Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/72ef2c47-a8e3-4e0c-aab9-ec5604ba99e5.roa
File: 72ef2c47-a8e3-4e0c-aab9-ec5604ba99e5.roa (raw, json)
Hash identifier: ddKgFnB242u8qM+Gis9xmDYjy99kYXfIktV2+iMk9ac=
Subject key identifier: 1E:4A:05:B2:07:DA:8D:23:F4:BD:41:D5:72:47:D9:A0:8B:E8:A8:EB
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 10D4A351A6201240AF84FFB05D1D012C9ECB1AAE
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/72ef2c47-a8e3-4e0c-aab9-ec5604ba99e5.roa
Signing time: Sat 25 Jul 2026 00:40:07 +0000
ROA not before: Sat 25 Jul 2026 00:40:07 +0000
ROA not after: Fri 23 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d4:a3:51:a6:20:12:40:af:84:ff:b0:5d:1d:01:2c:9e:cb:1a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 25 00:40:07 2026 GMT
Not After : Oct 23 23:59:59 2026 GMT
Subject: serialNumber=efc716f813198d54d3ce8c1d493e44c9aac7328b9662b20b2de729a3508d675a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:dd:ac:3b:de:6b:3e:71:ba:a9:1a:d4:7a:
c8:c4:27:83:ec:8c:6b:6e:b6:07:ac:76:d8:45:41:
42:d1:cb:33:fd:62:eb:ef:28:6b:77:d4:e5:83:40:
3f:ed:75:97:16:26:b7:2a:62:8c:e2:d4:97:d6:d2:
8c:87:b6:1d:0a:f2:4c:56:44:ff:6f:ba:72:9b:cb:
da:d8:2a:98:9d:54:16:b6:b8:36:70:56:08:1a:21:
3d:9b:e4:64:f3:ee:0c:7d:89:f3:68:0e:77:91:fd:
83:cf:45:01:07:7d:a7:7e:ad:f4:3c:dd:af:67:57:
7f:ec:3c:1b:dd:1a:51:59:a4:b7:7b:22:d2:83:f4:
fc:e2:aa:f5:d0:f4:07:21:d3:48:05:1e:65:0b:16:
46:80:f1:53:16:97:10:ad:c6:65:c8:27:30:38:0a:
cb:a8:5e:f3:ae:89:61:d6:35:a5:57:64:37:31:e0:
f1:c9:ed:40:54:22:83:a1:46:6f:84:1d:f3:ba:0b:
3b:6d:2f:bd:da:1f:63:86:86:33:79:34:6d:b0:39:
02:28:8e:f0:f6:a2:76:0b:06:ca:2e:82:a3:92:5f:
04:50:b3:a7:40:6e:15:fc:21:72:c7:8c:96:ac:d5:
c6:c3:00:ef:e4:1e:1f:8e:00:b9:97:c6:d0:57:7b:
c0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4A:05:B2:07:DA:8D:23:F4:BD:41:D5:72:47:D9:A0:8B:E8:A8:EB
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/72ef2c47-a8e3-4e0c-aab9-ec5604ba99e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:1000::/40
Signature Algorithm: sha256WithRSAEncryption
4a:06:63:98:cd:a9:ce:64:8e:8a:99:95:43:b9:6d:8d:28:c6:
7e:5d:00:ae:91:ac:2c:a9:4d:ad:0a:10:4b:03:bf:25:91:38:
51:89:0d:3d:d6:c6:fa:8f:a5:9c:5b:ff:f7:c0:f5:b8:79:fc:
8b:6f:b1:96:33:dd:d9:fc:a9:b3:2e:c5:50:79:91:5e:93:d6:
9c:40:4f:de:dd:37:96:11:fe:b9:7b:10:90:b0:fb:30:2e:bf:
1d:48:60:26:c6:a0:d3:60:78:48:7e:c3:fa:60:11:56:25:53:
0a:4b:91:13:13:12:ad:90:82:a4:7a:9d:30:81:d8:e4:83:62:
7a:e5:71:8a:8b:17:ff:1b:8d:e0:ac:24:41:59:dc:23:ce:fa:
2c:55:55:eb:95:e0:3c:36:89:ae:49:4b:ec:8d:0e:27:b3:5d:
7f:8a:97:38:b5:e1:38:eb:eb:61:d2:a2:82:a1:21:01:7b:60:
2e:ce:d8:c6:c6:a6:e8:85:5c:3d:a8:fe:07:c8:e8:cb:58:aa:
c3:3f:23:62:0c:93:38:8a:64:73:46:07:20:0b:ec:cd:bd:e2:
1a:78:61:8d:32:32:ac:36:60:70:17:da:69:42:59:70:09:22:
93:0d:98:9c:94:a1:1d:20:4c:e6:ac:3c:ce:59:f0:b6:8f:4b:
0e:f0:54:e9
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUENSjUaYgEkCvhP+wXR0BLJ7LGq4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA3MjUwMDQwMDdaFw0yNjEwMjMyMzU5NTlaMHoxSTBHBgNV
BAUTQGVmYzcxNmY4MTMxOThkNTRkM2NlOGMxZDQ5M2U0NGM5YWFjNzMyOGI5NjYy
YjIwYjJkZTcyOWEzNTA4ZDY3NWExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI7V3aw73ms+cbqpGtR6yMQng+yMa262B6x22EVBQtHLM/1i6+8oa3fU5YNA
P+11lxYmtypijOLUl9bSjIe2HQryTFZE/2+6cpvL2tgqmJ1UFra4NnBWCBohPZvk
ZPPuDH2J82gOd5H9g89FAQd9p36t9Dzdr2dXf+w8G90aUVmkt3si0oP0/OKq9dD0
ByHTSAUeZQsWRoDxUxaXEK3GZcgnMDgKy6he866JYdY1pVdkNzHg8cntQFQig6FG
b4Qd87oLO20vvdofY4aGM3k0bbA5AiiO8PaidgsGyi6Co5JfBFCzp0BuFfwhcseM
lqzVxsMA7+QeH44AuZfG0Fd7wJ0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQeSgWy
B9qNI/S9QdVyR9mgi+io6zAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NzJlZjJjNDctYThlMy00ZTBjLWFhYjktZWM1NjA0YmE5OWU1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8UQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBKBmOYzanOZI6KmZVDuW2NKMZ+XQCukawsqU2t
ChBLA78lkThRiQ091sb6j6WcW//3wPW4efyLb7GWM93Z/KmzLsVQeZFek9acQE/e
3TeWEf65exCQsPswLr8dSGAmxqDTYHhIfsP6YBFWJVMKS5ETExKtkIKkep0wgdjk
g2J65XGKixf/G43grCRBWdwjzvosVVXrleA8NomuSUvsjQ4ns11/ipc4teE46+th
0qKCoSEBe2AuztjGxqbohVw9qP4HyOjLWKrDPyNiDJM4imRzRgcgC+zNveIaeGGN
MjKsNmBwF9ppQllwCSKTDZiclKEdIEzmrDzOWfC2j0sO8FTp
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:28:45 2026 by rpki-client