Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/55e704e8-470f-4c3e-82e8-03868da744a2.roa
File: 55e704e8-470f-4c3e-82e8-03868da744a2.roa (raw, json)
Hash identifier: 0bT/YDy2z69o6e4MFBWMyzksnO2ClGka05osMG1PoZg=
Subject key identifier: AD:02:78:F5:25:BE:D3:4A:C1:2E:19:D7:58:4E:0E:4F:CA:0E:5B:DF
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 519672D1BAE2EAA2077A5D6276972EA89A50D497
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/55e704e8-470f-4c3e-82e8-03868da744a2.roa
Signing time: Mon 03 Aug 2026 00:40:05 +0000
ROA not before: Mon 03 Aug 2026 00:40:05 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.74.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:96:72:d1:ba:e2:ea:a2:07:7a:5d:62:76:97:2e:a8:9a:50:d4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 3 00:40:05 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=083baaa99d3448771a2c93518f696bff6ffbb67be603c014cfb03ae60480deb1, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:a4:97:09:40:24:1b:81:32:6e:b6:7a:83:
c7:78:15:b6:59:a7:78:1b:b6:a7:b2:46:4d:cd:72:
c3:6f:01:91:46:da:80:5d:d9:95:52:3f:5b:6b:69:
86:3e:d4:54:34:84:38:cc:f5:58:81:05:c6:37:5d:
39:d0:a0:e2:72:70:fa:a0:e8:a3:0c:96:60:89:c7:
9e:99:10:d7:62:60:9c:9d:f5:ef:2f:fc:81:80:a4:
36:31:87:5f:19:d0:c8:42:bc:9f:0e:55:19:a8:25:
eb:c9:f3:8e:30:c8:87:b3:38:2f:23:73:f9:13:cf:
6e:d9:dd:c0:c7:4a:d2:70:07:8f:2c:c5:28:b9:e4:
95:22:a5:fb:c6:c3:d8:c1:46:b1:00:7a:7f:43:36:
8f:55:28:94:c8:90:25:79:91:86:e3:08:dc:5e:ef:
3e:24:72:bc:dd:da:6c:b0:9d:19:31:11:ae:ca:71:
c7:07:97:e8:89:5f:e6:4c:62:c2:2c:00:9b:be:6f:
e5:35:72:2d:c2:98:86:7f:0f:5d:fe:59:bd:dc:bf:
19:23:21:75:a5:b4:f6:74:59:6a:84:7a:db:66:b2:
02:d1:71:79:81:30:49:30:d8:f4:26:a7:6d:9e:26:
5c:a9:ed:c9:f7:3d:fe:5f:6b:28:91:68:da:e4:02:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:02:78:F5:25:BE:D3:4A:C1:2E:19:D7:58:4E:0E:4F:CA:0E:5B:DF
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/55e704e8-470f-4c3e-82e8-03868da744a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.0.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:53:ba:1a:ca:59:69:5b:69:28:ba:68:c5:d9:75:1e:13:0d:
8a:84:1c:5d:ca:dc:b8:29:75:72:b9:85:c2:ea:b5:a0:be:00:
4d:39:94:e7:c6:61:c0:6c:f4:7e:ae:f1:50:9e:c4:76:a2:c1:
af:fa:5a:cd:6b:96:36:8a:30:cb:22:17:93:92:84:08:22:8f:
dc:67:4b:56:18:3a:8a:05:e3:46:ef:a4:fd:58:79:80:31:a1:
6d:7c:80:5a:85:20:2e:84:40:a6:a3:6c:5e:52:87:12:37:e0:
92:11:ee:02:42:9d:d9:91:ac:61:56:ec:f5:15:33:91:10:e2:
c4:a6:3a:e7:1c:60:0f:a1:5f:c8:f9:ef:9a:49:9e:4b:61:6b:
87:1e:ef:5a:a2:fc:a0:0b:b0:cb:71:79:3f:5e:d9:9e:60:65:
4e:cd:a8:b9:18:91:94:89:91:e2:b1:f3:84:cb:5d:a2:c5:5f:
f5:c0:ab:cc:11:34:44:7f:5c:07:63:57:7a:c9:3e:83:9a:dd:
d8:4f:51:93:3e:19:c1:9b:fc:68:c7:0c:aa:08:3a:63:83:60:
52:62:24:f4:ba:8d:18:30:14:da:91:5a:03:5c:59:7c:73:00:
ba:e8:ea:38:00:7e:41:5e:13:a9:76:9d:50:68:3f:f7:94:8c:
fb:69:f0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:28 2026 by rpki-client