Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e19327e-c6cf-454d-994b-aa031c9efdce.roa
File: 4e19327e-c6cf-454d-994b-aa031c9efdce.roa (raw, json)
Hash identifier: tVAhOfnb22VsXJYPZSSm4f3qUVEJY3yF4harUiAb6Mg=
Subject key identifier: C1:47:CE:3B:0C:6C:E2:52:78:3F:47:B9:9C:88:BF:67:CF:52:89:E7
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3D4F2632DC62B85A0DAB3FFCBE014EFA95243C52
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e19327e-c6cf-454d-994b-aa031c9efdce.roa
Signing time: Sat 04 Apr 2026 00:00:29 +0000
ROA not before: Sat 04 Apr 2026 00:00:29 +0000
ROA not after: Fri 03 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:3000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:4f:26:32:dc:62:b8:5a:0d:ab:3f:fc:be:01:4e:fa:95:24:3c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Apr 4 00:00:29 2026 GMT
Not After : Jul 3 23:59:59 2026 GMT
Subject: serialNumber=3f782d8f52378bd0533e02ac7ba8c90ba831f9d1f45ed18b09e83bd346f869a8, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:79:00:80:49:15:c7:f7:2a:20:6b:bf:b0:97:
63:63:7b:84:6f:cf:5c:d5:01:eb:b3:cd:05:49:74:
63:c2:ae:19:ba:1f:0a:b1:ca:23:f2:37:b9:76:68:
56:19:bd:e4:15:97:e4:f5:41:04:93:be:ae:3a:38:
5f:0d:1e:76:67:cf:5c:58:59:09:13:91:d6:cb:2e:
03:0c:9f:84:d5:2b:40:cf:b1:da:bf:c7:83:d4:2e:
e9:04:ad:61:d5:4a:73:1a:33:9d:42:e9:9a:99:c8:
0c:03:42:65:86:53:53:04:5e:24:76:ff:fc:d4:26:
40:dc:30:af:25:32:d9:4c:45:87:a0:e9:ef:87:a7:
26:f8:91:47:94:61:1b:a9:3f:01:93:db:3e:42:30:
8b:42:be:a7:94:d4:e9:a9:b0:27:c4:06:2d:52:0b:
1b:86:e7:24:09:59:82:f9:2a:06:06:c6:99:5d:20:
26:ad:c1:d9:f4:17:38:be:ad:98:51:b0:2d:98:9d:
c5:c8:54:b8:82:2a:85:c2:b0:ce:bd:83:d0:0d:9f:
62:50:65:79:fc:4c:75:f5:37:4c:f7:26:2f:a7:a5:
aa:96:d8:70:16:66:73:61:60:85:f8:f1:a4:d2:79:
17:a1:54:a0:b9:80:eb:a5:cc:75:40:82:20:14:5b:
80:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:CE:3B:0C:6C:E2:52:78:3F:47:B9:9C:88:BF:67:CF:52:89:E7
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e19327e-c6cf-454d-994b-aa031c9efdce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:3000::/40
Signature Algorithm: sha256WithRSAEncryption
33:6c:ff:0f:f5:2f:9d:ad:05:33:01:d8:20:0c:ef:25:a7:c1:
8d:03:6f:f4:05:5c:ff:3a:f2:a5:09:d1:61:40:6a:3a:67:50:
ef:70:36:e6:d0:b9:09:a4:56:bb:4b:d9:77:c5:d2:4b:83:c6:
1b:58:f1:81:44:22:49:a7:f8:4c:ea:4b:e8:6a:d2:fa:2f:65:
12:82:d8:89:84:ce:59:29:95:cc:a8:ad:25:64:bd:46:73:61:
76:e0:a4:6f:6a:9c:a5:f2:89:1d:a7:cf:5d:1f:73:05:83:42:
ba:63:d1:6d:8f:01:b0:dc:64:a1:38:77:e7:5c:3c:64:a3:c5:
a0:8c:3f:91:ec:ec:95:cf:02:6b:da:c2:2c:8f:60:1e:31:a9:
58:17:3e:65:58:bf:f4:ff:4c:8c:78:bd:5e:7d:47:8d:bd:08:
f5:2c:80:a4:05:39:b6:a6:0a:a3:2b:03:50:28:44:a7:8c:c3:
3d:9b:1f:aa:98:d1:9d:38:7a:54:4b:93:77:09:49:bc:c0:8c:
c1:13:d2:79:ee:a3:85:10:d8:b8:35:b3:d3:cf:b9:f5:dc:72:
f6:49:ca:cc:09:1f:12:7d:1f:8d:75:d1:5c:f5:1b:9d:80:a8:
fe:5f:70:2c:9d:6b:1a:e0:cc:2e:9a:1a:3a:c8:e7:5c:13:48:
72:40:7a:7e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUPU8mMtxiuFoNqz/8vgFO+pUkPFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA0MDQwMDAwMjlaFw0yNjA3MDMyMzU5NTlaMHoxSTBHBgNV
BAUTQDNmNzgyZDhmNTIzNzhiZDA1MzNlMDJhYzdiYThjOTBiYTgzMWY5ZDFmNDVl
ZDE4YjA5ZTgzYmQzNDZmODY5YTgxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJx5AIBJFcf3KiBrv7CXY2N7hG/PXNUB67PNBUl0Y8KuGbofCrHKI/I3uXZo
Vhm95BWX5PVBBJO+rjo4Xw0edmfPXFhZCROR1ssuAwyfhNUrQM+x2r/Hg9Qu6QSt
YdVKcxoznULpmpnIDANCZYZTUwReJHb//NQmQNwwryUy2UxFh6Dp74enJviRR5Rh
G6k/AZPbPkIwi0K+p5TU6amwJ8QGLVILG4bnJAlZgvkqBgbGmV0gJq3B2fQXOL6t
mFGwLZidxchUuIIqhcKwzr2D0A2fYlBlefxMdfU3TPcmL6elqpbYcBZmc2Fghfjx
pNJ5F6FUoLmA66XMdUCCIBRbgIsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTBR847
DGziUng/R7mciL9nz1KJ5zAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NGUxOTMyN2UtYzZjZi00NTRkLTk5NGItYWEwMzFjOWVmZGNlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8cw
MA0GCSqGSIb3DQEBCwUAA4IBAQAzbP8P9S+drQUzAdggDO8lp8GNA2/0BVz/OvKl
CdFhQGo6Z1DvcDbm0LkJpFa7S9l3xdJLg8YbWPGBRCJJp/hM6kvoatL6L2USgtiJ
hM5ZKZXMqK0lZL1Gc2F24KRvapyl8okdp89dH3MFg0K6Y9FtjwGw3GShOHfnXDxk
o8WgjD+R7OyVzwJr2sIsj2AeMalYFz5lWL/0/0yMeL1efUeNvQj1LICkBTm2pgqj
KwNQKESnjMM9mx+qmNGdOHpUS5N3CUm8wIzBE9J57qOFENi4NbPTz7n13HL2ScrM
CR8SfR+NddFc9RudgKj+X3AsnWsa4Mwumho6yOdcE0hyQHp+
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:47:02 2026 by rpki-client