Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/58a02d47-65d9-49b8-bdf2-00c72a86ef95.roa
File: 58a02d47-65d9-49b8-bdf2-00c72a86ef95.roa (raw, json)
Hash identifier: 9uGM5AL7yb58b5AWHkMDVxx8cJ2aCAcOTgjbvxsTW0U=
Subject key identifier: 04:4A:B1:00:14:2D:92:01:F2:38:7B:E5:45:1A:02:3C:19:B7:B5:4D
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 4E4C8B0187CF0BBC039BE5A121B844532C6D71CA
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/58a02d47-65d9-49b8-bdf2-00c72a86ef95.roa
Signing time: Thu 30 Jul 2026 01:20:06 +0000
ROA not before: Thu 30 Jul 2026 01:20:06 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.74.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:4c:8b:01:87:cf:0b:bc:03:9b:e5:a1:21:b8:44:53:2c:6d:71:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:06 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=a7bd29d6c76153d9b04ca448281e92985508712d2452588803ee39a0b13186ea, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:60:a8:13:c8:3e:fe:7f:9f:ad:0c:9b:49:
4e:61:a6:1c:5a:71:69:93:76:a8:c4:b0:79:d3:db:
9a:88:91:23:89:e4:ea:a3:22:98:46:d1:56:67:c7:
18:ee:3c:41:51:c7:07:eb:00:9a:ca:44:e6:2a:f5:
b6:8b:99:bf:21:a1:da:db:47:51:da:99:8d:e1:de:
7c:97:c0:8f:e1:a9:ba:a4:08:e4:10:3c:74:aa:a5:
cc:93:c5:da:35:82:93:e0:90:9d:4f:6e:c3:60:ff:
0f:1e:a0:49:96:78:84:3a:c2:d1:90:dd:aa:d4:3b:
9e:f5:a8:b9:80:3f:80:bb:57:bf:06:1a:ee:47:64:
bc:bb:0d:a8:c9:a3:a3:2a:54:10:ba:79:fa:9f:fe:
f1:3a:b2:8c:4f:19:6a:bd:2c:98:2a:44:5f:c8:24:
e7:e8:ca:a8:7b:38:70:32:e9:ad:cf:b1:3c:80:44:
0f:c2:14:32:a3:25:7b:95:a6:3e:2e:c7:e0:4c:60:
69:96:58:28:05:01:2f:fc:1c:e1:58:30:12:47:c7:
68:17:83:aa:f2:26:ea:5d:0c:4a:ea:b8:80:9c:12:
94:4b:d0:03:e3:eb:3d:1d:ff:d9:1e:0d:f8:0c:9d:
60:84:07:5d:45:ab:d9:9d:bf:d4:c0:67:fd:d1:ba:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4A:B1:00:14:2D:92:01:F2:38:7B:E5:45:1A:02:3C:19:B7:B5:4D
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/58a02d47-65d9-49b8-bdf2-00c72a86ef95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.128.0/18
Signature Algorithm: sha256WithRSAEncryption
b3:c6:e2:65:e5:9b:81:e8:20:33:69:c4:48:cf:7a:f3:31:33:
9c:7a:43:09:04:49:2f:72:1c:5f:57:4d:9f:03:fd:02:3a:22:
6d:ac:74:67:4f:da:8e:4b:43:b3:a1:84:98:c1:d1:60:0d:5f:
53:97:8f:fe:89:72:7b:28:0a:7e:bc:c5:12:49:35:8a:7c:37:
9b:08:77:9c:06:ca:bb:54:42:e5:a2:c7:78:4d:1b:5d:6b:ff:
3a:45:99:32:89:d1:33:86:e7:59:09:51:07:d2:89:ae:a4:1e:
6c:82:51:47:4e:3e:e9:c8:f0:08:be:49:3c:4e:ee:80:5b:69:
4b:65:57:66:aa:60:be:f8:58:5f:55:20:22:d4:f8:6e:54:6d:
d6:ed:ba:4c:f4:78:c6:f6:6c:8d:17:e4:6a:38:ea:69:73:b3:
ff:60:dc:ce:5f:d2:b4:ef:c0:31:12:3c:c4:fd:13:4a:fa:48:
f1:ba:a8:47:59:12:30:62:c8:0e:51:11:f0:2d:91:60:95:0e:
91:99:a1:5c:59:e0:c9:76:ef:4c:0d:41:65:89:06:59:f9:a5:
9a:87:72:2a:1f:ca:7d:b5:c5:d5:a0:0b:00:f2:fd:b8:17:09:
4b:4a:b9:e6:fa:ac:85:1f:52:b9:c7:3e:fa:22:ad:de:a5:db:
e4:d5:e6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:41:34 2026 by rpki-client