Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/88de1b01-0f0b-4759-ade7-42cc37dcc08e.roa
File: 88de1b01-0f0b-4759-ade7-42cc37dcc08e.roa (raw, json)
Hash identifier: Ef6yV8HsD5+deH+Ge5AsHfMnv1h6Bfn3lD6jjFlIgRU=
Subject key identifier: 54:57:31:FC:0A:37:A3:A5:68:99:8C:21:A9:03:ED:A9:AD:2B:06:83
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7973D1021A51184502BA65047E6B3C9C82CA4A4B
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/88de1b01-0f0b-4759-ade7-42cc37dcc08e.roa
Signing time: Wed 12 Aug 2026 20:03:28 +0000
ROA not before: Wed 12 Aug 2026 20:03:28 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:73:d1:02:1a:51:18:45:02:ba:65:04:7e:6b:3c:9c:82:ca:4a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:03:28 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=6eb56eb7b270540f426e6149f54f0bce80087489c36265c6ab5f8270c790f992, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:eb:72:19:a5:68:fb:88:07:3d:24:9e:74:
6d:6f:76:71:ca:4d:3c:7b:f6:2d:27:2c:89:00:14:
12:eb:7c:ad:93:2a:6b:c6:cd:de:d3:09:f6:4f:34:
b3:e1:ca:8f:9f:ae:dd:78:37:39:fc:57:43:9d:51:
99:08:ef:79:b3:bb:b8:24:8d:d5:e8:2e:ef:f5:eb:
dc:55:cd:0b:87:ad:95:43:86:a6:d9:c7:f6:4f:d1:
3a:ab:fa:a0:a7:d7:2e:70:db:9e:55:fa:85:84:fe:
ab:81:3f:9f:45:b5:1d:0d:33:b7:bf:e5:54:11:27:
e2:56:d5:e8:f4:37:d5:3c:55:36:5e:aa:c9:81:dd:
74:5f:e8:39:c1:a0:b2:9d:2b:44:2e:38:14:5e:e2:
43:9b:a3:9c:d2:50:54:f1:aa:db:24:95:20:ca:f8:
b1:51:24:3d:21:64:b2:95:b8:94:46:64:6a:cc:ec:
26:4c:60:36:92:a1:1f:45:6f:b7:99:8f:cd:56:55:
0a:69:e9:d2:e0:0a:e1:21:56:3c:0c:06:e5:dc:43:
f0:ae:5e:02:a9:a5:0b:92:55:11:44:f4:b8:8b:86:
37:89:bc:ee:ff:23:32:98:78:26:52:73:b3:10:bd:
1f:65:aa:d0:23:9d:fb:14:21:43:c9:95:66:03:a8:
a9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:57:31:FC:0A:37:A3:A5:68:99:8C:21:A9:03:ED:A9:AD:2B:06:83
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/88de1b01-0f0b-4759-ade7-42cc37dcc08e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.24.0/22
Signature Algorithm: sha256WithRSAEncryption
50:7f:01:d5:7b:89:05:c8:ae:f1:23:2b:64:95:c4:9a:9b:da:
88:d2:f5:0b:70:da:2a:ec:27:06:75:60:74:d6:66:9f:e2:31:
34:7c:91:49:f9:70:3f:7d:fe:3d:a0:46:ce:03:08:6f:1a:eb:
c2:18:4c:83:80:f4:08:16:12:b2:6a:a5:61:e1:96:07:72:34:
81:06:97:83:8d:9c:48:4d:13:b3:2d:6e:75:c5:95:22:a5:74:
d0:d0:a8:c2:96:74:58:54:f7:d3:02:28:1b:f7:14:d3:d4:49:
87:1f:65:6b:b6:dd:04:a1:87:17:f8:71:96:20:d9:d7:54:a9:
f0:7c:a9:94:8c:4b:05:96:cc:25:f9:1a:4d:00:ed:ea:9d:8a:
05:0d:bc:d3:1b:f1:46:f8:e5:db:64:ef:33:59:e9:f1:38:b0:
89:12:06:a6:70:6f:65:ae:43:44:6d:07:8d:1a:83:d7:04:0f:
b0:0b:de:a4:b8:d3:19:b4:65:ff:cd:fa:fc:30:ea:40:b3:eb:
f7:68:8c:86:e5:09:f7:96:64:68:c9:5a:a2:16:9f:43:fe:9d:
cc:d6:42:a3:d6:7f:ea:0f:46:8c:3a:72:f0:11:87:82:8a:2f:
de:de:f3:74:f1:b0:8d:e9:35:36:c2:86:32:56:9a:ce:78:ae:
3b:2c:c5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:09 2026 by rpki-client