Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5e0372f9-155c-44b5-a4db-e3da48adfab2.roa
File: 5e0372f9-155c-44b5-a4db-e3da48adfab2.roa (raw, json)
Hash identifier: gbByBJ2ZOLfCdtesjS/l9QED4Dpp2s7IQ+PT4pLSn2o=
Subject key identifier: 99:39:28:2E:CC:BC:D5:C7:C8:C4:FB:7F:E7:5B:CC:40:C7:33:96:EC
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 17B81F890A0A12B6986546D218CFD911A142B495
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5e0372f9-155c-44b5-a4db-e3da48adfab2.roa
Signing time: Wed 05 Aug 2026 02:00:27 +0000
ROA not before: Wed 05 Aug 2026 02:00:27 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b8:1f:89:0a:0a:12:b6:98:65:46:d2:18:cf:d9:11:a1:42:b4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:27 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=5711668bdf0f77b79d6a43db73ce924d843b2fe7a0e4a7a653a46baab72c84aa, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:ad:ca:4a:04:65:96:5c:06:89:17:1d:bc:
0b:69:35:cb:f7:88:43:26:02:45:0a:f2:dc:91:07:
e5:16:f1:a2:28:78:89:8d:cd:91:41:1c:2d:0b:a7:
f5:d4:c7:c2:34:38:93:52:0c:d5:1e:0e:e1:b8:d1:
3d:36:f5:e3:c5:10:7f:ab:b9:86:2d:5f:bd:24:8a:
9f:32:c4:c3:5f:30:54:ba:2c:33:29:56:6f:4c:a3:
b1:47:90:52:73:31:6c:90:a0:e9:f7:ff:67:02:58:
44:64:07:6a:cf:78:90:ec:0f:79:55:da:5f:23:14:
3d:fc:eb:a9:91:67:c0:a4:33:1b:b0:a1:e7:b3:47:
30:96:4e:a7:aa:df:dd:0d:f3:d3:7f:76:d0:58:79:
af:10:c0:08:ea:61:d9:c9:21:cd:5d:dd:d1:d2:37:
8f:4a:c3:bf:83:31:57:85:30:ac:9a:8d:55:8c:f4:
53:16:7d:13:1e:3d:19:e8:f0:72:46:fa:92:b2:9f:
3c:20:66:e2:91:d6:15:10:49:f8:27:f2:e8:75:27:
04:b1:7b:d0:25:de:2c:08:4d:41:41:ae:91:20:47:
c0:c3:97:50:17:00:e6:69:40:f5:c4:1b:33:9a:76:
f9:d5:d4:30:a2:25:36:13:31:d9:a8:1d:0a:5a:31:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:39:28:2E:CC:BC:D5:C7:C8:C4:FB:7F:E7:5B:CC:40:C7:33:96:EC
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5e0372f9-155c-44b5-a4db-e3da48adfab2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.0.0/20
Signature Algorithm: sha256WithRSAEncryption
88:22:49:e7:fe:88:f7:1c:2c:d9:12:42:b5:e8:56:6b:25:a4:
a7:7d:65:7c:97:a4:b6:f5:cb:82:5c:56:f9:4c:7b:42:3d:7d:
99:30:15:be:45:63:07:f1:86:3d:94:db:d3:d9:01:73:2e:d2:
3b:67:73:60:93:fb:a6:42:6d:a7:00:e2:22:a4:34:bc:da:f4:
5d:65:ce:02:41:77:a4:13:17:4d:0d:3a:ec:e4:67:67:e9:8d:
e3:7d:d0:88:f8:43:92:01:30:9e:b7:86:5b:ae:37:55:83:65:
94:5b:b5:8c:0d:4c:35:35:dc:0d:fc:8a:4b:6f:69:6c:60:6b:
49:c2:0c:68:8e:92:bb:f6:fb:5d:a5:d7:e4:ac:b1:a8:37:07:
24:80:0a:44:d6:c7:b8:f2:47:e6:c9:d6:a0:89:b2:3f:5a:13:
11:0e:9d:0a:13:85:16:25:ac:6b:c6:f6:31:4d:07:33:07:21:
41:13:0c:06:ec:93:78:cb:1c:e5:38:ce:75:df:9c:12:32:58:
b1:6f:4b:94:33:11:d1:16:34:55:da:16:9c:9a:87:56:ff:ef:
85:75:51:a4:06:c0:27:4e:01:cd:ae:6d:b2:0b:2c:3c:0a:1a:
b3:dd:c5:ee:e4:56:e1:1b:53:46:fa:6b:e7:68:2f:5e:c5:c0:
db:9b:f8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:34 2026 by rpki-client