Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/90f8b92e-ed01-4060-b34e-9ba60584188b.roa
File: 90f8b92e-ed01-4060-b34e-9ba60584188b.roa (raw, json)
Hash identifier: VFr5u0IKzvFJT5yDRMSKIjVI3cYX10Q9YPM4X9taDzw=
Subject key identifier: 04:AD:4E:84:35:F2:33:DB:EC:84:A8:2D:B8:42:92:D8:83:61:8C:1A
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 19A93FCFE9721A7692C68A246FDDBBC8043D3DE2
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/90f8b92e-ed01-4060-b34e-9ba60584188b.roa
Signing time: Mon 14 Sep 2026 19:03:02 +0000
ROA not before: Mon 14 Sep 2026 19:03:02 +0000
ROA not after: Sun 13 Dec 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2a0e:9780::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a9:3f:cf:e9:72:1a:76:92:c6:8a:24:6f:dd:bb:c8:04:3d:3d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Sep 14 19:03:02 2026 GMT
Not After : Dec 13 23:59:59 2026 GMT
Subject: serialNumber=1ba4ba4d3eb9ae515f9d9fe28738642da22edf977c8a0cab6a9be30b65fe2a15, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:89:05:dd:9a:30:4d:f4:ce:82:e1:b2:c9:
db:cd:02:cb:a9:14:73:85:7a:c2:58:4e:c3:c3:56:
9b:c9:9b:a0:cb:cd:0c:ee:59:22:00:1f:43:e9:45:
9f:ca:3b:1a:c5:f3:57:5a:89:9a:6b:db:df:4c:95:
f1:3b:0d:af:06:e5:b2:e3:aa:9e:4e:72:a1:e6:0c:
98:a2:e6:76:49:82:18:0e:9a:6d:a1:8d:3d:dc:a6:
02:76:34:41:44:65:8e:1c:8a:53:34:ed:ec:17:6b:
73:72:9c:a0:b6:9e:3e:81:69:4a:b9:9d:cc:bb:56:
61:78:69:38:2d:4c:20:49:5a:0d:d8:47:f1:75:b3:
8f:d8:e1:a7:78:a0:35:b3:74:a6:b6:d8:cf:ec:59:
db:23:d2:a8:d2:ed:01:6c:36:de:27:a9:3e:f4:95:
ce:98:59:6c:4a:78:6a:e6:70:30:41:e1:b6:c4:97:
3d:51:b8:ef:27:7a:8a:59:dd:45:e3:42:56:f7:90:
0d:38:b4:da:fc:9c:c0:a7:c3:22:7f:29:42:12:3b:
88:01:6a:ad:e3:7b:f1:86:82:7f:cb:58:39:3c:e3:
f9:fc:c6:b9:0a:94:07:59:0e:73:64:1e:75:af:cd:
f2:48:75:d6:54:f3:f2:a0:ca:68:f3:94:16:db:d0:
f4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AD:4E:84:35:F2:33:DB:EC:84:A8:2D:B8:42:92:D8:83:61:8C:1A
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/90f8b92e-ed01-4060-b34e-9ba60584188b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:9780::/29
Signature Algorithm: sha256WithRSAEncryption
5b:03:74:7b:94:08:90:eb:d4:ea:cb:98:12:8d:ee:62:b4:f1:
c0:c9:46:68:e0:46:de:a5:26:90:c0:c3:da:ca:f7:fb:a4:ab:
6e:7d:56:fc:f9:b0:1e:54:53:25:ea:c5:21:cd:ed:63:1d:7b:
cc:4f:93:d4:7e:91:93:ae:b0:37:17:7f:ea:9e:d3:fb:d9:25:
e1:d2:cd:b8:5c:6a:27:92:a2:fe:be:08:21:d2:a9:18:48:83:
12:ae:e4:ec:76:93:62:f2:cd:4d:ba:08:2b:fb:28:22:30:12:
e9:13:1e:83:37:a2:3e:a9:db:5c:d9:0b:0b:4f:55:41:d8:21:
f8:3f:01:c9:10:19:d8:55:92:9a:11:be:94:a4:69:a7:25:2c:
48:39:7e:6f:53:f3:70:75:0a:7e:38:87:d6:48:e5:99:b6:b0:
8d:14:4a:42:4a:aa:32:5b:34:4e:b5:ea:d2:76:fd:01:b7:c5:
8f:8b:5c:ef:69:72:85:e2:c1:37:ec:c0:3e:19:8c:77:3e:b4:
17:78:53:45:24:ad:88:11:63:c7:d9:54:ea:2b:44:a8:cb:5f:
f1:37:c8:17:0b:eb:3f:05:28:cf:8c:84:4a:a0:e3:9b:67:16:
4c:56:3f:aa:91:af:2f:9d:7e:bc:19:d4:24:a4:04:50:eb:dc:
f0:15:e0:26
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUGak/z+lyGnaSxookb927yAQ9PeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA5MTQxOTAzMDJaFw0yNjEyMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQDFiYTRiYTRkM2ViOWFlNTE1ZjlkOWZlMjg3Mzg2NDJkYTIyZWRmOTc3Yzhh
MGNhYjZhOWJlMzBiNjVmZTJhMTUxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALsJiQXdmjBN9M6C4bLJ280Cy6kUc4V6wlhOw8NWm8mboMvNDO5ZIgAfQ+lF
n8o7GsXzV1qJmmvb30yV8TsNrwblsuOqnk5yoeYMmKLmdkmCGA6abaGNPdymAnY0
QURljhyKUzTt7Bdrc3KcoLaePoFpSrmdzLtWYXhpOC1MIElaDdhH8XWzj9jhp3ig
NbN0prbYz+xZ2yPSqNLtAWw23iepPvSVzphZbEp4auZwMEHhtsSXPVG47yd6ilnd
ReNCVveQDTi02vycwKfDIn8pQhI7iAFqreN78YaCf8tYOTzj+fzGuQqUB1kOc2Qe
da/N8kh11lTz8qDKaPOUFtvQ9BUCAwEAAaOCAiIwggIeMB0GA1UdDgQWBBQErU6E
NfIz2+yEqC24QpLYg2GMGjAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
OTBmOGI5MmUtZWQwMS00MDYwLWIzNGUtOWJhNjA1ODQxODhiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoOl4Aw
DQYJKoZIhvcNAQELBQADggEBAFsDdHuUCJDr1OrLmBKN7mK08cDJRmjgRt6lJpDA
w9rK9/ukq259Vvz5sB5UUyXqxSHN7WMde8xPk9R+kZOusDcXf+qe0/vZJeHSzbhc
aieSov6+CCHSqRhIgxKu5Ox2k2LyzU26CCv7KCIwEukTHoM3oj6p21zZCwtPVUHY
Ifg/AckQGdhVkpoRvpSkaaclLEg5fm9T83B1Cn44h9ZI5Zm2sI0USkJKqjJbNE61
6tJ2/QG3xY+LXO9pcoXiwTfswD4ZjHc+tBd4U0UkrYgRY8fZVOorRKjLX/E3yBcL
6z8FKM+MhEqg45tnFkxWP6qRry+dfrwZ1CSkBFDr3PAV4CY=
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:01 2026 by rpki-client