Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4adae777-c6bd-4913-b373-07ac423fe5c5.roa
File: 4adae777-c6bd-4913-b373-07ac423fe5c5.roa (raw, json)
Hash identifier: 3fb8Sady9g021Vh6loYwy51hAjvFLUfGwMYBLDkZ3vE=
Subject key identifier: 34:12:4B:D0:A7:00:30:25:84:62:47:AA:D3:7B:63:92:15:4D:9C:C5
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3FB1BA57AEDB093A54CE21D46E3F6F9C7CB366CA
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4adae777-c6bd-4913-b373-07ac423fe5c5.roa
Signing time: Wed 12 Aug 2026 20:03:30 +0000
ROA not before: Wed 12 Aug 2026 20:03:30 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b1:ba:57:ae:db:09:3a:54:ce:21:d4:6e:3f:6f:9c:7c:b3:66:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:03:30 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=c4fc6922d5a656ca28acc94bd5c370fdba32bc8c22966c75712d11dffc52b78a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:6b:5f:63:aa:6a:a4:91:ff:5f:ff:10:3a:
e7:7d:87:f0:e2:66:a5:51:65:23:c4:dc:c1:13:96:
9f:b6:3e:33:1c:41:97:99:f4:ce:4b:ca:85:cb:e3:
2c:cb:13:9e:0a:13:83:83:29:4a:37:e8:8f:ff:1c:
7d:89:51:14:eb:a7:11:b9:0f:70:92:99:74:49:43:
1f:44:89:cb:01:36:d4:55:b7:65:b3:be:02:3f:ed:
f4:32:63:8e:63:74:8b:b6:ba:2e:15:72:ff:cd:17:
89:92:44:fd:f1:38:ea:87:0c:23:13:38:39:44:9f:
05:7c:93:c9:87:92:d2:07:11:b7:63:41:cb:4f:e6:
b9:80:31:32:26:ea:ac:97:e3:b9:ed:6b:83:bd:a4:
d7:1e:66:4f:97:12:4a:3c:7b:26:9e:ea:72:84:53:
b4:45:c0:81:5c:18:39:d1:4f:e6:0e:04:89:58:7a:
f2:ce:27:21:96:bb:57:4e:30:5f:82:75:7b:8d:a2:
53:3f:71:31:e5:a7:60:0a:e3:ac:92:0a:0d:eb:14:
3c:59:5b:46:0e:82:4d:82:6f:e4:e6:95:b7:ec:3e:
e7:ad:78:70:5d:ae:4a:a2:b7:ad:3d:d2:d9:dd:2b:
83:0f:f8:2b:fd:c2:78:80:bd:14:f3:31:b6:e9:cd:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:12:4B:D0:A7:00:30:25:84:62:47:AA:D3:7B:63:92:15:4D:9C:C5
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4adae777-c6bd-4913-b373-07ac423fe5c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.0.0/19
Signature Algorithm: sha256WithRSAEncryption
ca:79:a5:a8:1d:d8:64:05:c7:ee:74:4a:ee:bb:97:ef:27:6e:
9e:1c:ce:5e:44:b9:64:3d:35:5a:c6:c7:e8:e4:80:21:e9:23:
bc:fc:4f:ad:8c:cc:fb:82:7a:72:40:65:44:7b:c3:e9:5c:aa:
3d:9a:ae:98:b5:cf:7e:1a:53:d5:9c:35:ec:01:eb:72:ed:48:
8d:7d:99:79:97:6c:91:87:f0:bc:db:fe:86:bd:50:dc:0a:17:
4d:10:c7:c4:f4:12:b5:0e:df:02:c1:5d:69:62:98:15:50:38:
d4:82:10:22:af:a9:eb:f6:b5:2b:1e:4e:09:ec:c1:0a:f0:0f:
85:ea:a6:48:97:07:ae:8f:8d:db:ba:e8:36:f1:27:e7:19:e9:
5e:51:22:17:72:81:d0:08:5a:c0:03:a2:72:ac:d0:a3:53:45:
2e:d2:7a:61:79:a7:81:59:bb:8e:d9:9b:67:c8:61:27:60:b0:
23:12:c3:91:f7:68:91:97:4c:23:b2:a2:5d:3e:84:d3:a7:d9:
34:ae:a4:04:d7:97:7c:c5:cd:0b:a3:52:fd:48:39:f5:97:23:
37:7f:1b:e3:bd:56:ba:e1:98:9e:b5:5f:4c:86:95:eb:10:92:
e8:da:26:5e:b8:21:db:d4:1c:6e:40:a4:e8:0e:e2:bf:50:3a:
00:3f:f6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:36:30 2026 by rpki-client