Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/695b2c0d-a8e0-45bc-878b-176c66a934f6.roa
File: 695b2c0d-a8e0-45bc-878b-176c66a934f6.roa (raw, json)
Hash identifier: Ks6V1EkzmkO0xik8THmG94J/u1bPghxSBwSZX1YY4gw=
Subject key identifier: 08:DA:26:CD:DA:FF:DF:BB:A3:90:5C:45:DE:71:44:4B:91:48:3C:5C
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 011AC732DA1682D0B9818EF8D3E81353351CDDEA
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/695b2c0d-a8e0-45bc-878b-176c66a934f6.roa
Signing time: Mon 11 May 2026 01:30:20 +0000
ROA not before: Mon 11 May 2026 01:30:20 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:28c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:1a:c7:32:da:16:82:d0:b9:81:8e:f8:d3:e8:13:53:35:1c:dd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 01:30:20 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=4005c2a1bdecc8c6252439b3f690b2b23cc6a6bf6df3d313e38a7c75668218ee, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:bd:c8:0a:16:df:9a:56:1c:07:c0:53:c2:
24:8e:ad:6a:0f:07:6f:82:61:c2:8d:e7:13:c1:da:
b7:9a:a5:df:83:24:39:42:59:62:7c:69:3c:7f:44:
ae:64:f2:f7:29:f1:6f:e0:93:dd:a5:8c:10:64:dc:
9d:6a:e0:86:bf:d7:f2:fb:2f:72:b2:8b:e5:98:e7:
20:85:f8:d2:61:1e:bd:ad:f7:e4:56:a3:b0:3b:41:
4c:f6:a6:eb:64:ec:79:7e:c0:f2:8d:1a:73:b3:b0:
ae:34:c4:25:a1:72:71:01:07:6e:08:74:1f:16:4f:
81:25:0c:56:36:d5:99:34:b5:61:c5:89:db:a8:42:
cb:53:43:48:ab:a9:46:18:de:8a:11:48:69:aa:ff:
60:36:ff:85:f9:d4:d3:19:8e:0b:c1:19:28:91:dc:
31:8d:ef:1b:9c:0b:91:78:6c:57:d6:f4:c1:33:f0:
2f:e8:8f:d6:51:9e:6a:f6:c8:b0:ab:50:90:0e:02:
c3:24:a6:bf:fe:f8:30:a1:4c:15:ab:8e:39:bd:7a:
ce:92:f1:f4:b3:c7:0c:72:01:42:f0:81:69:49:d5:
cd:43:74:f2:40:d8:16:ee:3b:f2:eb:c6:1b:05:f4:
61:60:b0:d3:6a:11:62:af:3b:84:53:39:ae:4e:72:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DA:26:CD:DA:FF:DF:BB:A3:90:5C:45:DE:71:44:4B:91:48:3C:5C
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/695b2c0d-a8e0-45bc-878b-176c66a934f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:28c0::/48
Signature Algorithm: sha256WithRSAEncryption
5c:d5:18:65:a3:85:0c:ce:93:63:94:f0:72:8d:0f:ad:7a:8b:
68:e4:c3:ed:98:0f:8e:a6:51:55:49:95:38:92:16:85:3c:96:
20:ee:a5:19:96:0a:44:84:64:2d:8d:30:d3:e6:e6:fc:5a:5b:
1a:e1:06:a4:10:88:2a:72:36:b7:27:a5:d8:95:0b:c7:47:aa:
f1:b2:fb:0c:c7:47:0f:28:f2:a8:e5:d0:8f:a7:3d:22:40:ba:
09:d3:8c:f2:90:88:71:5e:7e:02:16:07:81:55:89:27:7a:9f:
cb:71:d4:56:d7:0c:76:c7:92:44:30:b6:f0:65:80:46:1f:c5:
09:ac:89:0a:a9:c7:d4:87:4a:7f:a0:98:5b:87:f0:bf:37:b0:
10:24:b4:72:1d:71:18:70:3a:64:69:bb:37:3e:a2:60:c3:be:
84:9e:49:dc:e2:4c:d0:c9:84:fe:be:7e:55:20:05:df:a6:41:
f0:de:68:3d:97:f0:f3:d5:8a:88:24:18:d1:27:80:89:dd:bb:
3d:76:0b:60:65:60:a9:c7:10:a6:d3:07:d6:a2:3d:4b:c2:81:
14:f6:cb:b5:77:e8:ec:cd:97:69:3d:37:82:79:98:c2:e1:99:
9e:13:b8:65:c7:20:77:b8:6d:6b:bf:e0:0c:f1:e5:0a:f9:33:
59:a2:f9:ef
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUARrHMtoWgtC5gY740+gTUzUc3eowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA1MTEwMTMwMjBaFw0yNjA4MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDQwMDVjMmExYmRlY2M4YzYyNTI0MzliM2Y2OTBiMmIyM2NjNmE2YmY2ZGYz
ZDMxM2UzOGE3Yzc1NjY4MjE4ZWUxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKwivcgKFt+aVhwHwFPCJI6tag8Hb4Jhwo3nE8Hat5ql34MkOUJZYnxpPH9E
rmTy9ynxb+CT3aWMEGTcnWrghr/X8vsvcrKL5ZjnIIX40mEeva335FajsDtBTPam
62TseX7A8o0ac7OwrjTEJaFycQEHbgh0HxZPgSUMVjbVmTS1YcWJ26hCy1NDSKup
RhjeihFIaar/YDb/hfnU0xmOC8EZKJHcMY3vG5wLkXhsV9b0wTPwL+iP1lGeavbI
sKtQkA4CwySmv/74MKFMFauOOb16zpLx9LPHDHIBQvCBaUnVzUN08kDYFu478uvG
GwX0YWCw02oRYq87hFM5rk5ykL0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQI2ibN
2v/fu6OQXEXecURLkUg8XDAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
Njk1YjJjMGQtYThlMC00NWJjLTg3OGItMTc2YzY2YTkzNGY2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABP8co
wDANBgkqhkiG9w0BAQsFAAOCAQEAXNUYZaOFDM6TY5Twco0PrXqLaOTD7ZgPjqZR
VUmVOJIWhTyWIO6lGZYKRIRkLY0w0+bm/FpbGuEGpBCIKnI2tyel2JULx0eq8bL7
DMdHDyjyqOXQj6c9IkC6CdOM8pCIcV5+AhYHgVWJJ3qfy3HUVtcMdseSRDC28GWA
Rh/FCayJCqnH1IdKf6CYW4fwvzewECS0ch1xGHA6ZGm7Nz6iYMO+hJ5J3OJM0MmE
/r5+VSAF36ZB8N5oPZfw89WKiCQY0SeAid27PXYLYGVgqccQptMH1qI9S8KBFPbL
tXfo7M2XaT03gnmYwuGZnhO4Zccgd7hta7/gDPHlCvkzWaL57w==
-----END CERTIFICATE-----
Generated at Tue May 12 22:12:09 2026 by rpki-client