Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/58484253-8eac-4458-94db-ba86ab3690bf.roa
File: 58484253-8eac-4458-94db-ba86ab3690bf.roa (raw, json)
Hash identifier: NshGocrEmazrKDRALL3Uk3YL7BR8u9RB56ZNX71O8ys=
Subject key identifier: DD:2A:7D:18:F5:9D:91:15:EA:B3:62:61:E2:59:B6:04:CE:E6:5C:79
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 0E5EE83BAF94260C69FC0710EA8D9591663256F5
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/58484253-8eac-4458-94db-ba86ab3690bf.roa
Signing time: Sat 25 Jul 2026 00:40:07 +0000
ROA not before: Sat 25 Jul 2026 00:40:07 +0000
ROA not after: Fri 23 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:5e:e8:3b:af:94:26:0c:69:fc:07:10:ea:8d:95:91:66:32:56:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 25 00:40:07 2026 GMT
Not After : Oct 23 23:59:59 2026 GMT
Subject: serialNumber=b92a5ebdcffa55e2268148708e3aa4bca3a74f7301b3c7f36fa8aa47cd5a02bc, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:65:78:37:e4:cf:8b:77:d7:d1:07:9b:65:41:
38:f6:ef:a5:4d:48:5e:e5:fe:83:f1:aa:70:03:c2:
7d:b2:25:0a:27:24:84:8e:e8:57:2c:24:2b:3d:b5:
80:34:31:a8:38:da:16:cc:49:ed:c4:c9:53:b6:ef:
3c:b9:63:ab:0e:44:70:20:08:13:13:6a:25:82:52:
a5:6a:56:d7:0c:97:0b:e1:b6:7b:42:96:59:11:e2:
79:a0:36:69:d5:31:9e:c1:56:22:53:cf:5b:ac:20:
fb:95:e8:66:13:25:f2:40:c5:62:b0:38:7e:c3:ca:
98:72:bd:04:6e:c4:63:cd:5c:c6:f3:dc:eb:d0:80:
1e:6e:34:f3:d0:6d:e8:37:66:f8:9a:63:cd:61:52:
b9:0b:7b:3b:a2:3d:2c:13:ac:f2:cd:0f:1e:80:7d:
b8:a6:51:a6:1e:f2:8d:91:b4:ea:57:52:fc:65:18:
8d:c8:79:52:43:a8:55:1c:9c:62:a7:5c:ed:29:9a:
34:46:a8:ad:5e:95:0e:4b:e8:64:43:79:9b:7b:40:
7d:df:76:34:92:53:dc:c5:e7:27:f2:f2:63:d6:53:
23:b7:b0:1b:bb:6d:de:ed:82:22:36:e1:1f:a3:69:
5f:55:17:7d:31:3e:c6:bb:24:87:90:1b:3d:8a:cd:
31:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2A:7D:18:F5:9D:91:15:EA:B3:62:61:E2:59:B6:04:CE:E6:5C:79
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/58484253-8eac-4458-94db-ba86ab3690bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:1000::/36
Signature Algorithm: sha256WithRSAEncryption
14:02:2f:bc:f5:35:04:af:6d:33:cb:3e:90:ee:e1:16:43:c0:
5f:66:3d:e9:20:48:4b:b3:68:76:55:68:c5:a8:8f:51:b6:a2:
99:e3:95:51:6d:7e:ca:86:7d:ed:9a:9e:93:6b:4c:63:c8:d0:
78:46:65:da:e5:3d:26:3c:f6:be:60:fc:38:8b:e2:67:9f:e6:
60:88:57:f8:ce:04:b7:48:b9:ac:0f:33:35:71:f4:7e:74:e9:
61:c7:b3:4c:68:65:e3:d1:1a:0f:58:87:e3:30:c3:a4:58:21:
70:9d:4e:81:92:66:c1:6c:45:3d:ea:91:00:6c:de:03:71:9f:
60:b8:7b:35:19:46:2c:61:6c:98:b5:97:fd:e8:85:f9:ac:55:
71:3b:04:14:c2:7f:80:84:78:f1:f1:18:e5:aa:49:35:b7:81:
2c:c4:df:0e:e3:d4:24:79:69:26:c5:e9:1d:31:f3:09:50:1b:
88:d2:25:13:2c:6b:08:3c:15:e5:e0:33:f7:5e:8f:f9:12:91:
1b:31:7d:de:8f:c4:d7:8f:38:4a:51:03:c5:e1:9b:f0:d5:15:
ad:c8:7c:49:c5:fa:74:82:10:f3:44:64:bb:53:de:42:93:88:
b8:90:4e:ff:fe:ef:19:3a:4a:ad:43:9a:6a:da:d2:dc:0b:d5:
ce:58:3a:ab
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUDl7oO6+UJgxp/AcQ6o2VkWYyVvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA3MjUwMDQwMDdaFw0yNjEwMjMyMzU5NTlaMHoxSTBHBgNV
BAUTQGI5MmE1ZWJkY2ZmYTU1ZTIyNjgxNDg3MDhlM2FhNGJjYTNhNzRmNzMwMWIz
YzdmMzZmYThhYTQ3Y2Q1YTAyYmMxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOFleDfkz4t319EHm2VBOPbvpU1IXuX+g/GqcAPCfbIlCickhI7oVywkKz21
gDQxqDjaFsxJ7cTJU7bvPLljqw5EcCAIExNqJYJSpWpW1wyXC+G2e0KWWRHieaA2
adUxnsFWIlPPW6wg+5XoZhMl8kDFYrA4fsPKmHK9BG7EY81cxvPc69CAHm4089Bt
6Ddm+JpjzWFSuQt7O6I9LBOs8s0PHoB9uKZRph7yjZG06ldS/GUYjch5UkOoVRyc
Yqdc7SmaNEaorV6VDkvoZEN5m3tAfd92NJJT3MXnJ/LyY9ZTI7ewG7tt3u2CIjbh
H6NpX1UXfTE+xrskh5AbPYrNMYUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTdKn0Y
9Z2RFeqzYmHiWbYEzuZceTAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NTg0ODQyNTMtOGVhYy00NDU4LTk0ZGItYmE4NmFiMzY5MGJmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8UQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAUAi+89TUEr20zyz6Q7uEWQ8BfZj3pIEhLs2h2
VWjFqI9RtqKZ45VRbX7Khn3tmp6Ta0xjyNB4RmXa5T0mPPa+YPw4i+Jnn+ZgiFf4
zgS3SLmsDzM1cfR+dOlhx7NMaGXj0RoPWIfjMMOkWCFwnU6BkmbBbEU96pEAbN4D
cZ9guHs1GUYsYWyYtZf96IX5rFVxOwQUwn+AhHjx8Rjlqkk1t4EsxN8O49QkeWkm
xekdMfMJUBuI0iUTLGsIPBXl4DP3Xo/5EpEbMX3ej8TXjzhKUQPF4Zvw1RWtyHxJ
xfp0ghDzRGS7U95Ck4i4kE7//u8ZOkqtQ5pq2tLcC9XOWDqr
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:43:55 2026 by rpki-client