Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/523896f3-4928-4815-a23b-279c9319e3cb.roa
File: 523896f3-4928-4815-a23b-279c9319e3cb.roa (raw, json)
Hash identifier: hBtMRog4yw63tEaa0TqlayPS5cNsqIqTzqFxUvQU9j8=
Subject key identifier: 28:E4:21:12:D9:1D:D4:CD:E6:B2:4B:E9:BB:BC:4E:92:CD:09:28:41
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7DFFF9666B58816AC9FAF5A733183C93DFE47320
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/523896f3-4928-4815-a23b-279c9319e3cb.roa
Signing time: Wed 12 Aug 2026 20:47:59 +0000
ROA not before: Wed 12 Aug 2026 20:47:59 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.224.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ff:f9:66:6b:58:81:6a:c9:fa:f5:a7:33:18:3c:93:df:e4:73:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:47:59 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=ccd07f159ebf742a3aab6b8267edbbd148fc0f469feb9fc1c6b73da9e68ef305, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e3:c4:0a:12:f7:51:cb:9e:9c:03:a6:2f:52:
1c:6d:09:1f:63:c9:70:ce:20:0e:d7:02:9a:69:09:
d0:e2:ad:b4:bd:d0:17:cb:b3:61:95:11:b2:1f:94:
1d:f7:5c:3c:28:06:df:84:44:b3:22:c6:60:b5:29:
a1:9a:b2:98:66:b7:5d:3b:6c:66:c5:fc:c1:20:7a:
ec:80:35:21:4d:c1:54:c9:14:11:f9:db:58:c5:c0:
14:8b:1d:80:a6:e5:5d:6f:2a:f8:f4:f7:df:5c:96:
67:66:c5:c2:f6:09:a7:44:bd:de:f8:0c:e6:22:c9:
52:ea:59:08:ef:f3:f5:36:73:b2:f0:2b:b3:3d:13:
c9:5f:f8:07:1c:d4:80:39:1f:8b:06:74:a9:12:02:
66:b4:47:fa:94:3f:06:3a:58:cc:6d:da:4d:36:99:
19:ef:2c:b6:cf:0b:e8:b9:f1:bd:1e:0e:d6:fc:b9:
72:7b:b3:e2:19:2a:39:9e:2f:f6:ad:ae:ef:82:ea:
95:8e:41:3a:bb:b9:77:6b:67:51:43:1f:31:60:87:
c3:e3:8b:89:91:e9:99:09:e5:b9:e8:e1:73:ce:f2:
02:cc:10:21:49:13:7e:07:60:dc:2a:98:cf:2c:79:
bc:35:6b:5f:cd:93:97:51:ac:50:71:1e:10:78:4e:
a3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E4:21:12:D9:1D:D4:CD:E6:B2:4B:E9:BB:BC:4E:92:CD:09:28:41
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/523896f3-4928-4815-a23b-279c9319e3cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.182.0/23
Signature Algorithm: sha256WithRSAEncryption
08:e1:80:a5:b2:5e:b0:3c:52:81:46:ca:06:48:cf:c6:13:aa:
2d:1d:7b:ec:7a:87:07:25:c6:fa:86:17:70:49:82:08:c3:af:
fd:b5:b1:51:df:49:be:77:28:63:b6:10:63:60:7a:97:b5:be:
ad:64:c3:65:84:84:22:90:79:4b:17:20:56:71:d2:3c:a7:8e:
0b:bd:eb:4e:09:9c:f2:b4:30:cd:17:65:5a:ca:b1:30:4a:ea:
52:0c:9b:cd:d3:b8:17:eb:52:88:9a:5d:2b:4f:37:ba:3d:9e:
8b:63:e2:34:fc:36:bd:f7:ba:9e:fa:26:30:26:d3:16:bf:ae:
5d:53:c9:7f:ef:80:7d:c1:be:85:cb:56:a2:4b:0c:56:e3:5c:
e2:4f:e6:1f:21:b0:f4:66:db:e6:eb:26:45:d5:81:ac:3a:66:
2b:3b:fc:f8:58:f7:9e:d1:04:55:89:45:8d:d6:80:50:a6:ad:
63:0f:26:af:21:6b:af:e2:a6:68:78:22:35:67:ac:17:5c:08:
9c:5d:1b:4c:5b:2c:60:33:13:a0:db:f3:94:1a:f0:5e:08:65:
af:76:f1:18:94:55:2d:4c:4e:c9:f7:fc:59:5a:9a:67:f6:94:
c7:dc:ef:db:aa:86:f7:24:d5:fa:05:4b:88:b1:f0:70:06:45:
ad:f4:4e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:58 2026 by rpki-client