Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4ed72d2a-7793-4a3a-ab7b-f3b8c1277220.roa
File: 4ed72d2a-7793-4a3a-ab7b-f3b8c1277220.roa (raw, json)
Hash identifier: gkRz6c4Dq/jqlGPeko/Yxq73DESM/vlCpvGnqaDAX6E=
Subject key identifier: 72:7E:7A:82:C5:5A:8E:E5:D9:89:7A:3B:EF:B9:A5:C4:4C:4D:B5:98
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 0DD36863B1E4CEC790DA136378E26FDA1816CB2F
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4ed72d2a-7793-4a3a-ab7b-f3b8c1277220.roa
Signing time: Wed 12 Aug 2026 20:19:04 +0000
ROA not before: Wed 12 Aug 2026 20:19:04 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.72.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d3:68:63:b1:e4:ce:c7:90:da:13:63:78:e2:6f:da:18:16:cb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:19:04 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=7e6610d8502e9e190dbfe5a41dd81f875551b28f26480400b8521f3806ddd0d5, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:da:bf:a7:33:e3:fd:15:3e:21:e9:18:c6:4d:
6d:53:f8:56:68:39:42:65:b6:e4:8e:af:fa:66:40:
c8:8c:1e:ee:0d:3c:4f:a7:b6:15:ee:a1:e3:2e:9c:
b1:25:3a:14:18:0e:3d:01:85:24:ff:a1:10:7c:46:
51:76:80:d5:54:6d:1e:cd:d1:f6:69:2c:c4:12:43:
02:ac:a9:bf:48:86:6d:a5:e4:71:95:ca:3a:c4:18:
8f:be:dc:41:50:0d:28:d6:af:51:2a:f6:b4:01:b2:
ea:57:3f:f2:e6:a6:bd:ed:e4:d6:01:9d:f2:d2:13:
49:45:8b:7c:08:c8:c6:8c:92:fa:4a:dd:35:27:41:
d8:e3:b9:f4:f1:5e:6f:83:bd:3d:ba:3b:d1:c4:49:
9c:23:65:ec:c9:b9:28:b4:3b:49:1a:70:8d:71:0b:
36:0a:a9:70:b0:07:42:ba:d2:8c:67:8d:0f:9a:2a:
8c:77:98:99:34:97:70:9d:33:4d:3f:7a:b4:21:eb:
79:68:e8:e5:a1:0b:3d:1e:b7:78:c6:70:97:c6:5a:
7c:0b:ec:6f:d2:3c:0e:9c:53:10:84:d6:0b:a6:e5:
8c:f0:56:f5:63:1a:75:b8:21:22:d0:bb:4a:1c:23:
c3:95:d6:51:43:4e:35:14:c7:ff:2c:15:dc:03:b5:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7E:7A:82:C5:5A:8E:E5:D9:89:7A:3B:EF:B9:A5:C4:4C:4D:B5:98
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4ed72d2a-7793-4a3a-ab7b-f3b8c1277220.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.72.0.0/15
Signature Algorithm: sha256WithRSAEncryption
33:3e:02:20:66:1e:09:42:d2:aa:a2:1f:75:81:bc:7f:02:9a:
23:00:a5:57:6a:94:6c:99:a8:29:91:51:33:e9:ef:e7:90:88:
b8:b7:57:5e:33:82:4b:85:dc:ce:53:55:da:3e:77:36:ff:a7:
3c:78:1b:f4:14:31:a0:ea:a0:2e:5a:64:1a:fa:db:03:88:e3:
49:06:01:17:50:49:cd:14:d0:36:86:50:a9:70:40:e4:02:c7:
ba:38:c3:d6:9e:e3:4b:1f:e4:18:46:79:db:d8:4e:20:06:1a:
9e:7e:87:60:2b:c3:4c:5e:2f:29:62:77:71:b5:b0:ef:96:51:
8e:af:6b:4d:b6:0f:59:63:fc:d2:5e:f4:60:2c:99:c2:fa:ad:
b1:2e:96:db:86:a4:6d:06:d4:7c:14:78:9e:d4:84:80:4e:cb:
30:5c:d2:ef:23:70:76:ce:d6:de:73:ca:36:67:64:b9:92:7c:
ae:0c:ee:0f:43:70:37:2c:ce:30:ba:80:70:ea:91:70:9f:90:
87:b6:6c:da:ce:05:a0:27:ca:aa:66:e9:39:f0:99:e6:8f:8e:
3a:80:0f:53:49:b3:8a:a9:9f:a7:5f:c5:9f:01:2a:51:90:27:
db:b7:c8:d7:b7:09:77:ed:32:81:91:ac:43:53:9a:38:64:f1:
27:14:45:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:56 2026 by rpki-client