Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/043e927e-1f05-4812-9b17-9d0748506071.roa
File: 043e927e-1f05-4812-9b17-9d0748506071.roa (raw, json)
Hash identifier: VhKvcFjZH7p8qepEhhF1WCU8U0OrnpTZ2fdVIrJm7Lw=
Subject key identifier: 79:26:35:3E:23:08:0F:06:1D:11:D8:62:4D:5A:67:A1:C4:10:F6:3A
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 37B81F54378F678D286CF4759BFC01475D7875C2
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/043e927e-1f05-4812-9b17-9d0748506071.roa
Signing time: Wed 12 Aug 2026 20:32:22 +0000
ROA not before: Wed 12 Aug 2026 20:32:22 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.74.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:b8:1f:54:37:8f:67:8d:28:6c:f4:75:9b:fc:01:47:5d:78:75:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:32:22 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=16ffd33733a212f64d79c5691ed1e01de0ec24596e16ffd5f401e32ce1b6a2f4, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:97:9c:b3:1a:01:6f:d1:bf:67:28:70:34:
0f:8c:70:7f:49:93:b6:0f:c3:5c:24:8d:01:2a:f8:
7e:c0:88:66:df:a0:3c:bc:1a:00:07:9e:bb:9f:09:
f3:d4:d1:f5:78:8e:77:84:53:17:6b:e2:9c:66:93:
db:af:99:0c:f0:eb:28:0c:ca:87:31:64:e1:5e:16:
7b:a9:51:a8:0d:c0:6d:54:4d:a5:1d:80:4a:68:97:
3a:d2:9a:d2:d1:b3:40:45:83:a3:ec:8d:83:79:e7:
52:13:14:44:c5:27:4a:85:18:4b:02:a7:fa:5c:5e:
61:7c:09:8d:7f:92:47:6e:47:45:96:72:76:0e:67:
6a:42:d5:e0:ca:e5:2a:26:23:c8:3c:3a:b9:70:99:
82:7a:4d:62:13:68:76:80:25:78:e4:b8:4e:e4:75:
55:e3:ca:09:1c:db:cb:6c:a3:03:0d:6e:97:90:24:
5c:2b:68:60:f6:a9:7f:a3:47:37:fa:cd:78:48:5b:
13:c4:f2:2f:7d:9a:a0:a1:c7:a8:53:14:1d:05:a3:
04:6c:20:f3:30:46:94:2a:46:7a:2b:14:58:e1:e7:
92:56:f6:58:21:61:f7:2f:9e:47:12:7a:b2:ce:45:
ed:8f:42:15:a7:84:2e:7b:6b:12:cc:a2:5a:69:7c:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:26:35:3E:23:08:0F:06:1D:11:D8:62:4D:5A:67:A1:C4:10:F6:3A
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/043e927e-1f05-4812-9b17-9d0748506071.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.17.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:05:ee:3e:a5:a3:5f:dd:d0:71:19:83:db:45:2e:9a:05:5c:
f6:89:23:35:28:22:16:1e:4d:7c:93:33:0f:ca:a6:79:78:72:
c8:b0:04:57:0f:59:92:04:b0:87:1b:47:2a:35:38:5c:f7:c2:
bc:cd:e1:e1:ba:8d:61:e3:1c:dc:ed:f7:2a:a2:6c:40:b1:fe:
a6:b0:66:fe:43:6b:0a:f4:63:db:09:b8:cf:7f:69:4b:df:b0:
ad:33:69:3a:78:03:04:d9:86:26:29:1c:8b:0e:4b:0b:2c:86:
7c:72:36:d1:0c:a5:db:1d:00:15:75:b5:13:2a:e4:cc:90:52:
fe:87:f8:44:19:79:5d:a2:7e:43:07:80:c8:27:00:a1:3c:88:
e8:a9:83:1e:df:53:79:3b:c7:9e:55:79:28:98:4e:73:96:06:
95:2e:58:6d:b6:8d:ec:07:c2:dd:79:c6:9d:f0:44:c8:87:84:
5e:ce:92:3f:33:d3:64:77:de:9b:0e:37:d9:8f:58:c7:93:cf:
a9:22:5c:d8:6e:ea:ea:b9:e8:24:87:7f:b5:1f:ad:4a:f0:d3:
8d:67:20:9d:ce:3e:f9:6d:5a:d4:b7:c5:b0:28:70:ac:93:71:
fa:4f:3c:fd:7a:6b:6d:d0:30:92:55:c1:2c:bd:1e:8f:0e:50:
5c:7e:79:e4
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUN7gfVDePZ40obPR1m/wBR114dcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMDMyMjJaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDE2ZmZkMzM3MzNhMjEyZjY0ZDc5YzU2OTFlZDFlMDFkZTBlYzI0NTk2ZTE2
ZmZkNWY0MDFlMzJjZTFiNmEyZjQxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKv0l5yzGgFv0b9nKHA0D4xwf0mTtg/DXCSNASr4fsCIZt+gPLwaAAeeu58J
89TR9XiOd4RTF2vinGaT26+ZDPDrKAzKhzFk4V4We6lRqA3AbVRNpR2ASmiXOtKa
0tGzQEWDo+yNg3nnUhMURMUnSoUYSwKn+lxeYXwJjX+SR25HRZZydg5nakLV4Mrl
KiYjyDw6uXCZgnpNYhNodoAleOS4TuR1VePKCRzby2yjAw1ul5AkXCtoYPapf6NH
N/rNeEhbE8TyL32aoKHHqFMUHQWjBGwg8zBGlCpGeisUWOHnklb2WCFh9y+eRxJ6
ss5F7Y9CFaeELntrEsyiWml8R78CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR5JjU+
IwgPBh0R2GJNWmehxBD2OjAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
MDQzZTkyN2UtMWYwNS00ODEyLTliMTctOWQwNzQ4NTA2MDcxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADNKETAN
BgkqhkiG9w0BAQsFAAOCAQEAiwXuPqWjX93QcRmD20UumgVc9okjNSgiFh5NfJMz
D8qmeXhyyLAEVw9ZkgSwhxtHKjU4XPfCvM3h4bqNYeMc3O33KqJsQLH+prBm/kNr
CvRj2wm4z39pS9+wrTNpOngDBNmGJikciw5LCyyGfHI20Qyl2x0AFXW1EyrkzJBS
/of4RBl5XaJ+QweAyCcAoTyI6KmDHt9TeTvHnlV5KJhOc5YGlS5YbbaN7AfC3XnG
nfBEyIeEXs6SPzPTZHfemw432Y9Yx5PPqSJc2G7q6rnoJId/tR+tSvDTjWcgnc4+
+W1a1LfFsChwrJNx+k88/XprbdAwklXBLL0ejw5QXH555A==
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:39 2026 by rpki-client