Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/04768017-a832-4864-a959-b821959eafb8.roa
File: 04768017-a832-4864-a959-b821959eafb8.roa (raw, json)
Hash identifier: uKhD/fbdYrVXy3Itt6doJau1Mi9nJDJhLuQsuZomsEg=
Subject key identifier: B6:EA:FF:AD:84:E3:13:72:D1:02:20:7D:04:7F:B8:20:9C:58:91:8E
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 086459E28C920637F74075B3C785092818952E0C
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/04768017-a832-4864-a959-b821959eafb8.roa
Signing time: Thu 30 Jul 2026 01:30:13 +0000
ROA not before: Thu 30 Jul 2026 01:30:13 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:64:59:e2:8c:92:06:37:f7:40:75:b3:c7:85:09:28:18:95:2e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:13 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=6280b5ec381007814bbed78d6240789f3575224555eb941959ea13a9c934ae5b, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:38:fd:c3:87:8f:c4:a0:b1:4e:c8:bd:9c:ca:
20:3d:22:b2:06:b8:c4:4c:d5:07:11:a0:dc:07:4f:
32:81:d9:b1:ea:0c:c1:28:89:c6:16:a5:ca:21:7c:
77:14:9d:06:0f:14:d4:22:e2:dc:40:40:e7:02:65:
66:4a:13:42:c1:57:db:31:25:35:cd:c1:d4:11:78:
53:7c:5d:33:4d:ff:56:ae:13:32:39:69:b7:c9:ca:
be:75:6d:18:d6:ed:a6:c8:67:4f:3c:de:c1:c3:94:
4e:d8:29:34:8c:57:ef:e9:db:06:f6:28:e1:18:69:
51:7c:f0:91:ff:18:f9:81:b8:c1:eb:52:96:2e:8f:
98:68:ee:e4:00:2c:dd:22:35:a5:c8:a3:14:42:42:
82:9c:af:23:46:c8:f6:bb:23:d9:64:74:c8:5a:66:
37:a3:78:c4:56:97:e3:5b:4f:cb:c2:0a:50:08:66:
c7:bb:d8:ab:1f:47:28:da:ab:f1:b0:20:94:d3:0e:
de:e7:7d:9d:91:27:e3:2a:b2:00:54:33:e9:6f:c8:
0c:31:5a:49:0f:53:b4:95:03:5f:92:41:95:e3:77:
b0:55:e9:13:99:c9:c4:7f:89:b3:39:75:e9:38:66:
64:ab:dc:27:c3:ff:54:d4:58:cb:33:5d:ff:d5:07:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EA:FF:AD:84:E3:13:72:D1:02:20:7D:04:7F:B8:20:9C:58:91:8E
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/04768017-a832-4864-a959-b821959eafb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.133.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5d:53:51:9c:2b:32:25:85:b8:cb:62:0f:81:ac:6f:c5:5a:
b4:43:26:41:b8:09:a7:15:ad:27:23:a8:96:13:80:6e:65:2a:
37:38:28:60:e9:28:66:67:38:e5:b5:76:33:6a:38:95:95:be:
49:cb:d3:04:ac:38:81:7b:d5:bc:52:20:f4:18:1b:68:25:61:
cb:36:8e:89:c8:76:b9:02:f7:f1:93:09:e8:2f:ae:c7:50:4c:
11:06:9b:db:30:b0:e0:88:0e:10:a4:4a:9a:be:14:1b:f6:0a:
7f:26:70:c3:5c:c4:c3:01:eb:6a:d2:da:5d:e9:a1:f2:24:89:
e4:68:d6:c8:94:40:69:e8:04:8b:d4:8a:a2:6c:4a:12:26:e6:
14:c9:5a:a8:3b:1f:d1:d9:fa:9e:70:5a:92:66:f2:91:b9:51:
8b:05:28:1d:b8:d0:16:70:cc:ad:03:dc:18:0f:81:17:0f:63:
0c:fd:b8:8c:29:1f:4e:6c:85:24:29:1c:44:08:5c:4a:5e:22:
3f:69:5b:02:bd:73:5b:1f:58:ea:a6:23:24:1e:62:6b:08:35:
98:1c:ef:4c:5d:be:11:8d:aa:9b:95:6e:d0:e2:e4:5b:ba:21:
5a:e2:bc:6e:8e:86:5d:35:4e:c0:79:c2:c2:7d:64:3f:46:76:
f4:eb:7f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:42:59 2026 by rpki-client