Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/01b25f37-a868-47f9-bc61-95397088dcdf.roa
File: 01b25f37-a868-47f9-bc61-95397088dcdf.roa (raw, json)
Hash identifier: FlQ8m2g8DiV5UGZpLi1CnUTkGH+On86Suo2Yb3CEhGs=
Subject key identifier: 02:33:9C:0A:01:3C:AD:28:20:10:37:17:8A:EB:C7:2F:A5:45:EE:D5
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 4DC230E7B7A2F83C42BFF7107FC83AAD55ACCA87
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/01b25f37-a868-47f9-bc61-95397088dcdf.roa
Signing time: Wed 05 Aug 2026 02:00:28 +0000
ROA not before: Wed 05 Aug 2026 02:00:28 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.224.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c2:30:e7:b7:a2:f8:3c:42:bf:f7:10:7f:c8:3a:ad:55:ac:ca:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:28 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=0cbb0d8c7f70fa26e9f684bc923f892df105f30edd55ad3be44f01e1ba555ae5, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:99:33:2d:70:22:ef:b6:df:b2:c9:a9:b9:
66:8e:c7:43:18:32:30:09:f4:89:83:62:63:fb:35:
1a:a2:89:68:9f:c4:6d:aa:c9:ae:ee:de:a2:48:91:
12:98:dc:dd:68:fc:3e:ee:a4:f4:ed:27:66:57:01:
ae:3b:25:70:93:7c:68:01:00:d4:23:f9:5b:4b:ad:
90:5a:1f:3d:f6:8b:bd:e9:1e:6e:dd:30:c9:07:95:
76:85:04:41:47:18:10:c4:a3:df:20:82:19:c1:07:
bd:7a:06:12:2a:96:c9:c5:f8:c5:da:ff:86:a9:eb:
a7:b4:a1:22:77:a5:19:13:f5:7c:d6:db:11:14:50:
fd:90:03:c8:51:6c:e3:e9:54:13:8c:88:e8:e4:4a:
6e:b4:34:9e:b2:81:b2:4e:7f:4d:84:f3:a9:79:ca:
16:69:bb:0c:aa:b9:e0:c0:a9:01:33:a4:9c:99:f0:
e4:6e:a1:43:e0:8d:01:45:b1:05:bd:42:76:9d:3c:
43:13:83:8c:5d:d5:b2:6e:22:a0:a9:a5:2c:04:b0:
88:2c:47:cb:cf:14:1c:54:35:3c:9c:b8:c0:4a:00:
82:01:b8:de:19:ac:98:f5:c1:88:00:cf:97:df:dd:
7b:86:c5:b7:d2:b6:07:9f:53:78:b3:8e:c5:12:3b:
db:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:33:9C:0A:01:3C:AD:28:20:10:37:17:8A:EB:C7:2F:A5:45:EE:D5
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/01b25f37-a868-47f9-bc61-95397088dcdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.190.0/23
Signature Algorithm: sha256WithRSAEncryption
38:8a:5e:7e:68:28:da:cc:91:97:35:fd:e5:01:a7:22:33:0f:
ae:30:1c:63:ac:3e:45:fc:44:f6:16:d8:d9:d3:38:08:1c:55:
91:f2:dd:25:55:5b:c4:27:39:1c:b8:e5:21:af:eb:d3:18:36:
65:40:f3:ee:a0:67:b7:49:a7:f3:02:b4:64:35:c8:0b:bf:92:
5e:22:60:24:f0:6b:75:bb:77:7f:a9:92:52:96:1d:0f:b9:65:
06:9d:a8:f7:ce:e0:cc:84:45:e2:9c:be:1d:7e:57:3f:43:4b:
72:13:3e:e4:ce:f4:0d:52:04:7d:61:3c:eb:88:0c:fa:18:99:
b9:18:fe:7d:94:cd:62:c9:61:b2:59:d7:e4:3a:ff:ae:97:14:
e6:49:38:e6:48:80:c8:32:05:4a:ec:01:3d:e0:be:b4:37:1c:
63:72:54:e8:bf:0f:0b:b4:69:de:17:8a:e4:24:71:68:71:24:
cc:0c:08:ae:36:3b:a4:db:0f:97:93:1e:4b:5a:9d:d6:75:fc:
40:91:81:c1:aa:4a:54:36:47:a3:66:7e:c9:1a:c6:f7:0b:f4:
f8:e3:68:a6:97:51:fe:47:0b:19:90:d3:94:8d:f9:91:0a:31:
ec:d1:51:1e:d5:41:3f:83:13:48:21:39:b3:dc:fb:6b:80:9e:
47:b3:7c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:41:39 2026 by rpki-client