Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/30237d20-da24-4e4e-b2a0-a97752f438bf.roa
File: 30237d20-da24-4e4e-b2a0-a97752f438bf.roa (raw, json)
Hash identifier: tXVV0Knvk371x1M/rNtO5X7Wie4fT//lYa6FnWQfpdE=
Subject key identifier: 6C:CF:28:B0:2E:4C:5B:5C:2E:71:59:B6:99:1F:D4:45:21:8F:19:F9
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2C29301F8A02FF2597D1957B8043E0B9BE9D7FAB
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/30237d20-da24-4e4e-b2a0-a97752f438bf.roa
Signing time: Wed 12 Aug 2026 20:48:01 +0000
ROA not before: Wed 12 Aug 2026 20:48:01 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.224.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:29:30:1f:8a:02:ff:25:97:d1:95:7b:80:43:e0:b9:be:9d:7f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:48:01 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=4b26df850575c54c83a5ca82a079006808c9cc26d582b109d661b7a6defb9b5f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2a:38:90:59:f8:a3:bb:f0:b6:0a:72:8b:72:
33:53:4d:5d:22:e6:07:4a:e9:cf:a5:c6:a6:57:f0:
5b:bb:76:80:3c:98:7c:11:b2:ca:91:74:e0:eb:20:
66:0f:52:1f:1d:29:d1:3e:2a:3d:30:66:69:ec:87:
5c:cb:9f:00:ce:de:57:35:98:f4:d8:25:d6:66:ae:
e7:ec:e1:ca:2f:26:e7:90:0b:0e:80:49:f5:89:5d:
e2:9c:04:fe:d4:4f:c6:97:c1:cc:55:b6:bf:d4:6e:
30:57:69:51:82:6d:24:a9:91:04:c3:91:ad:2f:df:
f3:5d:2e:9a:7f:f8:c5:be:9f:f3:b0:e7:66:5f:8f:
68:0e:fd:8f:32:94:f9:a0:cc:8e:bb:80:77:c8:69:
b5:e6:3c:95:5b:55:1f:0e:5d:76:69:b0:d6:09:d8:
91:6e:7e:e7:87:b9:c8:70:80:62:e3:51:73:f5:53:
d7:56:e4:35:e7:e7:28:19:b2:75:00:eb:e2:ed:26:
a1:a9:6a:35:4b:62:2e:50:1e:2b:23:45:9e:9b:76:
98:76:c1:b4:bc:28:2e:be:6c:ff:0c:65:d7:3c:50:
0f:9e:55:5e:93:0d:99:a7:38:c4:cc:07:09:2f:32:
80:38:1a:36:91:36:b6:71:d3:40:2a:f8:4c:31:56:
a9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CF:28:B0:2E:4C:5B:5C:2E:71:59:B6:99:1F:D4:45:21:8F:19:F9
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/30237d20-da24-4e4e-b2a0-a97752f438bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.192.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:71:68:8a:90:58:16:be:56:38:a7:7d:ee:76:78:fb:8d:d0:
50:fb:d4:49:d8:c6:9d:13:f2:53:49:6b:05:39:38:60:6c:99:
4f:1c:ff:c5:f4:ef:a3:6c:ac:94:fd:ab:82:65:34:2d:85:ff:
db:61:89:7e:d9:13:ba:10:d0:8f:fe:67:cd:10:65:d4:cf:1f:
5b:df:b4:ea:50:1d:46:14:75:1c:4b:89:88:b4:32:7b:f8:82:
63:b7:86:15:cb:3e:ec:bb:d6:66:4f:ed:6b:41:6a:60:d9:5d:
d9:27:b1:23:14:ef:3f:2d:1c:7c:32:1f:6d:ab:08:ce:9e:0e:
16:f1:14:aa:c8:72:72:f0:60:1e:6c:f5:0e:98:b8:cf:d9:1b:
bf:3d:db:8f:f4:b0:03:f4:df:5a:22:2a:ff:11:76:6d:52:46:
05:91:6d:af:41:b3:6d:f3:59:38:90:14:42:eb:bd:cf:af:b0:
f7:7d:09:bf:26:3c:68:26:9c:1f:77:50:c9:a0:ba:25:4d:c2:
7a:bd:72:ea:8e:b4:4d:b8:39:d2:9d:cf:74:a7:af:87:3c:aa:
a8:41:8a:71:79:1c:dd:c8:8e:7a:79:96:00:bf:f5:af:be:76:
e8:89:82:63:7e:d4:63:51:fa:f8:51:4c:ca:e1:8b:8c:8c:f2:
40:ad:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:30:35 2026 by rpki-client