Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/46cdf5d1-bb95-4658-a544-6849261df725.roa
File: 46cdf5d1-bb95-4658-a544-6849261df725.roa (raw, json)
Hash identifier: AD1cGYY6h4FYzSKbvMvScWQsOaPv4BVvYgcrn+jTfs8=
Subject key identifier: 73:5B:B8:D9:AB:C0:F9:CC:86:CE:98:3A:81:E6:4B:87:14:80:BF:49
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2E4D131A17D534BAEEA06E1DCACE74AE56CC6B2B
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/46cdf5d1-bb95-4658-a544-6849261df725.roa
Signing time: Tue 11 Aug 2026 19:49:07 +0000
ROA not before: Tue 11 Aug 2026 19:49:07 +0000
ROA not after: Mon 09 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.74.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:4d:13:1a:17:d5:34:ba:ee:a0:6e:1d:ca:ce:74:ae:56:cc:6b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 11 19:49:07 2026 GMT
Not After : Nov 9 23:59:59 2026 GMT
Subject: serialNumber=2a2c9af0a3c624f55c39631ad71a31cb87be33c7c5bbf7881029247bea86ca1b, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:a4:19:6d:b2:2b:4c:17:b0:49:d8:1f:5b:
16:0f:0f:ad:75:c6:7d:b2:fd:97:17:63:d6:8d:d9:
9d:9e:db:97:e1:59:93:1a:1d:3a:b8:08:be:c4:ae:
99:2a:ee:f8:f2:82:ca:6a:5a:34:f1:c2:46:79:e7:
25:30:ae:2e:81:d8:b3:7e:79:6d:86:e6:ed:41:85:
ed:8d:06:20:df:c1:2f:73:8b:79:b9:28:36:ad:70:
64:8f:b4:56:6a:b5:01:97:9f:a5:a9:65:28:ea:f5:
cc:7f:1c:b4:b4:82:79:e0:14:f6:23:7b:dc:34:9a:
75:df:39:4c:41:30:d9:2d:d0:c7:40:5b:5a:60:73:
18:e2:69:20:75:67:79:a2:39:c3:ef:50:6c:33:64:
0b:e9:fd:06:2c:8d:9f:a0:c5:e1:70:23:00:d5:05:
c3:4c:53:a7:0d:e1:eb:78:2b:06:fa:02:25:1e:47:
6a:b2:80:0b:19:8f:70:df:54:4f:98:b3:a1:0d:24:
37:e3:ed:e6:07:f3:5a:51:6e:f3:88:f6:ce:56:ff:
b5:2e:14:fe:a9:69:3e:49:3c:c4:40:1a:23:5c:30:
6c:04:6e:d6:ed:87:e0:8d:07:74:99:d5:89:a2:63:
65:19:e4:ce:a3:c1:e1:78:de:29:93:1e:77:08:72:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5B:B8:D9:AB:C0:F9:CC:86:CE:98:3A:81:E6:4B:87:14:80:BF:49
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/46cdf5d1-bb95-4658-a544-6849261df725.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.0.0/20
Signature Algorithm: sha256WithRSAEncryption
c7:23:0b:af:2a:68:02:eb:53:aa:5b:f7:ca:54:c2:07:46:cf:
9e:44:1d:35:99:c8:fb:6d:bb:b4:24:91:80:a7:a8:e7:05:d5:
79:57:b8:04:8b:48:1b:83:f5:9c:9b:39:71:59:82:37:04:e1:
4d:6d:bb:c5:10:a1:f9:92:e2:a1:bb:c9:ef:f1:a0:a3:0d:33:
4f:ae:60:ff:e2:51:27:3d:01:c2:6f:60:0e:5c:e2:60:ca:70:
f5:4f:e3:b1:d0:84:64:bc:ea:22:a3:b9:aa:df:38:df:60:40:
32:2d:06:0b:7a:c5:a8:d5:6a:aa:67:24:80:d4:e9:5c:fa:d4:
8c:83:76:9f:91:7f:3c:c7:0a:71:43:ef:b1:5d:10:d0:33:9d:
90:db:c1:a6:83:74:35:77:c5:9d:eb:1e:70:3d:98:95:cd:c6:
ab:46:cb:39:9d:3d:a1:b0:80:8d:ad:55:8c:44:59:c6:20:16:
f3:a4:d3:8c:36:f8:3e:0a:5e:2f:b9:89:c8:df:b8:7f:a7:cc:
06:7c:b1:b8:da:d1:86:bc:c1:62:30:d1:07:ea:2b:34:cd:f4:
9f:c1:9e:f6:50:74:97:a5:df:3b:33:f6:4c:c1:30:f4:06:7a:
fd:d6:fa:e5:99:49:11:17:b2:34:bb:4d:25:79:df:f0:ce:02:
cd:20:ef:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:30 2026 by rpki-client