Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/913f508a-6669-4aae-b87b-35989f3889f0.roa
File: 913f508a-6669-4aae-b87b-35989f3889f0.roa (raw, json)
Hash identifier: h3mtELlXc7k8Gmhiv4Evw8hqhO3EvFtX1qPBwNXcnG0=
Subject key identifier: 96:0C:57:3B:C2:59:60:04:7C:A1:4E:C8:A1:F6:CF:BB:2F:C5:72:48
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 0E366537F19F7CCD0D229FBE984C6BE0D84DEF04
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/913f508a-6669-4aae-b87b-35989f3889f0.roa
Signing time: Thu 02 Jul 2026 00:00:36 +0000
ROA not before: Thu 02 Jul 2026 00:00:36 +0000
ROA not after: Wed 30 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:36:65:37:f1:9f:7c:cd:0d:22:9f:be:98:4c:6b:e0:d8:4d:ef:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 2 00:00:36 2026 GMT
Not After : Sep 30 23:59:59 2026 GMT
Subject: serialNumber=b291bbd5d80474cd2ec9948cde6b33e25c2492b06bf3c4f9342cf96fc7adafa2, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:da:a0:26:db:33:0e:5a:ca:ad:52:8c:2b:
bd:77:2c:bb:a8:51:40:e7:39:0a:38:73:d9:93:03:
30:36:55:24:c6:77:22:fe:fd:3f:e1:22:4a:cb:1c:
84:d3:31:79:cf:98:ea:e8:8d:7f:ca:ce:99:09:1d:
f9:25:b2:21:7f:6a:f3:68:40:c4:26:f5:34:1d:7f:
6e:d8:a6:47:98:3f:e1:aa:b8:2b:04:7d:be:fd:0a:
50:04:3c:14:d3:43:45:8e:93:a8:b3:f6:93:37:59:
06:fb:e3:da:b6:5d:de:41:1c:86:19:4f:e9:15:98:
34:92:38:5b:36:4e:91:9d:49:63:ac:6c:56:55:69:
26:61:67:0e:29:72:3f:5a:1a:e2:8d:40:12:b7:8f:
90:7f:59:7d:71:23:6a:cf:cd:58:2b:3b:3a:02:74:
27:01:87:1f:55:e5:a7:5f:55:43:a5:e9:7c:36:33:
5e:f9:d1:52:49:e6:96:55:c7:e5:3c:40:67:af:a9:
27:0a:74:1f:86:bb:a3:eb:83:59:00:42:4f:51:02:
63:66:b9:10:24:7d:6b:d5:e3:a2:af:97:2a:23:2e:
9c:00:05:c2:77:64:e5:9e:fc:5f:82:d6:6a:eb:d3:
54:0e:cf:aa:fa:15:bd:1c:e4:69:dd:9a:cb:a3:35:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0C:57:3B:C2:59:60:04:7C:A1:4E:C8:A1:F6:CF:BB:2F:C5:72:48
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/913f508a-6669-4aae-b87b-35989f3889f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.251.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b8:81:50:b3:5a:0e:47:34:1c:ce:5c:63:b2:ae:e6:17:e7:
22:81:c9:f9:0a:c3:01:30:88:92:0d:3e:f5:a3:93:45:4e:74:
bf:9d:3d:d7:b9:ab:d2:f2:65:a0:1d:de:3e:6f:0e:a3:44:cb:
52:59:d2:e8:3b:92:89:a9:ec:cf:eb:bc:99:e6:1c:76:34:f6:
a9:1f:d9:e0:54:74:42:e9:3f:46:08:79:27:54:ef:17:46:5e:
65:0a:f5:bc:2a:62:c1:ba:fa:c3:b3:77:42:7a:86:09:43:71:
26:08:bc:70:b1:ea:c2:d7:16:41:27:c4:0f:70:48:59:4c:3d:
a0:04:52:5c:c4:cc:68:e7:e5:06:15:68:2d:fc:52:92:8f:71:
1b:bf:c8:02:e2:81:04:c5:af:a9:01:ee:a2:15:cf:26:cf:c6:
7a:a4:3a:d9:40:40:41:eb:c0:85:34:e1:82:5f:90:27:9b:f4:
3d:2b:fa:c1:c5:2b:bf:03:af:c0:89:0a:b5:b3:c2:f5:de:ba:
c9:56:61:f9:42:69:d2:55:c4:11:ee:dc:c5:3a:c2:80:8d:24:
92:04:ab:dc:cd:91:7b:09:39:29:3d:49:a4:32:03:d1:a5:a9:
34:0a:27:f5:cb:52:a1:98:62:03:5c:64:cc:40:ca:24:dc:f0:
b1:a9:53:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:05 2026 by rpki-client