Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7ca55aad-890f-4a52-9daa-e3d8a128f118.roa
File: 7ca55aad-890f-4a52-9daa-e3d8a128f118.roa (raw, json)
Hash identifier: DCGJZXPc0SDb2RrkSfLne2gjL2SxXWfQ6lJ/o332GZI=
Subject key identifier: 70:61:F1:12:49:2C:A8:A0:97:B2:53:FB:17:74:A8:E0:31:4B:69:56
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 0B8D8BD1830A862B5A40BE73C41B716E5121711B
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7ca55aad-890f-4a52-9daa-e3d8a128f118.roa
Signing time: Wed 12 Aug 2026 20:18:05 +0000
ROA not before: Wed 12 Aug 2026 20:18:05 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:8d:8b:d1:83:0a:86:2b:5a:40:be:73:c4:1b:71:6e:51:21:71:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:18:05 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=fde65a631a00a783f4da30366e492ef17d198c6bc365de04159f7c41c57183a4, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:80:e2:d4:9b:45:84:26:00:f7:df:8f:90:ae:
62:65:d1:f5:15:1b:71:7b:fe:38:b9:10:87:2e:00:
fb:31:75:06:69:52:f6:54:25:d9:8c:49:82:52:4b:
65:6f:aa:cc:ed:b9:c2:75:b7:ca:29:d0:44:1e:c6:
1c:de:31:5f:4b:e9:7a:0a:0b:4b:eb:cc:6b:ca:53:
17:d6:73:18:0f:36:5b:23:3b:d4:95:ad:a9:03:b1:
2e:be:b2:8b:6d:47:cb:ca:e7:13:ef:79:85:b6:56:
96:13:88:e6:3a:dc:09:83:62:db:08:b1:82:b2:fd:
a4:17:2d:99:40:e0:c6:a2:63:49:95:b1:fe:f8:6f:
05:79:92:53:7d:f4:5c:fd:65:52:d2:7a:b8:2d:b9:
8b:6d:a7:e1:49:90:8f:b9:b0:5e:14:35:76:8e:f0:
38:9d:f6:18:75:89:27:b1:24:95:e8:5b:2c:1b:24:
8d:a4:59:ef:8a:41:f9:2f:ae:eb:d2:26:68:81:41:
49:42:4a:f4:33:d9:88:83:39:ff:38:50:47:c5:cc:
93:5f:ab:29:13:84:6f:e5:e2:34:00:73:30:46:17:
fc:98:c9:3a:9f:ad:59:e5:39:b1:0a:f0:43:1d:b2:
4e:7e:a9:5e:21:1a:d4:c8:d2:79:27:30:a8:43:00:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:61:F1:12:49:2C:A8:A0:97:B2:53:FB:17:74:A8:E0:31:4B:69:56
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7ca55aad-890f-4a52-9daa-e3d8a128f118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.251.0/24
Signature Algorithm: sha256WithRSAEncryption
41:27:fc:27:b1:ac:3d:df:db:81:1f:37:b3:f8:6f:b8:3d:d1:
23:ed:89:76:48:40:e0:78:13:6e:56:47:5b:93:c7:f4:df:fe:
1c:4b:9f:a4:4c:1a:12:d6:aa:46:59:db:c5:67:28:01:a4:89:
39:c7:d9:4c:81:63:a8:f2:a1:c4:f3:bf:dd:6e:19:7d:af:5c:
41:09:44:c2:f8:8b:61:ce:a6:29:7f:0b:5b:8d:26:c3:53:d4:
ed:e9:7d:f8:18:26:fe:cc:7f:ed:37:41:54:91:d7:d6:e1:f9:
80:3f:d1:eb:b3:f0:cc:ad:59:aa:6b:89:ab:bf:d3:40:d4:2c:
3d:3d:fc:76:a1:bf:ff:66:b2:ef:b1:b7:53:a4:f5:48:f5:7b:
f8:67:e3:08:f7:77:52:00:4f:1e:a7:f2:2e:05:40:b1:58:fc:
3a:2b:bf:c2:28:86:3c:74:33:32:a5:58:7c:d9:37:88:31:6b:
cc:7b:55:a9:ff:0c:ee:36:16:35:32:7c:d4:63:29:18:61:a2:
53:0e:39:1b:de:0e:23:ac:85:6d:7e:61:92:48:49:2d:8c:de:
ca:93:1d:a9:3f:47:04:29:2b:b5:c5:53:29:69:8c:bd:f9:6d:
2a:f6:48:f7:9d:0d:f0:8a:ba:d1:43:45:b3:0e:47:08:42:fe:
e7:75:00:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:30:33 2026 by rpki-client