Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/20d3dbf0-2683-4a01-a00b-6e292c832b53.roa
File: 20d3dbf0-2683-4a01-a00b-6e292c832b53.roa (raw, json)
Hash identifier: CgxdiT28tpwapBxIE+DGzdQ6VCKP6dMet2O4bo5snBU=
Subject key identifier: 5B:12:E2:43:E7:40:0A:43:F3:6D:F5:AD:B4:E5:54:79:CA:57:40:54
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 64334ECA4A6B1FB240B26D73EE97FEFE7AE9E52F
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/20d3dbf0-2683-4a01-a00b-6e292c832b53.roa
Signing time: Wed 05 Aug 2026 02:00:06 +0000
ROA not before: Wed 05 Aug 2026 02:00:06 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:33:4e:ca:4a:6b:1f:b2:40:b2:6d:73:ee:97:fe:fe:7a:e9:e5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:06 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=6ad0477a3e550580c888a43384f482de9ba51d105af0cef57fda3212a488cd38, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:06:cb:9b:01:4a:7b:21:16:42:60:93:01:
a9:93:e5:65:83:a0:3a:ef:22:af:33:d5:8b:54:9e:
1c:59:80:8b:c3:9c:af:c6:b1:a8:40:da:c0:7f:e8:
57:f1:46:1e:15:77:58:a2:d5:61:44:75:14:c6:10:
da:c8:69:9f:e6:c5:91:f0:6b:ad:75:a1:3a:74:00:
5a:75:ef:d3:49:85:d9:53:e3:de:f8:ff:98:90:4d:
6a:be:ca:9c:4d:f8:32:a5:cd:62:f7:fa:44:7a:7e:
35:51:2e:74:12:b2:bd:93:ed:82:93:e6:00:dd:22:
84:e4:fd:df:1f:ee:21:1e:b7:32:f7:dd:39:9d:18:
b4:c2:ce:b1:85:55:41:3d:c0:44:76:a5:10:2b:3f:
8d:fe:1c:65:47:5c:6d:38:20:e6:f1:70:8d:22:80:
2f:7e:8a:4d:9a:92:c6:ba:65:b6:b5:6e:68:51:cc:
ee:13:41:8a:5a:1b:97:bf:73:32:3c:02:25:32:05:
a4:25:ef:f3:26:a2:b0:aa:89:9c:f6:f0:88:d8:7a:
1c:2e:62:67:dd:a7:29:e6:26:cc:63:e1:55:7a:9e:
0f:4b:8d:e2:d0:9c:bc:43:0f:99:18:fa:f4:85:26:
8c:25:54:eb:64:dc:17:ef:6d:5f:dd:4f:70:a5:1a:
66:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:12:E2:43:E7:40:0A:43:F3:6D:F5:AD:B4:E5:54:79:CA:57:40:54
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/20d3dbf0-2683-4a01-a00b-6e292c832b53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.128.0/21
Signature Algorithm: sha256WithRSAEncryption
98:bd:db:4b:92:ff:c6:95:eb:6b:d3:96:47:13:3f:a0:09:4d:
83:6b:7d:88:ea:04:07:44:25:a6:8b:74:c8:d2:86:ff:56:32:
6b:2c:82:2b:99:c2:de:96:b9:be:f8:8d:ee:89:fc:50:10:a9:
3a:49:a2:83:f7:9d:ca:43:3a:ae:4d:47:0d:10:a5:43:9d:1a:
3a:e8:c2:f0:57:a5:fb:bb:ed:0c:1d:7e:02:c3:3e:ae:f4:36:
31:05:2a:c5:69:96:b3:9d:8c:8d:a7:21:c2:f5:c3:9e:1d:10:
68:98:f0:a4:6e:89:83:a9:d3:75:30:e4:26:31:07:e9:fa:b8:
ef:b2:32:24:cf:01:64:bf:6e:9e:05:06:d1:3c:bb:73:7f:f6:
43:3e:2f:f4:09:14:7f:68:be:3f:a9:ac:2c:c7:ee:b6:f2:06:
11:ca:7b:b4:fe:cf:99:7c:f6:8a:e3:44:e5:4f:66:65:f3:6c:
e2:92:f4:5e:ba:c0:86:87:94:3e:58:8d:4f:07:9d:43:41:44:
87:40:a1:6d:74:23:e7:ee:9f:7f:d3:1c:34:b1:53:ed:3f:ef:
58:82:ee:cb:de:0f:b0:5d:ff:8f:bb:e1:f8:d3:79:af:3e:72:
7b:a2:11:9b:92:3a:f1:39:ed:51:c2:77:aa:ff:c9:7d:db:f3:
e6:d8:32:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:41:22 2026 by rpki-client