +0000
ROA not before: Fri 11 Sep 2026 00:00:07 +0000
ROA not after: Thu 10 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9f:83:f7:ec:93:7e:1c:89:c7:a5:08:07:c7:01:25:a1:51:24:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Sep 11 00:00:07 2026 GMT
Not After : Dec 10 23:59:59 2026 GMT
Subject: serialNumber=365fec48ab6c54546439f1cad6001c1bbdb8bd77f005a5262592fac1c6cf07f2, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:ca:f5:c9:ca:d4:65:76:d2:5c:da:8d:f3:
46:a9:d9:d1:50:3f:d5:73:bc:ed:84:a4:de:c9:db:
49:c8:f7:38:bb:f3:10:ff:d5:f0:b6:a6:e9:39:a4:
59:11:bd:54:ce:c1:dd:6b:55:91:13:bf:86:db:fc:
42:61:6a:68:d5:c9:0a:64:5c:a9:19:aa:38:e1:78:
0e:c7:8e:8c:17:07:fd:63:9a:a4:69:e5:19:0b:ad:
11:ce:a8:b5:aa:d2:c3:76:2a:b3:4c:5d:44:db:b7:
a8:77:7a:fc:58:2c:2c:96:c4:a7:8c:0b:18:32:dd:
9f:f5:63:3c:39:fa:2c:c8:cb:5f:1d:6b:6f:22:53:
49:1b:fc:c3:18:19:e5:4e:4d:de:77:af:24:cb:de:
80:2f:f2:7e:be:8d:89:0d:61:ea:e1:71:81:14:5d:
b9:00:4d:f4:03:b4:7e:1b:86:df:c6:ac:3f:64:78:
2a:f0:65:74:b1:2c:b4:ee:18:69:e1:45:e4:3b:bf:
e4:c1:68:46:29:55:a1:92:48:18:01:4c:7f:99:b2:
28:3c:85:06:0b:89:46:81:ab:1f:38:94:a9:0b:27:
6e:5d:d7:2a:6f:6a:93:b2:44:0c:54:db:a4:db:fb:
8d:16:a2:34:ae:36:cd:7d:61:4c:64:6b:28:8b:90:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3A:61:FB:18:47:98:2C:BE:AA:AC:81:72:D2:63:09:97:0A:CD:D1
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4385f0b9-6e02-4e47-9a00-c64aafffd4e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:3000::/36
Signature Algorithm: sha256WithRSAEncryption
6e:f3:eb:aa:74:d6:ae:33:d9:d3:42:d3:76:88:bf:d2:72:e3:
0d:42:40:d0:52:ba:1a:e1:03:1d:05:41:c4:8b:57:a2:d4:d8:
9b:7b:06:a7:4b:bb:2e:1c:30:b2:ab:85:fd:4e:c1:8c:8b:0e:
65:c1:b6:69:b3:42:7e:a8:54:c4:17:99:83:88:2e:f7:ca:08:
62:28:48:0c:e1:2f:39:03:60:fb:b9:ac:da:83:4e:6c:0b:0e:
85:6a:89:fd:fc:a4:0f:ca:53:63:20:3b:a1:21:56:ad:15:60:
a3:14:4c:29:ad:b9:bd:73:51:a7:ef:80:a9:cc:69:5c:2a:f1:
ca:8d:88:9e:83:fc:10:23:6a:f7:7b:2f:93:80:da:17:a3:16:
29:19:ee:1b:26:d3:d0:d3:ca:8d:9c:6a:11:6d:6e:ff:e9:e1:
74:a3:fe:45:e2:30:79:40:5f:6e:7a:1d:96:10:65:d5:55:7e:
22:06:dc:3a:91:e8:ae:b0:7e:88:c6:71:87:c9:4b:c7:0e:4c:
ee:dd:2c:95:e6:06:17:d2:fa:b3:76:af:ce:1a:c0:e5:85:b6:
d8:7d:8e:71:be:15:1f:65:bb:3f:12:e7:22:63:c4:aa:ae:79:
cc:c7:bd:9f:38:86:c3:7b:83:04:5b:9e:fb:4e:3e:ed:66:ec:
0d:8f:4c:0d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXJ+D9+yTfhyJx6UIB8cBJaFRJJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA5MTEwMDAwMDdaFw0yNjEyMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDM2NWZlYzQ4YWI2YzU0NTQ2NDM5ZjFjYWQ2MDAxYzFiYmRiOGJkNzdmMDA1
YTUyNjI1OTJmYWMxYzZjZjA3ZjIxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKVNyvXJytRldtJc2o3zRqnZ0VA/1XO87YSk3snbScj3OLvzEP/V8Lam6Tmk
WRG9VM7B3WtVkRO/htv8QmFqaNXJCmRcqRmqOOF4DseOjBcH/WOapGnlGQutEc6o
tarSw3Yqs0xdRNu3qHd6/FgsLJbEp4wLGDLdn/VjPDn6LMjLXx1rbyJTSRv8wxgZ
5U5N3nevJMvegC/yfr6NiQ1h6uFxgRRduQBN9AO0fhuG38asP2R4KvBldLEstO4Y
aeFF5Du/5MFoRilVoZJIGAFMf5myKDyFBguJRoGrHziUqQsnbl3XKm9qk7JEDFTb
pNv7jRaiNK42zX1hTGRrKIuQxfMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRKOmH7
GEeYLL6qrIFy0mMJlwrN0TAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NDM4NWYwYjktNmUwMi00ZTQ3LTlhMDAtYzY0YWFmZmZkNGU5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8cw
MA0GCSqGSIb3DQEBCwUAA4IBAQBu8+uqdNauM9nTQtN2iL/ScuMNQkDQUroa4QMd
BUHEi1ei1NibewanS7suHDCyq4X9TsGMiw5lwbZps0J+qFTEF5mDiC73yghiKEgM
4S85A2D7uazag05sCw6Faon9/KQPylNjIDuhIVatFWCjFEwprbm9c1Gn74CpzGlc
KvHKjYieg/wQI2r3ey+TgNoXoxYpGe4bJtPQ08qNnGoRbW7/6eF0o/5F4jB5QF9u
eh2WEGXVVX4iBtw6keiusH6IxnGHyUvHDkzu3SyV5gYX0vqzdq/OGsDlhbbYfY5x
vhUfZbs/EuciY8SqrnnMx72fOIbDe4MEW577Tj7tZuwNj0wN
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:13:02 2026 by rpki-client