Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d7cfce38-f111-4991-b8b5-ef1d6f0ad997.roa
File: d7cfce38-f111-4991-b8b5-ef1d6f0ad997.roa (raw, json)
Hash identifier: 3/Bms0iwMeo8bllCPmS688eSydQOQQ444lG6r+/T6kg=
Subject key identifier: 2B:20:41:FC:3C:93:21:D4:5E:E6:B2:07:3F:96:99:FA:03:6D:D7:1C
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 597F037DD44962E40C3F4FC1C3AA2BF4F3C34741
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d7cfce38-f111-4991-b8b5-ef1d6f0ad997.roa
Signing time: Sun 26 Jul 2026 00:00:40 +0000
ROA not before: Sun 26 Jul 2026 00:00:40 +0000
ROA not after: Sat 24 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6:20::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:7f:03:7d:d4:49:62:e4:0c:3f:4f:c1:c3:aa:2b:f4:f3:c3:47:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 26 00:00:40 2026 GMT
Not After : Oct 24 23:59:59 2026 GMT
Subject: serialNumber=0ce8d538b7927db2e303a8d156b0312826e50e8fe2f45ad432593ba0f8db0dbc, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:71:14:1b:81:67:ff:9d:ce:72:ac:a1:cc:
a5:9f:42:3d:a1:5a:81:ad:7f:bd:48:ae:5d:b6:a3:
1a:a7:0e:ae:7b:49:35:1d:b0:a2:6d:96:1e:2b:33:
8b:71:ee:c8:f7:2d:99:ad:d7:fb:b8:1c:cd:7b:b1:
ff:dd:90:21:d1:62:28:99:c4:ad:9b:48:8f:ce:aa:
4b:a4:11:90:d9:a3:e7:9e:c7:4c:8e:1f:ba:32:6f:
26:db:46:ee:5b:b4:b3:4e:84:e8:d5:79:b9:25:82:
04:0f:19:04:5c:67:71:a2:fe:c0:d5:52:c1:7a:83:
b9:7b:36:9c:18:bf:85:c3:5b:e0:10:f6:6e:e2:84:
92:8f:57:c6:fa:87:99:92:64:c8:29:55:25:25:f1:
3a:b5:f4:d4:03:cd:78:dc:e1:0a:e9:aa:1b:d2:f5:
99:9a:7c:76:96:3b:56:2a:83:e4:d4:b9:4a:19:bb:
c1:04:5b:ea:7f:ee:bc:68:af:7f:0a:7c:5d:a1:1f:
9e:4f:e0:51:ae:b7:17:cf:a0:a6:f4:58:b5:4a:af:
40:d5:46:7c:53:2f:21:4a:66:c1:52:fc:a3:19:c7:
f4:3a:fa:81:19:a5:c7:40:11:25:d1:0a:32:b7:2c:
ba:14:c0:bb:87:bd:fb:05:d1:25:77:8f:ab:a3:e6:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:20:41:FC:3C:93:21:D4:5E:E6:B2:07:3F:96:99:FA:03:6D:D7:1C
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d7cfce38-f111-4991-b8b5-ef1d6f0ad997.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:20::/43
Signature Algorithm: sha256WithRSAEncryption
c1:11:ad:88:10:68:d4:8b:92:de:1c:15:dd:da:cf:b8:4e:8b:
6b:a6:38:52:d5:3e:a1:ca:ac:1c:c6:dd:57:d2:2a:88:58:0d:
6e:9a:44:66:83:4e:af:d3:86:fb:7c:45:b2:1f:50:1a:7c:8b:
c5:c6:85:49:cb:f5:f8:49:d3:6b:13:7d:73:14:86:78:a0:71:
a7:49:be:fb:36:2b:8c:05:87:51:90:1a:7c:c7:43:d1:cf:62:
41:f4:33:e1:01:ed:bd:42:fd:de:73:2e:18:d5:20:39:01:cb:
9d:25:37:ba:d7:99:64:9a:13:c2:46:16:83:5f:51:48:da:fc:
b3:e2:71:7b:4d:ff:f2:66:02:bf:1d:7c:c0:89:01:21:42:b3:
6b:4c:bd:b5:ac:ba:e6:3e:49:97:83:bc:bf:3b:85:b6:28:6d:
6e:28:2b:94:7c:85:dd:8a:97:79:7d:ee:f1:9e:40:24:58:bf:
1b:d7:89:04:a2:d1:94:89:96:76:8c:22:7e:62:ab:f8:96:ae:
21:22:3d:35:d4:51:92:dd:13:5f:b4:a4:b7:29:5a:96:a8:76:
79:d8:eb:9a:b9:68:35:a6:52:e2:de:68:22:02:a7:a9:99:af:
a4:61:ad:2a:7a:24:ed:99:ce:97:ae:96:cf:dc:b2:a3:50:c9:
d8:a9:3b:1f
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUWX8DfdRJYuQMP0/Bw6or9PPDR0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA3MjYwMDAwNDBaFw0yNjEwMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDBjZThkNTM4Yjc5MjdkYjJlMzAzYThkMTU2YjAzMTI4MjZlNTBlOGZlMmY0
NWFkNDMyNTkzYmEwZjhkYjBkYmMxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALbRcRQbgWf/nc5yrKHMpZ9CPaFaga1/vUiuXbajGqcOrntJNR2wom2WHisz
i3HuyPctma3X+7gczXux/92QIdFiKJnErZtIj86qS6QRkNmj557HTI4fujJvJttG
7lu0s06E6NV5uSWCBA8ZBFxncaL+wNVSwXqDuXs2nBi/hcNb4BD2buKEko9XxvqH
mZJkyClVJSXxOrX01APNeNzhCumqG9L1mZp8dpY7ViqD5NS5Shm7wQRb6n/uvGiv
fwp8XaEfnk/gUa63F8+gpvRYtUqvQNVGfFMvIUpmwVL8oxnH9Dr6gRmlx0ARJdEK
MrcsuhTAu4e9+wXRJXePq6PmnjECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQrIEH8
PJMh1F7msgc/lpn6A23XHDAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
ZDdjZmNlMzgtZjExMS00OTkxLWI4YjUtZWYxZDZmMGFkOTk3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBSABP8YA
IDANBgkqhkiG9w0BAQsFAAOCAQEAwRGtiBBo1IuS3hwV3drPuE6La6Y4UtU+ocqs
HMbdV9IqiFgNbppEZoNOr9OG+3xFsh9QGnyLxcaFScv1+EnTaxN9cxSGeKBxp0m+
+zYrjAWHUZAafMdD0c9iQfQz4QHtvUL93nMuGNUgOQHLnSU3uteZZJoTwkYWg19R
SNr8s+Jxe03/8mYCvx18wIkBIUKza0y9tay65j5Jl4O8vzuFtihtbigrlHyF3YqX
eX3u8Z5AJFi/G9eJBKLRlImWdowifmKr+JauISI9NdRRkt0TX7Sktylalqh2edjr
mrloNaZS4t5oIgKnqZmvpGGtKnok7ZnOl66Wz9yyo1DJ2Kk7Hw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:24:06 2026 by rpki-client