Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/78f049e0-a9a9-4ac6-aeaf-9fde546d76b5.roa
File: 78f049e0-a9a9-4ac6-aeaf-9fde546d76b5.roa (raw, json)
Hash identifier: 7Q3n50iIe3/dp2AFXNurtEi1mTVHJTp3+zoqbvxLNmk=
Subject key identifier: 0A:D1:7E:CA:48:EE:53:0D:B6:28:CF:BE:BB:32:53:BC:4B:0C:63:5D
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 177CFF03F9C396FA9748F83C5C53B40AB9BED2C2
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/78f049e0-a9a9-4ac6-aeaf-9fde546d76b5.roa
Signing time: Sun 17 May 2026 02:00:02 +0000
ROA not before: Sun 17 May 2026 02:00:02 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:7c:ff:03:f9:c3:96:fa:97:48:f8:3c:5c:53:b4:0a:b9:be:d2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 17 02:00:02 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=0b5219840e7e1f9ff2afc94a5f74202e81c84ccd183ebf59308b98f1d7530aaf, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c0:4b:af:8c:89:0f:36:41:78:ac:f0:09:4f:
b4:38:55:05:31:20:71:8c:25:a5:76:7c:00:42:04:
78:17:9a:85:6a:79:8d:f7:d8:28:34:c4:42:fa:57:
c6:46:20:7b:3a:1d:4d:20:99:cc:8f:e1:c4:a5:bc:
54:ca:be:66:82:49:ba:5c:c9:cc:58:5f:c1:91:31:
2e:c4:8e:56:b5:0e:57:1c:01:d8:93:55:ee:16:48:
c7:e6:8a:8f:25:1d:b8:19:83:dc:53:36:72:ba:0b:
cb:79:fc:4e:43:32:4e:98:66:fd:37:3e:06:d3:a5:
11:73:ba:4e:ce:27:cb:bf:40:de:74:47:46:44:02:
db:94:89:41:70:b8:bf:b5:2d:e8:04:3f:65:fa:89:
1c:1a:c3:6b:4a:67:3f:9c:e3:95:a6:4d:02:3b:b6:
83:8f:f6:66:ee:f5:77:d6:f7:71:8a:80:e6:bc:c4:
6e:c1:cf:8c:aa:16:28:2c:d7:52:63:48:e8:20:c4:
13:4c:5f:fe:e4:10:d6:cd:08:18:f0:3e:19:ae:15:
27:09:ee:e3:1d:c5:6c:ad:6e:f2:52:04:90:22:00:
a4:94:ea:f9:11:b9:e9:03:29:62:f6:d9:86:02:63:
6c:91:63:fa:e2:6d:04:7c:4f:6c:58:a7:5c:75:c9:
ca:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D1:7E:CA:48:EE:53:0D:B6:28:CF:BE:BB:32:53:BC:4B:0C:63:5D
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/78f049e0-a9a9-4ac6-aeaf-9fde546d76b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.138.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:cc:a8:bd:72:b9:02:a2:4d:c1:7a:66:a6:2f:92:13:7f:35:
bb:89:a8:62:c8:73:c3:25:25:a3:0f:3d:f5:ea:0f:ab:29:8f:
89:96:3e:7e:41:cf:87:2f:17:6a:e3:0c:f3:e0:b2:fa:2e:d0:
cb:38:83:5c:1c:86:76:22:e5:8f:c8:63:51:a3:36:06:84:a3:
2a:d9:64:0b:35:3b:46:f7:23:a2:e1:ee:a6:73:44:33:99:bf:
f3:b9:9b:34:67:83:a7:47:37:1a:b2:34:64:20:0c:98:c8:aa:
1f:a8:3d:4c:c2:50:df:c9:8d:3c:b1:80:8d:ba:2c:b4:07:2d:
a4:27:5d:a8:a4:8f:c0:50:61:95:93:cf:12:7a:7f:4b:76:7e:
9c:14:d9:e3:2d:15:4e:49:cc:b5:44:8e:94:a3:5b:84:2b:2e:
88:01:ad:35:46:e0:84:8b:73:a9:dc:52:4b:10:e4:1a:35:f7:
4d:e8:3d:ac:f7:a7:50:91:0e:5c:7e:97:15:9b:89:44:31:77:
3e:17:27:e3:bb:48:84:ed:6d:e2:21:10:6a:7f:8e:93:29:f1:
75:f6:0d:2d:cc:c1:14:55:41:e1:7a:5d:84:fc:c4:9d:cf:80:
66:6d:ae:c7:65:9c:19:c7:f7:7e:19:f7:77:30:46:3d:58:fb:
3e:99:e2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:04:17 2026 by rpki-client