Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/80c8537f-f518-4230-9f14-470ee4d649e2.roa
File: 80c8537f-f518-4230-9f14-470ee4d649e2.roa (raw, json)
Hash identifier: buXdsJLYh7ggFmSdeMX0kX8vz3f33uzYHFESoHfuiXI=
Subject key identifier: 3D:E2:01:D3:59:84:18:8B:50:2A:D2:72:45:9B:88:9C:0B:60:0F:95
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1CA0DA51C44789788AAB858AE566026587465E8C
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/80c8537f-f518-4230-9f14-470ee4d649e2.roa
Signing time: Sun 17 May 2026 02:00:25 +0000
ROA not before: Sun 17 May 2026 02:00:25 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:a0:da:51:c4:47:89:78:8a:ab:85:8a:e5:66:02:65:87:46:5e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 17 02:00:25 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=6d35eded41b49b0497289218d340c7c7d15c0d9a160c5724178216f2848fdad5, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8d:79:78:eb:05:37:31:41:6a:19:0c:de:25:
53:2b:a2:a6:d4:c3:23:f5:54:59:b4:ad:96:12:ff:
52:ac:0b:a1:80:d3:97:a9:dd:95:67:93:c4:94:76:
d3:05:26:50:26:cd:06:d8:75:7a:9a:d3:25:44:eb:
78:df:8f:bc:ff:d4:2d:17:d4:fd:cd:47:d9:de:61:
b0:16:5e:37:eb:57:64:15:54:94:5a:bf:4a:f9:14:
70:39:d7:58:94:ca:61:c0:2c:dc:12:24:05:a9:e9:
c0:e4:90:88:9b:e5:ca:2b:2b:d0:65:6a:1b:79:ad:
a8:81:41:ff:9b:78:26:27:02:c9:d0:2c:ca:6b:31:
e9:c9:e9:28:50:2c:f7:4c:c9:2f:c4:10:54:3d:9a:
b8:61:20:d3:ab:58:cb:c6:e3:a5:a7:37:ab:d4:62:
97:d9:54:86:54:9d:59:ad:c0:62:95:b8:be:b4:af:
53:a2:ef:56:10:db:35:23:0d:97:64:83:5f:bd:7f:
2e:8b:52:85:4c:76:50:a5:10:6c:2b:7e:cf:a7:0d:
65:ce:c0:fa:01:c1:5d:49:25:02:d2:0d:6a:e8:e5:
ab:87:e6:eb:ae:cf:4a:e2:3c:36:c2:34:d7:fb:03:
7c:0d:87:84:7e:2c:8c:18:04:bb:bf:6b:96:24:63:
59:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E2:01:D3:59:84:18:8B:50:2A:D2:72:45:9B:88:9C:0B:60:0F:95
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/80c8537f-f518-4230-9f14-470ee4d649e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.136.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:4c:41:e1:ba:74:34:60:30:9f:bf:e2:c3:15:b2:91:2e:f8:
28:bb:ef:57:6d:8e:1a:46:c1:11:1f:80:51:66:09:1c:02:cb:
c4:7c:4c:5f:f6:6a:b9:00:fb:71:6c:9b:c9:ae:1d:f8:4b:96:
d4:fa:39:c6:b3:c2:82:be:21:6f:1a:b9:f1:f6:4e:0c:eb:4c:
6b:05:08:88:b0:6b:80:2a:4e:02:0e:d1:a6:19:50:0d:79:22:
74:01:b6:3c:45:d6:6f:48:c8:ea:1c:76:92:f4:bd:48:3e:63:
e7:66:0e:27:72:e0:b1:72:38:97:b0:cf:71:4a:36:96:e0:dd:
af:4b:40:60:16:81:db:a2:29:9f:f2:be:18:8e:4b:cd:6a:6d:
34:14:7f:d0:c2:09:0d:50:20:92:b6:13:93:84:eb:06:12:64:
ca:c6:b1:5d:d9:8d:b1:89:d6:72:27:de:9e:c2:b4:32:16:fa:
db:f3:00:f3:79:79:3c:3d:77:ce:cf:c4:c3:12:92:1f:50:da:
e2:88:96:d5:fa:8e:a0:a5:9f:ef:8b:10:a6:c8:04:83:42:0b:
50:3b:24:ac:0f:86:44:de:06:5e:0e:f1:42:b9:9e:dd:8f:78:
31:d9:71:50:c3:30:54:31:55:d9:17:c8:64:75:8a:19:14:5e:
ca:0d:31:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:37:10 2026 by rpki-client