Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/736aa60e-d4e2-4ca5-b96b-c64d8fa18dc1.roa
File: 736aa60e-d4e2-4ca5-b96b-c64d8fa18dc1.roa (raw, json)
Hash identifier: KnLS7+4TovNDgozoqRyRJhDaJQRhvVV+4HbFqQK+FDY=
Subject key identifier: FF:45:4F:3A:A8:A0:CA:2B:F9:7B:46:F1:DF:EE:EA:63:3A:F6:13:64
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 495AD06E1CF1C6E5F2455661230F110E40E87844
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/736aa60e-d4e2-4ca5-b96b-c64d8fa18dc1.roa
Signing time: Wed 05 Aug 2026 02:00:28 +0000
ROA not before: Wed 05 Aug 2026 02:00:28 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.224.186.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:5a:d0:6e:1c:f1:c6:e5:f2:45:56:61:23:0f:11:0e:40:e8:78:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:28 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=badfe217698abef3854a9662fdc8ddf52ed60d3a1f94413a78f83c4dba7fd6e4, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:26:76:4a:4a:d0:fa:15:14:83:fd:46:8d:
2c:c7:95:ef:30:e2:20:24:de:a3:83:4f:d6:df:da:
87:eb:52:54:18:8b:f9:35:c3:93:0d:6c:f2:85:5a:
63:47:ff:9e:06:00:27:9b:63:25:c2:46:0b:99:a4:
92:57:59:19:2d:1b:15:31:cf:8a:4e:58:36:56:a3:
14:26:d8:ef:7b:12:a9:34:46:bb:f9:b8:47:73:d9:
fb:9a:e3:78:b6:ab:55:0f:8b:da:46:8c:c4:fe:66:
7b:5d:96:40:1b:f4:bf:ee:f0:d0:8b:ed:87:3e:79:
18:83:97:55:59:39:34:b8:bf:f4:6a:50:f1:c0:04:
c4:d8:87:eb:cc:cf:ba:0e:75:fa:f4:c6:95:f0:41:
6f:25:cf:35:f2:91:fa:00:fc:19:bd:c2:a4:6b:ff:
cd:03:64:ec:38:db:6c:18:b4:0f:c5:55:73:58:b9:
b7:fb:34:43:20:a8:1c:ab:b9:df:0b:ab:c4:43:95:
cc:d4:f3:05:a3:bd:49:87:a1:43:bc:11:f8:e9:7a:
2d:bf:e9:db:0f:3a:28:c6:07:5f:98:73:c9:db:d3:
16:42:a8:80:a8:0f:38:f4:06:d7:26:82:df:09:27:
da:1d:04:87:c5:6e:cb:b2:53:f3:b1:40:17:e1:0f:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:45:4F:3A:A8:A0:CA:2B:F9:7B:46:F1:DF:EE:EA:63:3A:F6:13:64
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/736aa60e-d4e2-4ca5-b96b-c64d8fa18dc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.186.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:f5:12:93:95:eb:8e:d6:81:26:88:f7:cc:91:a9:d7:84:82:
ec:c2:d3:7d:7d:7f:ec:06:6e:b5:c3:8e:7b:be:1f:2f:37:f4:
de:f1:7a:6c:6c:03:5b:82:f2:43:8b:af:8a:a1:11:2f:a8:30:
51:e5:3d:8a:e6:dd:b2:d0:94:16:22:2a:f0:08:82:83:da:a4:
97:f1:ae:7a:b9:f6:e5:a4:29:43:4d:9e:b1:14:db:1a:30:86:
c5:a4:f1:17:e5:95:b1:44:3d:6f:f6:df:df:ba:9f:56:f7:df:
5c:06:e5:4a:e2:14:85:0c:cb:19:28:00:f2:c9:18:44:1c:97:
e2:0b:0c:97:89:83:8e:d4:78:35:f1:1f:b5:a0:a5:76:b5:7c:
1e:97:22:cb:3e:4d:0e:39:5f:16:a3:94:3b:c0:74:5e:af:bf:
85:09:d5:f2:b7:71:9e:97:90:23:d6:ee:98:76:6e:e7:0c:0a:
46:d7:b7:97:4c:27:68:87:f6:da:b6:fb:8e:3e:c4:83:9a:d9:
eb:82:78:b5:bd:da:1c:7e:24:4f:53:83:31:b0:2b:b9:91:48:
93:aa:0e:d4:53:c2:20:d3:e0:61:79:b0:7e:dc:1f:19:fc:42:
d9:d6:ed:e1:5f:18:f3:d4:ad:26:a8:57:8e:1d:c0:d8:15:1d:
3f:ba:a1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:38 2026 by rpki-client