Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4d69fae6-1eec-4ef5-8de8-e7b32ead0cba.roa
File: 4d69fae6-1eec-4ef5-8de8-e7b32ead0cba.roa (raw, json)
Hash identifier: SLmLXad+o/LFpZ6KCFl23cxgtdrEbxHJ/T8qK2NypY8=
Subject key identifier: E8:41:BB:76:BD:3F:B6:70:B6:34:A7:4A:56:F9:6A:FD:87:0E:6B:BB
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 125066406B22D01B25DD1F5F49185CC9E066A95D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4d69fae6-1eec-4ef5-8de8-e7b32ead0cba.roa
Signing time: Wed 12 Aug 2026 20:18:07 +0000
ROA not before: Wed 12 Aug 2026 20:18:07 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:50:66:40:6b:22:d0:1b:25:dd:1f:5f:49:18:5c:c9:e0:66:a9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:18:07 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=56accf29dd9bf4f2cbcdc813340aa5f1a39dfe980d50f47e2c3c6b54aa1bec65, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:c1:33:da:6e:87:50:b3:a1:d2:89:8f:cc:
50:10:ab:43:32:18:90:1c:a7:39:57:4d:e5:d8:f6:
d9:52:37:6e:73:d4:84:b3:5d:2f:2b:b6:41:f1:15:
24:af:9a:31:ea:bd:59:c1:24:0c:32:14:0b:14:a7:
7b:08:fb:c5:8f:95:2c:f8:8e:15:55:b1:c1:fc:8e:
99:79:ea:3e:20:7f:48:40:7e:00:f9:07:cf:e1:e9:
68:4f:2d:0a:15:6e:82:bf:5e:b1:28:1d:06:61:8c:
dd:e2:af:15:2d:c5:81:d2:34:7c:a3:41:2c:0b:7a:
fa:16:df:e4:0e:ab:82:0d:9d:c8:44:56:35:e2:18:
f9:a6:50:41:24:21:89:3e:59:58:d2:06:df:c4:b5:
7b:f3:36:77:44:86:46:63:e7:31:12:c3:f5:09:e0:
03:50:e2:07:ed:14:c0:64:3e:24:6f:7c:31:61:a0:
7d:19:b9:6f:d5:da:af:7f:9b:74:a8:b5:f6:89:cb:
73:bf:ee:7d:42:12:ca:12:23:07:5e:82:a5:8b:fc:
d4:c1:5b:90:73:0b:80:64:8f:46:e6:01:85:3e:da:
be:39:20:6f:5a:ab:42:7e:38:f1:24:2b:25:92:c0:
8f:9a:a5:bc:c8:71:4d:08:53:37:57:fc:b9:3c:d7:
d9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:41:BB:76:BD:3F:B6:70:B6:34:A7:4A:56:F9:6A:FD:87:0E:6B:BB
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4d69fae6-1eec-4ef5-8de8-e7b32ead0cba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.252.0/24
Signature Algorithm: sha256WithRSAEncryption
10:12:29:ed:f8:97:00:54:33:6e:e3:db:56:1c:be:6a:85:89:
6c:62:5a:bd:8e:2a:a5:34:9a:85:bd:3c:33:db:0f:ec:8a:68:
d7:90:02:aa:ba:e7:df:58:a2:9e:65:ff:ad:66:84:4e:b4:8f:
64:5b:ce:65:85:97:fe:34:93:e2:51:53:02:4e:bf:54:1f:69:
42:84:36:05:10:69:96:c3:43:e0:b9:51:93:93:8f:52:be:41:
64:c1:62:1a:b2:54:e5:b6:fc:64:b5:a6:b9:3e:c5:fc:58:8c:
ee:10:c7:b0:4c:01:fc:7b:64:d4:47:56:0a:39:60:51:3d:fb:
62:ce:1d:cf:6d:7d:ca:2f:78:de:e3:49:f7:22:54:2b:0a:73:
b4:91:1c:dd:cf:73:0a:76:2c:06:01:60:40:e7:1a:b1:4e:6c:
52:c8:70:4a:3f:f0:11:a2:27:35:03:d9:05:0a:d7:fb:b3:c5:
a9:46:25:58:62:bf:eb:43:99:b7:ec:da:8c:a1:2d:b1:11:94:
14:47:96:c0:0d:22:b8:16:a0:82:37:cd:c0:14:77:3b:e0:c1:
63:b3:64:e6:10:49:fe:6e:61:4d:fb:66:2c:88:8b:44:71:d4:
41:14:89:ab:d7:79:46:4b:ec:ef:59:c6:9a:a0:70:4a:ca:85:
4a:58:ba:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:30:34 2026 by rpki-client