Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/615d3e86-4d7a-49e4-8e47-2075cfdb3c69.roa
File: 615d3e86-4d7a-49e4-8e47-2075cfdb3c69.roa (raw, json)
Hash identifier: pY4VchLOCuFhqPr6L8zsW7NqCYKN9CTKMF9eusRza6U=
Subject key identifier: 09:2F:DC:AA:D5:29:EB:2D:E8:53:6A:34:E4:31:AA:D8:D2:82:25:D1
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 468607EEE8ADF240FA8A9D8B0DCB4CCCF98C57B1
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/615d3e86-4d7a-49e4-8e47-2075cfdb3c69.roa
Signing time: Thu 17 Sep 2026 00:00:04 +0000
ROA not before: Thu 17 Sep 2026 00:00:04 +0000
ROA not after: Wed 16 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.172.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:86:07:ee:e8:ad:f2:40:fa:8a:9d:8b:0d:cb:4c:cc:f9:8c:57:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Sep 17 00:00:04 2026 GMT
Not After : Dec 16 23:59:59 2026 GMT
Subject: serialNumber=73cc0af0156fc3a91e0ec848defc9536ad30b631c96d1b4faffedf6efcfc387d, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:79:b4:e3:71:32:65:2e:43:6e:2d:2f:4f:4c:
df:a3:63:f8:3d:cf:d8:86:cb:7f:fa:a3:a4:05:9e:
28:b0:57:1d:7d:73:df:78:52:a9:82:cd:9b:ff:b3:
f7:9b:db:86:3b:8d:f7:04:1c:0f:8e:fe:8a:af:4a:
4e:b8:41:11:95:38:1f:e7:60:98:44:fe:4a:78:5f:
5e:9a:ba:dc:59:c9:10:ca:44:f2:3c:88:2f:b5:0c:
30:77:ab:ec:86:56:e8:0b:10:5a:8b:b2:62:e9:77:
1b:d2:0a:5f:26:83:12:a3:4e:87:25:62:10:d6:27:
f0:be:a0:ed:07:41:bf:1f:d5:87:f3:e4:12:1e:41:
90:0a:52:c7:11:f9:04:74:31:93:16:a8:07:a0:0d:
4a:9d:54:bc:c7:18:5a:e1:28:4c:88:58:b1:dc:b4:
ac:14:84:f9:b4:09:77:3e:1b:7b:f7:de:1f:18:24:
77:5b:c8:cf:82:38:cb:43:46:5b:af:ce:68:b7:4a:
17:2a:5b:ae:c5:f0:28:a9:3b:32:12:04:89:c4:77:
4f:09:e0:62:22:3a:ce:48:fa:b6:37:21:5f:56:dc:
21:29:50:fe:d8:90:87:67:08:e7:c1:40:de:9e:62:
ec:fb:8b:9b:3f:90:f0:29:70:13:82:36:5c:37:0e:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2F:DC:AA:D5:29:EB:2D:E8:53:6A:34:E4:31:AA:D8:D2:82:25:D1
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/615d3e86-4d7a-49e4-8e47-2075cfdb3c69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.172.0.0/15
Signature Algorithm: sha256WithRSAEncryption
34:0e:74:3d:30:84:cb:6c:b7:1d:7b:31:0d:d2:b9:07:e9:a3:
d4:ea:38:3e:83:06:ab:54:5e:f2:a0:b1:6b:e6:36:b5:72:6f:
b8:1d:c9:1b:16:66:64:e3:18:3e:d6:ac:73:66:5e:19:9e:12:
9c:e0:ab:d8:ee:8c:f1:51:50:21:7f:ef:21:9a:83:46:37:b9:
64:26:4f:48:fb:67:bb:d2:e2:fb:8f:95:ac:f7:23:24:87:6f:
4f:09:ec:df:15:57:6c:2d:ad:43:b9:8d:d5:a0:49:8b:13:c6:
7c:d2:4b:e4:a5:54:84:d8:20:f8:c0:c6:90:a7:c5:ec:20:32:
a3:66:1d:22:d4:05:c7:de:7f:3d:9a:fe:a8:ab:e4:d5:e3:26:
01:4c:b6:4c:37:cc:e9:8f:f8:eb:d3:4b:52:ba:62:55:7f:49:
39:1d:b2:bf:83:5b:fc:ea:44:a5:bf:0b:91:3a:34:ea:a9:e5:
fc:f3:a4:f9:40:a2:22:a3:34:04:39:ad:6f:b3:48:ff:ab:a1:
79:88:71:ab:fc:94:2e:8e:0b:6f:88:91:74:89:aa:76:b7:dd:
a6:be:b2:85:98:12:e5:be:13:00:26:61:09:71:40:31:26:7e:
13:6d:0e:48:6a:2a:bf:d0:5d:ba:73:c7:43:76:01:d3:f4:3a:
fb:94:26:7a
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIURoYH7uit8kD6ip2LDctMzPmMV7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA5MTcwMDAwMDRaFw0yNjEyMTYyMzU5NTlaMHoxSTBHBgNV
BAUTQDczY2MwYWYwMTU2ZmMzYTkxZTBlYzg0OGRlZmM5NTM2YWQzMGI2MzFjOTZk
MWI0ZmFmZmVkZjZlZmNmYzM4N2QxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJp5tONxMmUuQ24tL09M36Nj+D3P2IbLf/qjpAWeKLBXHX1z33hSqYLNm/+z
95vbhjuN9wQcD47+iq9KTrhBEZU4H+dgmET+SnhfXpq63FnJEMpE8jyIL7UMMHer
7IZW6AsQWouyYul3G9IKXyaDEqNOhyViENYn8L6g7QdBvx/Vh/PkEh5BkApSxxH5
BHQxkxaoB6ANSp1UvMcYWuEoTIhYsdy0rBSE+bQJdz4be/feHxgkd1vIz4I4y0NG
W6/OaLdKFypbrsXwKKk7MhIEicR3TwngYiI6zkj6tjchX1bcISlQ/tiQh2cI58FA
3p5i7PuLmz+Q8ClwE4I2XDcOtA0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQJL9yq
1SnrLehTajTkMarY0oIl0TAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NjE1ZDNlODYtNGQ3YS00OWU0LThlNDctMjA3NWNmZGIzYzY5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATOsMA0G
CSqGSIb3DQEBCwUAA4IBAQA0DnQ9MITLbLcdezEN0rkH6aPU6jg+gwarVF7yoLFr
5ja1cm+4HckbFmZk4xg+1qxzZl4ZnhKc4KvY7ozxUVAhf+8hmoNGN7lkJk9I+2e7
0uL7j5Ws9yMkh29PCezfFVdsLa1DuY3VoEmLE8Z80kvkpVSE2CD4wMaQp8XsIDKj
Zh0i1AXH3n89mv6oq+TV4yYBTLZMN8zpj/jr00tSumJVf0k5HbK/g1v86kSlvwuR
OjTqqeX886T5QKIiozQEOa1vs0j/q6F5iHGr/JQujgtviJF0iap2t92mvrKFmBLl
vhMAJmEJcUAxJn4TbQ5Iaiq/0F26c8dDdgHT9Dr7lCZ6
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:12:52 2026 by rpki-client