Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/41430f68-5234-4a63-913e-517640f677c8.roa
File: 41430f68-5234-4a63-913e-517640f677c8.roa (raw, json)
Hash identifier: CC1vzw/9yWqIr7B49KHa0xc/KjNfV2yiYWQED4Ky1xs=
Subject key identifier: 7C:B2:81:D2:E5:66:CA:A7:EC:90:AC:B5:2A:62:0D:EB:67:20:47:08
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7277D0078BC71E68789F06E3965B29146377F3C6
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/41430f68-5234-4a63-913e-517640f677c8.roa
Signing time: Wed 12 Aug 2026 20:03:28 +0000
ROA not before: Wed 12 Aug 2026 20:03:28 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:77:d0:07:8b:c7:1e:68:78:9f:06:e3:96:5b:29:14:63:77:f3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:03:28 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=3e11f4613eeefa69373fed68510b51ca5dcb45263f79b792551b45af796e007a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:68:4f:a0:32:0d:bd:f1:f3:3d:b8:90:0e:d0:
ee:8a:a0:0b:56:10:ef:a4:8b:79:f5:57:e0:7b:29:
8e:2a:80:84:80:99:33:bd:89:4d:d4:85:ff:fe:c7:
64:4c:fa:70:ec:d8:46:98:a2:92:f8:fc:eb:97:88:
e0:b7:64:65:8d:a4:8e:34:58:43:6c:49:45:48:da:
bb:1f:98:8b:78:f8:52:52:90:c4:55:8c:65:b2:b2:
c9:7f:3b:e2:7a:d4:02:0b:99:26:3c:73:98:c6:e6:
43:d6:c9:2f:c9:92:52:95:84:6a:30:b8:00:f5:70:
99:91:31:5b:0d:1b:1a:88:81:af:17:fe:28:a4:4b:
3e:72:e0:d1:dd:95:2d:ac:1a:a9:97:df:eb:bd:4f:
ba:3c:57:75:ba:3e:54:6e:21:6e:7c:ce:71:04:c9:
28:eb:e9:ab:fa:11:58:d0:26:b1:f1:c9:52:e0:9c:
26:ac:e3:75:b1:5a:fa:18:34:9a:0a:a1:95:a9:15:
4a:f5:81:d5:39:ce:4d:b6:c8:19:22:35:a9:1c:e9:
63:7a:b3:63:a2:6e:ee:9b:f3:4c:f0:f0:fa:10:1d:
8d:95:23:e1:c0:6c:ac:fa:36:60:5b:a2:c2:0d:d7:
7a:c6:0f:5d:f1:1b:7b:69:51:e7:de:0d:85:62:3d:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B2:81:D2:E5:66:CA:A7:EC:90:AC:B5:2A:62:0D:EB:67:20:47:08
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/41430f68-5234-4a63-913e-517640f677c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.0.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:63:ab:3e:2b:e5:98:d2:92:40:f3:70:d2:73:27:64:9f:af:
54:30:a1:c2:75:3b:44:3c:35:77:c3:1b:89:35:8d:e5:83:17:
27:cb:fe:c9:82:07:87:2e:77:61:96:71:6b:d2:3d:f8:ab:24:
22:6e:6d:f1:a3:5b:69:98:b2:5a:e1:20:20:60:c0:20:07:40:
cf:70:05:ae:e0:41:1e:6f:ac:1b:db:5d:d3:46:c9:6f:6e:1e:
a8:26:51:69:28:21:eb:5d:60:0c:03:6f:6d:86:49:4f:f6:68:
6d:2f:71:47:84:90:45:a0:f7:36:25:11:3d:54:6e:23:48:06:
bc:59:5c:f6:cc:67:5d:bc:4b:17:b1:82:b0:44:47:ac:92:80:
dd:a3:e2:e7:73:1a:81:96:0a:a7:94:a5:08:b1:d3:e0:02:d1:
40:ac:b3:8a:46:fd:bf:d8:11:bb:a0:7a:1d:62:fb:a9:20:ac:
5b:fc:4f:1a:15:f4:6c:7a:c5:f7:af:5c:53:f1:8f:35:0a:dc:
9a:25:75:ba:ac:fc:81:9d:e1:66:bd:ad:0e:6e:de:28:4b:2e:
d6:63:0a:79:9d:4c:ea:e3:54:0b:bd:c0:4a:7f:59:86:b0:ac:
cc:5a:d6:5f:7b:16:7a:f5:88:4e:b3:28:5d:64:3d:d8:44:ae:
cb:ad:90:d6
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUcnfQB4vHHmh4nwbjllspFGN388YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMDAzMjhaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDNlMTFmNDYxM2VlZWZhNjkzNzNmZWQ2ODUxMGI1MWNhNWRjYjQ1MjYzZjc5
Yjc5MjU1MWI0NWFmNzk2ZTAwN2ExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN5oT6AyDb3x8z24kA7Q7oqgC1YQ76SLefVX4HspjiqAhICZM72JTdSF//7H
ZEz6cOzYRpiikvj865eI4LdkZY2kjjRYQ2xJRUjaux+Yi3j4UlKQxFWMZbKyyX87
4nrUAguZJjxzmMbmQ9bJL8mSUpWEajC4APVwmZExWw0bGoiBrxf+KKRLPnLg0d2V
LawaqZff671PujxXdbo+VG4hbnzOcQTJKOvpq/oRWNAmsfHJUuCcJqzjdbFa+hg0
mgqhlakVSvWB1TnOTbbIGSI1qRzpY3qzY6Ju7pvzTPDw+hAdjZUj4cBsrPo2YFui
wg3XesYPXfEbe2lR594NhWI9DBkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR8soHS
5WbKp+yQrLUqYg3rZyBHCDAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NDE0MzBmNjgtNTIzNC00YTYzLTkxM2UtNTE3NjQwZjY3N2M4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBDMAADAN
BgkqhkiG9w0BAQsFAAOCAQEAo2OrPivlmNKSQPNw0nMnZJ+vVDChwnU7RDw1d8Mb
iTWN5YMXJ8v+yYIHhy53YZZxa9I9+KskIm5t8aNbaZiyWuEgIGDAIAdAz3AFruBB
Hm+sG9td00bJb24eqCZRaSgh611gDANvbYZJT/ZobS9xR4SQRaD3NiURPVRuI0gG
vFlc9sxnXbxLF7GCsERHrJKA3aPi53MagZYKp5SlCLHT4ALRQKyzikb9v9gRu6B6
HWL7qSCsW/xPGhX0bHrF969cU/GPNQrcmiV1uqz8gZ3hZr2tDm7eKEsu1mMKeZ1M
6uNUC73ASn9ZhrCszFrWX3sWevWITrMoXWQ92ESuy62Q1g==
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:48 2026 by rpki-client