Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2c7c5a4f-50c3-48a9-be1e-9bb17c3917b1.roa
File: 2c7c5a4f-50c3-48a9-be1e-9bb17c3917b1.roa (raw, json)
Hash identifier: wigjnrD++930RLXKD5T5zr2NsD5EWBKWP7mBe/S1pdI=
Subject key identifier: 08:66:7C:B1:76:2C:16:2B:B9:BA:72:2C:87:2D:8E:A4:75:AC:24:A2
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5C2F8D2483E050B180934FFF8092C8808DA75B86
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2c7c5a4f-50c3-48a9-be1e-9bb17c3917b1.roa
Signing time: Wed 12 Aug 2026 20:18:07 +0000
ROA not before: Wed 12 Aug 2026 20:18:07 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:2f:8d:24:83:e0:50:b1:80:93:4f:ff:80:92:c8:80:8d:a7:5b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:18:07 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=170b23ccb3b3fa23a231ae7938fe80e135cc605889f5f399a706a55aef3e7783, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:ef:4a:79:25:ec:ab:ec:cb:e7:8e:5b:fd:
cc:27:c7:6f:57:08:ee:c7:26:c3:73:d5:6b:25:7c:
73:d8:16:91:6c:fb:f7:d4:b3:85:d2:ed:ac:7f:49:
b3:19:0a:b2:58:0e:ed:57:12:7f:13:b5:dc:20:a2:
b8:a6:c8:8b:f3:2e:fa:30:83:ae:d0:a7:e0:a6:1c:
48:74:35:88:80:16:aa:d7:51:89:35:fe:90:51:6e:
64:46:c1:ab:62:e0:d6:f3:b4:1d:c0:59:9c:4d:f2:
54:72:48:8d:06:eb:53:a6:6f:7b:f0:78:d4:74:3d:
04:53:38:3c:29:f5:dc:6b:6a:c7:be:e2:99:7e:3e:
87:73:54:d5:4c:a4:05:69:e6:83:3e:a0:12:50:9e:
3c:4f:f5:43:00:bf:b9:81:6f:79:78:b0:f4:2b:d2:
b6:5e:99:eb:8c:f7:4b:a4:37:c8:bc:fd:d9:08:ac:
5c:6f:7c:3d:f0:15:35:0d:ae:c2:05:d0:f9:8d:08:
28:7f:4e:9d:d8:d7:cf:b7:6f:d5:2b:81:0d:b8:90:
13:9c:b7:51:a6:81:18:1d:dd:92:4d:72:b8:40:d1:
4a:1a:f8:19:1d:61:3b:83:a3:12:60:e3:9f:31:d2:
06:46:d4:f8:94:f1:98:f4:4e:6a:d5:1f:c4:ec:38:
47:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:66:7C:B1:76:2C:16:2B:B9:BA:72:2C:87:2D:8E:A4:75:AC:24:A2
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2c7c5a4f-50c3-48a9-be1e-9bb17c3917b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.128.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:41:8e:d9:7b:48:63:ff:1a:f0:06:2a:f8:8b:e5:e5:af:27:
6f:ce:96:b4:f1:c4:e0:78:d6:80:7b:9e:a8:13:c9:e4:2d:59:
7e:6b:8e:92:7d:16:76:ce:ee:ff:56:3c:9f:3a:16:fc:16:3f:
38:d0:be:99:63:1d:f2:51:59:fb:6f:57:43:6c:c2:10:fe:99:
d0:10:43:da:4d:de:1a:87:28:30:a8:14:e4:49:36:d7:5e:3f:
64:3e:dd:70:b9:a8:40:16:61:65:9c:7b:cb:a0:5a:d3:11:c6:
b5:65:f9:79:9a:61:12:45:a9:26:fe:51:f7:8f:56:47:39:04:
65:60:7b:9e:5d:78:00:75:76:0d:e5:db:69:b2:4f:77:56:4d:
f9:68:00:34:e4:f9:d3:f5:2b:1d:e1:5f:b0:2e:9c:0c:c6:9d:
45:4d:39:a0:be:23:1d:ea:9e:ba:6b:e6:84:52:db:ac:1e:d5:
bf:f6:28:e7:2a:37:5e:52:9e:cf:e9:ea:3f:24:0b:7b:83:f6:
35:33:7e:ae:8d:34:1a:74:7b:49:bd:16:0f:3c:db:88:9c:81:
c0:53:c4:f8:17:e0:dd:68:7a:0e:c7:e1:af:71:3a:09:d9:8d:
52:42:5c:4a:ce:f7:43:ca:6e:cb:2b:1d:a5:a0:2e:ee:73:22:
f0:e4:fc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:32:43 2026 by rpki-client