Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8a032490-261b-441f-901c-528a8434b33d.roa
File: 8a032490-261b-441f-901c-528a8434b33d.roa (raw, json)
Hash identifier: Fuu0rwDdEc2TdOjxmH0fQMtbqDnPREQORpUiISZplbY=
Subject key identifier: B6:3C:9F:DA:64:C8:0E:55:F5:35:4C:A2:C1:EC:64:AA:2C:A7:49:61
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 57B302D7B118990C1D7204238533AEB0C6A07C2A
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8a032490-261b-441f-901c-528a8434b33d.roa
Signing time: Wed 12 Aug 2026 20:18:05 +0000
ROA not before: Wed 12 Aug 2026 20:18:05 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b3:02:d7:b1:18:99:0c:1d:72:04:23:85:33:ae:b0:c6:a0:7c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:18:05 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=c88fb95e72c53dafcc28965ebe58beb4fd3055dcceadb3fd6c051784c97ec289, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:3f:88:1f:77:a7:19:2e:cf:b7:ea:3e:df:
ff:c7:a6:fe:08:95:54:6e:59:5c:f5:64:ad:2d:05:
73:ed:85:b7:fb:81:2b:0c:8e:0f:6b:db:9f:1a:70:
23:cd:5c:18:dc:2d:44:1d:2e:69:d7:aa:19:ba:13:
ed:c4:ec:5a:b3:22:27:99:84:56:56:0b:2b:b0:54:
8e:71:01:46:80:6f:c6:d3:14:40:8d:de:b7:0a:51:
fb:b1:43:e7:24:f2:35:1c:32:3b:6c:d1:97:7c:81:
75:0c:53:45:3d:27:c0:38:3a:8d:03:7d:0e:28:f8:
45:00:0e:0f:3f:bf:fc:1b:a1:7c:01:55:29:6b:8a:
98:87:f9:54:c2:97:dd:73:e3:5e:5e:11:1a:37:78:
0b:06:15:f1:67:89:67:ff:98:bf:e1:1d:fd:ff:b0:
4a:9d:ec:df:62:33:8c:f2:f6:ad:30:b8:12:0e:50:
71:e8:d0:75:90:af:59:da:95:15:11:f8:9c:84:80:
14:86:88:98:e0:80:40:a8:27:db:db:cc:fb:d3:f8:
c7:4c:36:19:95:24:92:3d:15:68:45:bd:c2:14:f7:
cd:14:c5:67:fb:4f:3e:9f:51:d1:b5:52:d2:cc:f8:
b2:58:81:2a:a8:74:93:fb:52:d4:d0:99:07:b2:f4:
46:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3C:9F:DA:64:C8:0E:55:F5:35:4C:A2:C1:EC:64:AA:2C:A7:49:61
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8a032490-261b-441f-901c-528a8434b33d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.142.0/23
Signature Algorithm: sha256WithRSAEncryption
74:30:f8:81:a4:25:15:7c:ce:ff:43:6a:f1:3c:24:0b:0e:a4:
55:ed:36:1e:84:04:8b:89:af:97:25:36:cf:de:35:ea:33:45:
b6:4b:d9:ba:65:72:9a:88:2b:46:b4:99:73:db:a0:bb:4a:07:
fc:e3:3c:da:aa:b3:c9:91:40:b4:1d:27:86:80:34:f9:54:fd:
d0:44:8f:a4:54:37:92:64:c8:80:98:c1:f7:40:19:e3:3c:7b:
35:12:c6:44:cb:3e:b4:79:98:88:6b:0f:e1:84:c9:33:2b:81:
5c:fa:6a:a5:8f:d2:85:1f:45:7e:24:28:ad:20:3b:b5:4c:84:
4b:16:22:a7:4a:74:4c:50:6d:39:73:2f:46:bd:30:de:b4:00:
cf:4f:e6:f5:49:13:2d:d6:60:45:d0:79:db:0e:82:d7:42:a4:
c2:44:17:dd:da:a0:18:04:ed:78:90:d6:63:e9:78:6b:2c:8b:
aa:3b:36:d7:3c:12:7b:71:b4:ec:c7:fe:06:6f:d2:cd:18:fc:
d4:e8:e9:18:50:99:20:5e:70:c3:d5:8f:7a:d4:fa:cf:ce:3c:
14:c5:5b:fd:21:d3:bb:c4:4a:6c:75:b6:a9:6c:44:15:f0:4d:
8c:80:cb:c5:df:50:88:4e:05:cc:04:d1:7d:25:b8:2a:f2:23:
85:a6:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:23 2026 by rpki-client