Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/093ade9d-c4ff-42d1-b843-d47a43ab0cab.roa
File: 093ade9d-c4ff-42d1-b843-d47a43ab0cab.roa (raw, json)
Hash identifier: MoiCHms1iVFN19ktRmEg62bsT330nanQw2e7HctAlmo=
Subject key identifier: 4D:98:65:97:F9:18:C4:10:33:B6:3C:96:89:E0:3A:C4:21:FF:89:0F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 22B34320D739CD9F5B13D277D848DC3CDB42F013
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/093ade9d-c4ff-42d1-b843-d47a43ab0cab.roa
Signing time: Mon 11 May 2026 21:47:05 +0000
ROA not before: Mon 11 May 2026 21:47:05 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b3:43:20:d7:39:cd:9f:5b:13:d2:77:d8:48:dc:3c:db:42:f0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 21:47:05 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=5a074d52d363527235cf2e8c6b4bf857a231e7d363ed481dbad144a0c4036f84, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:f8:21:85:29:8e:60:47:38:6d:d8:ae:e8:
d0:68:c0:67:54:5c:52:1b:d0:e3:28:0d:be:dc:6b:
36:0c:70:d6:d7:de:f4:db:f7:4b:0a:ad:4b:2a:a3:
51:48:79:0e:ab:f2:99:fd:4c:56:90:9d:b1:84:80:
66:a7:58:11:1f:98:7d:f8:7b:dc:26:de:c9:21:0b:
02:25:76:5e:68:3e:37:a7:c7:4b:f1:ff:7a:db:89:
60:6b:dc:f0:77:e2:17:7f:46:a1:04:a5:42:22:bb:
5d:10:36:36:52:5c:a9:09:07:4b:87:13:e5:ad:1e:
91:bf:41:db:bb:be:f7:a4:07:c9:61:0c:5e:45:11:
33:d9:fb:5e:04:e1:fe:9a:df:39:c5:0b:b0:bf:5c:
c0:3f:d1:ea:80:5e:55:15:c5:55:20:9b:14:75:60:
6d:0a:4c:5a:c1:fd:fd:72:36:6f:53:70:f6:d6:af:
4f:4a:b9:fe:39:3a:e1:d1:61:82:f3:d2:61:1c:f5:
e7:75:06:8a:48:63:ea:b4:a1:00:dc:2b:78:ae:40:
32:48:82:41:80:bd:d3:68:e9:11:c6:9a:54:97:d9:
e3:3b:52:06:b4:b6:b4:dc:bc:9f:e3:69:0c:86:eb:
9c:75:8e:93:72:a1:98:e3:7a:68:ee:02:89:6b:2d:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:98:65:97:F9:18:C4:10:33:B6:3C:96:89:E0:3A:C4:21:FF:89:0F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/093ade9d-c4ff-42d1-b843-d47a43ab0cab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:3000::/36
Signature Algorithm: sha256WithRSAEncryption
9f:e1:96:3d:d3:d7:7c:43:f8:cd:dc:f6:b1:3f:2e:c3:64:03:
8b:61:de:a4:17:69:c9:d4:de:e6:34:1e:37:d4:6f:13:a9:13:
6b:44:43:2e:97:e9:78:56:3a:06:ed:17:a2:02:95:00:46:1c:
fa:86:28:34:6c:81:be:63:8f:a5:d4:84:9b:e3:04:35:f0:0f:
14:24:72:38:78:35:fb:c7:24:8a:41:08:88:b1:5b:f4:a6:af:
47:8f:16:d3:93:4b:2b:c6:88:b2:df:e2:ce:96:a0:7c:d5:9a:
c0:a7:9f:3d:23:9d:0d:bb:47:dd:86:94:88:31:ee:51:2e:24:
6b:69:16:cb:b3:55:68:3a:91:be:53:07:f1:4e:5e:ef:00:a4:
c6:b3:99:7a:6f:53:d6:df:31:e3:c8:d3:84:8a:96:e8:df:66:
73:49:d2:3b:50:f7:2e:6e:dd:9f:79:88:ab:4d:9e:f8:bf:4a:
02:12:07:ee:41:d0:c6:0e:b7:c7:d1:cb:52:05:88:24:71:24:
93:08:08:79:6f:89:5d:8b:d4:83:35:49:63:e9:39:a4:2d:c7:
83:f0:87:42:14:4f:4b:c6:92:3b:67:7a:0a:62:ce:a9:5a:99:
5f:e3:7a:28:e4:f2:9b:e4:87:c5:63:35:09:68:0e:7e:5e:f4:
73:bd:83:a7
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUIrNDINc5zZ9bE9J32EjcPNtC8BMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA1MTEyMTQ3MDVaFw0yNjA4MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDVhMDc0ZDUyZDM2MzUyNzIzNWNmMmU4YzZiNGJmODU3YTIzMWU3ZDM2M2Vk
NDgxZGJhZDE0NGEwYzQwMzZmODQxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK7l+CGFKY5gRzht2K7o0GjAZ1RcUhvQ4ygNvtxrNgxw1tfe9Nv3SwqtSyqj
UUh5Dqvymf1MVpCdsYSAZqdYER+Yffh73CbeySELAiV2Xmg+N6fHS/H/etuJYGvc
8HfiF39GoQSlQiK7XRA2NlJcqQkHS4cT5a0ekb9B27u+96QHyWEMXkURM9n7XgTh
/prfOcULsL9cwD/R6oBeVRXFVSCbFHVgbQpMWsH9/XI2b1Nw9tavT0q5/jk64dFh
gvPSYRz153UGikhj6rShANwreK5AMkiCQYC902jpEcaaVJfZ4ztSBrS2tNy8n+Np
DIbrnHWOk3KhmON6aO4CiWstMXMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRNmGWX
+RjEEDO2PJaJ4DrEIf+JDzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
MDkzYWRlOWQtYzRmZi00MmQxLWI4NDMtZDQ3YTQzYWIwY2FiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8Mw
MA0GCSqGSIb3DQEBCwUAA4IBAQCf4ZY909d8Q/jN3PaxPy7DZAOLYd6kF2nJ1N7m
NB431G8TqRNrREMul+l4VjoG7ReiApUARhz6hig0bIG+Y4+l1ISb4wQ18A8UJHI4
eDX7xySKQQiIsVv0pq9HjxbTk0srxoiy3+LOlqB81ZrAp589I50Nu0fdhpSIMe5R
LiRraRbLs1VoOpG+UwfxTl7vAKTGs5l6b1PW3zHjyNOEipbo32ZzSdI7UPcubt2f
eYirTZ74v0oCEgfuQdDGDrfH0ctSBYgkcSSTCAh5b4ldi9SDNUlj6TmkLceD8IdC
FE9LxpI7Z3oKYs6pWplf43oo5PKb5IfFYzUJaA5+XvRzvYOn
-----END CERTIFICATE-----
Generated at Tue May 12 21:53:50 2026 by rpki-client