Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6b161c7d-a2d5-44f9-95b6-bbf915698d48.roa
File: 6b161c7d-a2d5-44f9-95b6-bbf915698d48.roa (raw, json)
Hash identifier: j7MCfibbGpcVxkrLasmWVoOpOL6+o3erTadN3qauygo=
Subject key identifier: 32:B2:62:F7:08:34:2A:34:96:6D:FD:AC:B6:5A:2A:AA:98:A9:56:CE
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 22B2E05ECA0B585114045DCC886434F9AA969B97
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6b161c7d-a2d5-44f9-95b6-bbf915698d48.roa
Signing time: Mon 11 May 2026 01:30:21 +0000
ROA not before: Mon 11 May 2026 01:30:21 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b2:e0:5e:ca:0b:58:51:14:04:5d:cc:88:64:34:f9:aa:96:9b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 01:30:21 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=7b1a85c3a9b89ff5a847d400f1c5183a16d565d0a82ecfb639667b715f434ac3, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:f0:be:86:99:3b:32:54:da:df:01:a3:53:
06:33:9f:7d:6a:b8:ad:e8:61:e5:90:3b:f4:67:29:
bb:b6:fc:cf:71:0f:56:ee:26:50:2b:13:e3:4e:45:
f3:0c:dd:fe:c8:e7:ac:68:9f:65:7b:99:e7:85:3a:
37:cf:40:1a:a8:d1:c3:d6:48:46:a0:dd:f0:bb:b5:
cb:d2:64:d0:3c:5e:45:14:0f:7d:82:20:bb:af:18:
f4:08:c1:63:85:43:f2:18:f6:93:2d:41:f2:f0:6c:
0e:8a:96:8a:13:d5:f1:5f:33:91:1f:5c:d8:8a:96:
2b:67:21:46:ba:fc:82:6c:bb:b2:78:b8:4f:38:82:
cc:b5:35:7e:d7:0d:dc:5b:50:90:fd:75:bd:14:9d:
40:f7:5c:03:c7:5b:e9:c7:3c:27:52:fd:6f:34:ba:
dc:49:80:d5:50:93:98:06:60:0f:d4:2a:35:69:96:
bb:38:21:c5:01:99:20:df:1e:17:56:c7:d5:64:7c:
f7:2e:1c:29:cf:ae:a2:44:a8:6f:b2:4f:8b:fb:66:
fd:de:12:ef:21:1c:9b:77:9b:bc:fe:b4:34:3f:1b:
a6:47:a3:11:bb:7e:1a:dd:6f:a2:b5:2f:0a:a5:d4:
48:2a:5b:4c:3e:59:da:9b:b0:f1:c4:54:a0:b6:f7:
2f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:62:F7:08:34:2A:34:96:6D:FD:AC:B6:5A:2A:AA:98:A9:56:CE
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6b161c7d-a2d5-44f9-95b6-bbf915698d48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f000::/36
Signature Algorithm: sha256WithRSAEncryption
62:3b:b2:2f:bb:55:9e:f2:a6:83:91:be:d9:ac:aa:f0:fb:62:
1a:32:af:9c:de:e8:28:5d:87:36:69:39:d8:1a:22:36:16:74:
6d:d0:01:c0:93:f9:d2:c2:00:b7:ef:96:ab:e8:b3:6d:d4:a9:
07:e3:e1:33:0e:59:00:42:10:14:f9:ea:f4:c9:5c:a2:8e:88:
77:88:c5:ac:55:5b:24:7e:e4:f2:fe:53:5f:bd:cc:de:25:42:
5b:a1:17:11:4c:5e:e0:32:10:80:16:59:08:e2:f5:49:87:f1:
6c:81:29:b9:26:ca:d6:96:cd:d9:a8:1d:b5:6c:34:51:da:d3:
af:ae:6e:08:19:aa:95:de:de:99:6e:8e:4e:44:ca:0d:f5:62:
78:52:72:4c:b8:bb:da:65:01:04:7e:c1:8d:7a:47:ae:b9:ac:
bc:47:b3:8a:2d:92:23:fe:e6:fa:e6:b4:43:65:ad:b7:59:5e:
08:14:49:d2:c2:73:78:09:74:b6:ef:be:5e:51:6b:d1:4b:f1:
b0:ea:52:25:ab:ae:13:d9:bd:0a:42:33:30:7b:2c:e9:cf:9d:
cf:40:82:2a:d7:9c:98:75:cb:62:4a:cf:85:10:57:11:2a:5f:
8d:1d:d0:40:df:f0:d0:d8:58:9a:90:3b:c2:f1:9e:5b:86:7f:
e6:95:be:54
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUIrLgXsoLWFEUBF3MiGQ0+aqWm5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA1MTEwMTMwMjFaFw0yNjA4MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDdiMWE4NWMzYTliODlmZjVhODQ3ZDQwMGYxYzUxODNhMTZkNTY1ZDBhODJl
Y2ZiNjM5NjY3YjcxNWY0MzRhYzMxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOJ/8L6GmTsyVNrfAaNTBjOffWq4rehh5ZA79Gcpu7b8z3EPVu4mUCsT405F
8wzd/sjnrGifZXuZ54U6N89AGqjRw9ZIRqDd8Lu1y9Jk0DxeRRQPfYIgu68Y9AjB
Y4VD8hj2ky1B8vBsDoqWihPV8V8zkR9c2IqWK2chRrr8gmy7sni4TziCzLU1ftcN
3FtQkP11vRSdQPdcA8db6cc8J1L9bzS63EmA1VCTmAZgD9QqNWmWuzghxQGZIN8e
F1bH1WR89y4cKc+uokSob7JPi/tm/d4S7yEcm3ebvP60ND8bpkejEbt+Gt1vorUv
CqXUSCpbTD5Z2puw8cRUoLb3LycCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQysmL3
CDQqNJZt/ay2WiqqmKlWzjAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NmIxNjFjN2QtYTJkNS00NGY5LTk1YjYtYmJmOTE1Njk4ZDQ4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8fw
MA0GCSqGSIb3DQEBCwUAA4IBAQBiO7Ivu1We8qaDkb7ZrKrw+2IaMq+c3ugoXYc2
aTnYGiI2FnRt0AHAk/nSwgC375ar6LNt1KkH4+EzDlkAQhAU+er0yVyijoh3iMWs
VVskfuTy/lNfvczeJUJboRcRTF7gMhCAFlkI4vVJh/FsgSm5JsrWls3ZqB21bDRR
2tOvrm4IGaqV3t6Zbo5ORMoN9WJ4UnJMuLvaZQEEfsGNekeuuay8R7OKLZIj/ub6
5rRDZa23WV4IFEnSwnN4CXS2775eUWvRS/Gw6lIlq64T2b0KQjMweyzpz53PQIIq
15yYdctiSs+FEFcRKl+NHdBA3/DQ2FiakDvC8Z5bhn/mlb5U
-----END CERTIFICATE-----
Generated at Tue May 12 22:01:54 2026 by rpki-client