Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/78f049e0-a9a9-4ac6-aeaf-9fde546d76b5.roa
File: 78f049e0-a9a9-4ac6-aeaf-9fde546d76b5.roa (raw, json)
Hash identifier: u5gu06bS3i5Ir+WmXBqxKJxVcoS+3v0qEHl62F9eAvg=
Subject key identifier: 47:FC:8B:83:5B:CF:FE:68:C3:6E:11:CC:0B:0C:7C:25:46:54:C2:26
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 74024E26234E1AA8C55EFEB9BD23DC5143E5889F
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/78f049e0-a9a9-4ac6-aeaf-9fde546d76b5.roa
Signing time: Wed 05 Aug 2026 02:00:22 +0000
ROA not before: Wed 05 Aug 2026 02:00:22 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:02:4e:26:23:4e:1a:a8:c5:5e:fe:b9:bd:23:dc:51:43:e5:88:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:22 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=abbd2b92597b003633079087b13d0b6ad5c3b4a75f3a38e08f652b795bc09750, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:90:5d:2b:a6:8f:99:55:b4:fd:8b:b2:0a:
a7:41:82:88:a6:6b:5e:49:9a:49:75:8c:53:d7:73:
a5:fd:46:61:a8:d9:c6:91:e2:b0:73:2a:7b:dc:b3:
79:9d:5c:46:de:4a:f8:b6:6e:fd:2b:f9:1c:6c:b7:
84:e2:93:32:be:3a:c5:4d:ef:fd:96:ed:1c:5d:e7:
85:eb:77:b6:1b:29:60:e3:e0:a1:51:c2:83:be:1d:
84:22:64:69:85:fc:ea:0c:fc:54:1e:85:3d:1d:23:
c2:7e:78:58:be:b1:69:a3:ca:5d:1e:ed:88:2a:cd:
79:66:9c:e9:08:4b:d3:a7:22:5a:ba:73:4b:44:44:
71:78:c2:89:b0:51:e9:e0:e4:d4:5c:5a:e5:e9:8c:
8c:c0:64:be:5b:31:90:bd:78:d2:21:15:0c:93:14:
2c:78:99:64:e2:f8:88:0d:f7:b6:0e:12:11:6b:87:
d1:7f:27:e4:fd:c6:ec:e5:09:30:a9:74:ce:7e:15:
b7:4f:ed:5b:a9:aa:08:18:bd:ee:62:b6:14:bb:ff:
58:55:ab:21:f9:eb:45:c6:a8:e5:84:0d:12:25:3b:
73:3f:d4:2d:06:b2:9f:73:f6:72:f5:23:ff:42:6f:
43:a4:98:31:de:c2:5a:f7:eb:42:4d:ff:db:31:a2:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FC:8B:83:5B:CF:FE:68:C3:6E:11:CC:0B:0C:7C:25:46:54:C2:26
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/78f049e0-a9a9-4ac6-aeaf-9fde546d76b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.138.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:76:8e:6e:8a:b7:1a:4a:4b:67:98:96:c3:c8:29:88:3d:ff:
3f:64:99:b9:0e:2c:fc:c4:6d:a2:fe:f6:de:b3:cb:0d:6d:f6:
01:b0:29:91:21:92:c5:8d:c6:77:42:f5:59:07:8f:d3:d2:be:
56:fc:3c:a0:b5:bf:08:10:be:fc:49:51:34:54:aa:af:d6:b6:
a9:f3:08:a2:54:69:ad:cb:57:4b:bd:0b:80:db:93:93:88:ef:
b2:7b:92:96:46:3e:62:e5:e7:e5:3c:88:e3:13:2d:ab:1f:06:
7d:1d:45:1c:47:7f:8e:e8:6d:83:5f:1e:1a:84:1c:37:09:9d:
a9:d5:97:c1:1d:79:07:39:a8:59:b6:5d:d9:6a:8d:cb:1b:f6:
cb:21:8c:14:56:2c:80:1c:2b:53:b7:44:48:e0:6e:d6:77:24:
7a:74:87:97:e0:3f:41:09:aa:bc:1b:81:ae:97:8d:d9:48:75:
85:14:2a:69:5c:26:d9:88:c3:1e:2a:7f:8c:4f:d0:19:68:3d:
78:f6:2c:8a:50:5f:9e:e8:ef:0d:9f:41:f8:aa:b5:8a:14:b5:
10:f2:ad:e1:b3:ab:1a:4a:a8:05:bb:0c:44:d5:16:9f:ad:47:
86:71:35:87:c6:08:98:4d:ac:b4:d8:0a:e3:9f:c1:b9:e5:2c:
1e:f6:86:06
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUdAJOJiNOGqjFXv65vSPcUUPliJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MDUwMjAwMjJaFw0yNjExMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQGFiYmQyYjkyNTk3YjAwMzYzMzA3OTA4N2IxM2QwYjZhZDVjM2I0YTc1ZjNh
MzhlMDhmNjUyYjc5NWJjMDk3NTAxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL9zkF0rpo+ZVbT9i7IKp0GCiKZrXkmaSXWMU9dzpf1GYajZxpHisHMqe9yz
eZ1cRt5K+LZu/Sv5HGy3hOKTMr46xU3v/ZbtHF3nhet3thspYOPgoVHCg74dhCJk
aYX86gz8VB6FPR0jwn54WL6xaaPKXR7tiCrNeWac6QhL06ciWrpzS0REcXjCibBR
6eDk1Fxa5emMjMBkvlsxkL140iEVDJMULHiZZOL4iA33tg4SEWuH0X8n5P3G7OUJ
MKl0zn4Vt0/tW6mqCBi97mK2FLv/WFWrIfnrRcao5YQNEiU7cz/ULQayn3P2cvUj
/0JvQ6SYMd7CWvfrQk3/2zGikccCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRH/IuD
W8/+aMNuEcwLDHwlRlTCJjAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NzhmMDQ5ZTAtYTlhOS00YWM2LWFlYWYtOWZkZTU0NmQ3NmI1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATMAijAN
BgkqhkiG9w0BAQsFAAOCAQEAb3aOboq3GkpLZ5iWw8gpiD3/P2SZuQ4s/MRtov72
3rPLDW32AbApkSGSxY3Gd0L1WQeP09K+Vvw8oLW/CBC+/ElRNFSqr9a2qfMIolRp
rctXS70LgNuTk4jvsnuSlkY+YuXn5TyI4xMtqx8GfR1FHEd/juhtg18eGoQcNwmd
qdWXwR15BzmoWbZd2WqNyxv2yyGMFFYsgBwrU7dESOBu1nckenSHl+A/QQmqvBuB
rpeN2Uh1hRQqaVwm2YjDHip/jE/QGWg9ePYsilBfnujvDZ9B+Kq1ihS1EPKt4bOr
GkqoBbsMRNUWn61HhnE1h8YImE2stNgK45/BueUsHvaGBg==
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:19 2026 by rpki-client