Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/65332848-2626-4b72-a907-5f58d16906bb.roa
File: 65332848-2626-4b72-a907-5f58d16906bb.roa (raw, json)
Hash identifier: Pq7zNqaiv/pgPxY49N/EK8GxsEOvi/Urb+SoUe8L4dA=
Subject key identifier: 30:B2:24:C0:32:C0:B8:EA:7B:A0:BE:E3:0A:F9:36:7D:91:4F:95:DA
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 42C16CC6B63AC85F1C884D9EE70B8552AF80C689
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/65332848-2626-4b72-a907-5f58d16906bb.roa
Signing time: Wed 12 Aug 2026 20:48:01 +0000
ROA not before: Wed 12 Aug 2026 20:48:01 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.224.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c1:6c:c6:b6:3a:c8:5f:1c:88:4d:9e:e7:0b:85:52:af:80:c6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:48:01 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=2477627d1e71dfbbfbff233b28de9ba7c11907d357901951998719bded706ff1, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:c6:c5:b0:5b:f3:83:09:7a:09:da:67:3b:
55:d5:5f:15:5d:8a:b6:bf:a1:65:64:18:7c:fe:2b:
8d:d9:46:85:72:db:cd:aa:8f:b6:90:85:77:38:3f:
35:c0:42:dc:0f:8d:2a:1c:7d:0e:9f:dc:5b:76:27:
58:11:10:46:fc:89:f6:34:58:37:dd:6b:74:86:a9:
45:6d:97:3b:76:ca:9e:db:96:95:33:af:cf:9a:e3:
22:34:7d:62:47:ae:62:a4:85:51:17:30:95:f6:ff:
1f:43:f3:93:28:4d:21:4b:ef:48:27:28:1d:fa:8f:
85:a6:a4:e6:3d:2c:78:9a:88:00:4c:ec:94:e0:f7:
8e:8b:64:2a:01:3d:3c:24:05:52:2a:c2:b7:8d:3b:
2f:73:70:81:52:44:01:62:5a:89:5e:fb:55:df:df:
fe:42:e0:ab:c3:e9:83:aa:3f:de:9b:1f:bf:e8:7c:
c9:66:4e:dd:da:3c:14:26:6d:4a:63:93:ae:02:72:
23:6a:d9:33:6f:4b:29:c8:29:48:5d:aa:40:a8:33:
f5:08:e6:2e:5b:89:65:93:fd:dd:d3:4c:8e:5e:58:
e6:cb:d6:05:0c:f9:ea:53:28:f3:ce:70:13:67:5a:
09:fd:6a:01:6c:fb:0e:c2:8c:76:9c:fc:c9:94:d2:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B2:24:C0:32:C0:B8:EA:7B:A0:BE:E3:0A:F9:36:7D:91:4F:95:DA
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/65332848-2626-4b72-a907-5f58d16906bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.190.0/23
Signature Algorithm: sha256WithRSAEncryption
47:75:da:e3:a3:d8:0c:3c:94:34:6f:e0:08:83:1f:60:29:fb:
1a:81:16:a4:92:b8:a4:87:65:56:74:ad:6e:25:4d:85:8a:98:
83:63:90:5d:48:6c:58:74:99:c9:4b:fa:e1:14:ba:bc:9c:29:
0f:9e:7e:d4:03:c9:ef:b7:fe:f9:87:3e:6a:59:9d:1e:5e:1b:
94:4b:c3:2a:a2:1c:5f:0c:b0:ec:90:fb:53:4a:93:e6:c0:ac:
31:fa:d4:27:02:ad:7c:1c:3d:62:72:a4:cc:f5:53:a5:07:56:
38:ec:e1:71:16:c0:ff:ab:df:e7:46:4f:2e:df:ac:f0:80:13:
cc:8d:7a:76:e2:17:75:ed:69:52:b6:9f:7f:b6:50:73:1d:cb:
f3:3a:5f:c1:4d:4c:f1:56:c8:57:d7:fa:5f:be:0e:3b:b5:3f:
25:bc:8b:1b:85:a5:4f:64:31:4c:ba:bc:62:4d:39:63:8c:c5:
53:d5:45:10:09:2e:3c:54:45:3b:ab:fa:5b:3c:48:77:36:fa:
83:d5:4e:61:ed:99:d2:82:3f:b6:34:01:f4:c8:f9:8f:40:b4:
eb:5d:36:56:8c:43:9d:49:df:c7:c6:de:c0:d7:7d:be:e4:ba:
39:e2:be:b6:83:22:1b:af:6d:a6:a2:4b:c6:55:57:72:ac:e8:
4e:da:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:40 2026 by rpki-client