Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/77c679c8-2cc0-4e9b-b3da-c3315ea2711c.roa
File: 77c679c8-2cc0-4e9b-b3da-c3315ea2711c.roa (raw, json)
Hash identifier: 851mxlcLPE7dYHuA/Atwn/+lANe4mqkA5YL1pl7Azec=
Subject key identifier: A0:43:1C:E0:EE:80:F7:BF:3E:4E:DB:62:E1:C1:50:45:52:3E:A2:90
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 4F9AD97E3A5E22D62E77D1BEAF2BD5E970D26DB9
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/77c679c8-2cc0-4e9b-b3da-c3315ea2711c.roa
Signing time: Wed 05 Aug 2026 02:00:26 +0000
ROA not before: Wed 05 Aug 2026 02:00:26 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:9a:d9:7e:3a:5e:22:d6:2e:77:d1:be:af:2b:d5:e9:70:d2:6d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:26 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=f27f9694bf729fc70ca99aec2fde78c52bf75e3353512a0d179775daa59cebde, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:6d:da:ef:a5:8a:f2:7d:16:19:a3:f0:ec:
ee:ad:a0:95:4e:03:43:4d:6b:78:34:01:8b:52:15:
9e:81:42:61:49:1d:99:c8:72:a7:57:ca:ff:18:74:
2f:98:b2:69:c9:e6:aa:77:45:21:f6:69:08:1d:e8:
d1:88:c8:be:cd:5f:f7:c1:e5:bd:45:64:84:17:81:
17:01:26:01:e2:5e:8d:15:19:ef:2c:75:21:2c:2e:
3a:82:2b:e4:72:b8:5c:e8:92:67:6f:0b:1f:89:fc:
40:59:50:39:99:c1:b5:85:6d:da:b2:ca:f7:80:ac:
ad:0e:e8:0c:28:35:c5:2b:21:bc:29:f8:21:9e:e6:
bc:23:78:5f:26:02:99:cf:84:88:b6:56:e7:b5:25:
f5:47:63:e1:40:db:9b:2d:b4:b7:a1:9d:89:bb:98:
cf:0a:e1:22:64:14:6c:c3:a3:2e:48:04:6e:79:5c:
b3:9a:63:b9:1a:e8:04:80:a8:42:80:0c:7a:3f:69:
2d:90:2d:36:ff:d5:01:11:b5:9c:e7:a7:46:9a:04:
14:55:ad:81:23:39:ed:92:11:4a:61:9b:77:d1:48:
28:7c:c0:b1:ff:cb:69:7a:2f:27:cf:6a:20:53:ce:
15:43:65:64:60:d5:43:67:d5:59:1c:ed:11:88:88:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:43:1C:E0:EE:80:F7:BF:3E:4E:DB:62:E1:C1:50:45:52:3E:A2:90
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/77c679c8-2cc0-4e9b-b3da-c3315ea2711c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.140.0/23
Signature Algorithm: sha256WithRSAEncryption
86:66:69:24:7e:72:3a:5e:d2:22:7d:a2:8e:a6:ed:14:b6:da:
e1:57:6b:24:46:d6:34:9a:cf:6b:15:62:85:67:14:f4:b6:bb:
0f:16:1b:e9:52:c2:fe:76:7c:a1:5d:d1:be:98:56:25:09:41:
8d:53:1b:38:34:47:f5:ba:d3:5b:c1:4d:1d:26:c4:e0:a0:02:
99:8c:9e:17:8c:cb:11:41:a5:5e:ae:ff:74:06:19:52:a4:cc:
1e:44:4a:89:e2:0c:ea:be:44:86:cf:bd:5b:d4:06:e2:dc:9f:
a9:92:a8:dd:68:51:98:9d:d8:2c:7f:ce:d7:74:37:22:82:46:
a8:3e:0c:92:41:31:0d:98:51:1e:00:14:cd:92:b7:ed:36:42:
b6:18:4b:4e:bd:0f:e0:6c:38:32:a8:f2:60:00:45:d2:af:5b:
1a:c5:1d:35:ee:72:80:0f:23:44:64:3b:e1:fa:64:f0:c6:ca:
f9:ac:62:12:6c:f8:25:b9:ec:dc:51:20:d2:b3:d3:ca:3b:f2:
d0:4c:5c:ee:7c:36:df:30:b2:ce:c9:76:f2:f2:b2:08:8a:b5:
74:9a:c1:22:72:07:30:2e:aa:c0:4e:2c:3e:7e:a7:35:ac:9b:
78:26:6f:46:1c:93:2a:35:52:b1:2e:6f:4d:57:76:19:a8:48:
3a:1e:40:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:39 2026 by rpki-client