Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/930b4969-192b-4733-9603-57a0cea2c42f.roa
File: 930b4969-192b-4733-9603-57a0cea2c42f.roa (raw, json)
Hash identifier: AlmZUPgDNX7QdRv9PILRF2pPN9NIF/vbf57ARZD0TgI=
Subject key identifier: 9A:66:AF:CA:36:E9:81:4D:E0:E0:18:67:D3:CC:4E:81:BF:A7:DA:85
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 69E5C8985C814F49F23CB8FB339C01471E837B49
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/930b4969-192b-4733-9603-57a0cea2c42f.roa
Signing time: Wed 12 Aug 2026 20:03:29 +0000
ROA not before: Wed 12 Aug 2026 20:03:29 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e5:c8:98:5c:81:4f:49:f2:3c:b8:fb:33:9c:01:47:1e:83:7b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:03:29 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=6436613d5d701f92c98fe83f560a8e75c9fe223e2740621f0f01a8986c798807, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d5:b5:e3:8d:17:bb:61:15:1f:8f:2e:d6:75:
9a:2a:b2:05:b7:49:a8:9f:9b:62:8f:7d:6c:b9:36:
dd:19:62:d0:82:f3:10:06:cf:1c:90:43:f3:77:b1:
e1:2a:2e:9d:55:59:5d:ae:4a:7d:ab:66:10:c0:5b:
74:02:19:56:4c:26:0f:e8:a3:92:75:dd:9a:2f:0d:
ac:00:f4:66:b3:19:b9:b6:38:75:25:c0:79:23:f7:
4f:a4:f9:0c:ff:3f:38:da:5d:a3:41:ae:50:1f:70:
09:f3:71:18:f0:e7:d6:25:b4:15:ba:b5:5a:78:77:
4a:35:1e:ce:62:e5:34:38:27:9f:45:2e:9b:34:e1:
4f:57:1e:dd:46:97:d3:1f:b1:7b:3b:1d:97:d6:65:
62:08:27:bf:40:08:02:02:3e:08:e1:a8:e4:92:93:
13:c4:10:f7:99:fd:33:f6:a3:a1:32:61:79:71:31:
8e:d4:6b:35:71:29:12:85:87:fe:67:f7:8e:da:6d:
e6:3d:6e:87:ff:8a:46:cf:09:5c:b2:b2:fc:9f:89:
61:c2:6c:11:81:8e:d5:a1:11:8c:1f:5d:17:93:53:
7c:ce:2b:a8:f3:fc:e5:e4:dd:ef:dd:62:32:b3:4c:
3e:05:7f:a2:51:c2:dc:25:fd:d1:e0:df:24:a5:8d:
bd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:66:AF:CA:36:E9:81:4D:E0:E0:18:67:D3:CC:4E:81:BF:A7:DA:85
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/930b4969-192b-4733-9603-57a0cea2c42f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.30.0/24
Signature Algorithm: sha256WithRSAEncryption
70:9b:df:c9:d5:7b:26:e4:90:86:84:39:1f:44:b5:51:a2:88:
3e:1c:b7:d0:b8:c4:c7:ae:b7:b6:67:15:7a:96:ed:97:d4:a7:
e3:6f:33:a6:a4:d1:0b:5e:61:0b:75:76:4f:16:36:55:61:4b:
7e:1e:27:90:2d:44:5a:7a:bf:b1:e0:a5:be:e7:68:21:63:3b:
c2:26:90:8a:57:af:d3:a3:30:2c:aa:67:c7:ce:67:cd:9a:b6:
08:58:be:c2:77:ef:7c:00:1e:cf:0e:b6:80:9e:eb:8d:4c:42:
09:c7:e3:21:14:38:de:88:3a:c5:8b:d6:ed:72:00:61:51:20:
84:16:27:b5:7b:48:4e:3f:64:df:32:3c:af:bd:63:85:15:2f:
fb:c8:06:d7:2c:d8:3e:bb:62:3e:58:f6:6d:dd:35:d7:97:d7:
54:d1:a3:1b:96:e6:b1:f9:1a:cd:79:0c:61:a7:dc:59:b6:bd:
3c:4b:62:bf:f8:52:6d:76:02:57:99:69:d6:9c:1e:cc:9d:f1:
fc:2b:dd:8f:4d:53:1a:ba:03:02:91:90:82:17:d2:8e:7d:c7:
79:3e:1b:a9:0d:b6:9b:8d:4c:12:9b:7f:37:70:49:40:66:9c:
a9:c6:55:4f:01:83:fa:b9:32:2a:41:a0:a7:c4:37:e5:ef:6d:
59:6f:70:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:24 2026 by rpki-client