Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/07a3a407-9786-48b2-8b94-fd0db795b212.roa
File: 07a3a407-9786-48b2-8b94-fd0db795b212.roa (raw, json)
Hash identifier: xEhhBn4xNp5CyAeQox2Q5l8jQYxl97BDyATpgStq79g=
Subject key identifier: 7A:56:8C:DC:51:DC:DF:40:E8:04:18:27:1B:CD:83:25:10:A0:7C:E9
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6555BD3296005CB1E7D7BF113DBBB3614AF7B02E
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/07a3a407-9786-48b2-8b94-fd0db795b212.roa
Signing time: Wed 12 Aug 2026 21:02:58 +0000
ROA not before: Wed 12 Aug 2026 21:02:58 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 193.202.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:55:bd:32:96:00:5c:b1:e7:d7:bf:11:3d:bb:b3:61:4a:f7:b0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:02:58 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=cb0c45464fa8a8c51c040645577a86a217ed25a2fc276e648d3d2d3aebed1810, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:d2:03:47:0a:9e:5c:01:33:65:38:5c:0b:
b5:ba:ab:2d:ef:56:68:d3:da:cd:99:c1:ab:5a:e8:
12:6f:22:00:ad:ae:0e:65:c9:9f:81:cf:46:04:85:
c3:af:07:67:fa:07:27:39:cd:0d:ea:0d:f6:19:d1:
e5:47:0c:56:e1:bc:9f:2e:ba:de:be:ac:32:24:50:
73:c2:5c:95:43:7d:5f:a8:80:d1:f1:1f:fc:f2:db:
79:75:e7:10:16:95:76:0e:cf:42:ad:6e:b4:a7:58:
41:b3:58:f0:dc:37:09:0c:77:4c:a9:f5:2e:73:0e:
eb:72:13:f8:82:3f:78:64:b1:1c:5a:9f:5e:bc:e5:
3e:cc:5e:6b:85:81:1b:09:4c:4e:6c:41:b4:27:18:
a7:9d:e9:51:f1:70:b7:7a:ad:db:4a:e8:4d:17:cc:
5a:cc:ba:e1:21:7e:b0:3e:13:18:b5:91:a8:10:3f:
dc:64:2f:41:6a:bf:4d:ac:4e:ed:a4:44:fe:5f:94:
6f:87:ec:0a:1b:3a:33:eb:6d:e7:88:49:c7:0b:38:
6f:50:29:67:4e:a8:17:d3:22:1a:a7:e3:c3:5a:d1:
15:b3:54:d1:9f:0c:dc:02:0a:d0:c5:fe:b4:16:6f:
d3:19:54:af:1c:90:9f:3d:42:69:d4:b2:f8:f0:4b:
a6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:56:8C:DC:51:DC:DF:40:E8:04:18:27:1B:CD:83:25:10:A0:7C:E9
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/07a3a407-9786-48b2-8b94-fd0db795b212.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:0e:4e:b0:d8:5f:8f:75:8f:aa:8f:0f:b6:19:6c:2c:4d:93:
89:17:7a:db:23:8a:c4:fe:f3:f7:7d:41:d1:38:e6:76:56:f4:
7b:89:35:12:58:ad:da:b2:41:78:92:75:ec:62:9d:81:12:1f:
dd:6c:24:3c:da:de:34:d6:be:69:25:b1:05:3b:dc:33:be:fb:
ec:20:08:26:e4:05:ea:09:9a:8c:0a:55:df:2d:17:48:52:5f:
ac:9a:8c:ee:71:4f:c1:b4:20:81:91:30:c9:08:ac:e8:e0:0d:
c2:d1:23:54:83:9c:ef:cd:c4:76:12:ee:6c:a2:f4:f9:6d:e1:
c7:bf:d8:d8:c5:fc:fe:b6:d6:0b:59:c8:9a:df:d6:69:d7:42:
da:e1:ab:76:8a:95:69:c4:5c:51:31:dc:3f:f5:ad:8f:db:8c:
c9:7a:4b:4c:e6:7a:19:f4:05:d0:c0:1e:2e:e4:8b:01:76:bd:
d4:85:76:4a:6f:f6:0d:d0:6c:56:9b:2e:f2:fb:6e:26:92:9b:
ae:fe:c1:b6:56:ff:93:29:c8:8e:cb:7f:8c:0d:0a:ef:04:20:
16:7a:5e:64:37:a2:ca:d3:b0:41:22:18:40:3d:a8:40:91:ab:
0c:44:bf:fb:e8:c1:d5:f3:7a:1a:b4:fe:b1:7a:70:51:7e:9f:
64:76:a6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:19 2026 by rpki-client