Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/963d0817-7ee2-4313-813f-2c9c7347b192.roa
File: 963d0817-7ee2-4313-813f-2c9c7347b192.roa (raw, json)
Hash identifier: QHFIytK8sPGghx6vP2VcW6LLcY+k7ecHIvxJuS1Ybro=
Subject key identifier: 46:B6:5C:FF:C8:0D:8E:87:29:29:CE:E5:D5:38:85:90:8B:E2:00:CC
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5FB2219AC02F664F708B8A57C3926D4AC2234BB3
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/963d0817-7ee2-4313-813f-2c9c7347b192.roa
Signing time: Wed 12 Aug 2026 20:18:08 +0000
ROA not before: Wed 12 Aug 2026 20:18:08 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b2:21:9a:c0:2f:66:4f:70:8b:8a:57:c3:92:6d:4a:c2:23:4b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:18:08 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=5a516e3b5e9a0535affe14e7cadc0117c3004f7abeb256424403707bf6079d99, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:90:9b:7d:fc:e1:0c:a6:0f:7b:59:a6:ec:
7a:c9:43:3d:4d:e2:61:6b:95:26:94:8d:e8:6b:33:
2a:6e:bb:7b:fe:a9:5f:f5:2b:b2:53:59:e6:a0:a1:
da:10:96:87:a0:21:f2:11:7f:ae:2c:c5:92:e3:32:
05:56:3d:fe:3c:71:8e:cc:d7:85:e8:60:4f:4c:45:
71:ee:89:59:fb:d5:86:b2:25:eb:10:d5:f1:8e:e6:
9f:42:3b:78:72:a0:89:a1:c0:8f:9f:45:6d:23:a5:
a2:9a:38:c6:30:c0:87:82:77:25:33:37:04:4b:57:
9d:94:c6:83:a2:2a:63:ad:a4:0d:58:b5:f5:d5:ac:
45:2e:f0:97:b8:29:cb:3f:cc:03:15:a7:ae:e0:80:
cc:93:b7:57:4a:2c:73:6b:f4:97:1d:ee:26:36:54:
80:a2:cf:7c:22:92:95:be:d8:92:5a:1b:fa:d7:65:
33:cf:26:ef:c6:8c:60:5e:74:a0:49:02:6a:4a:06:
6f:d6:f4:e7:0f:8f:e7:26:52:f5:19:e5:27:65:de:
64:79:77:62:ec:e2:de:6a:21:65:6d:65:79:10:cd:
42:66:fc:35:88:71:f1:f3:74:70:f5:6b:eb:69:11:
78:4c:00:74:b1:65:25:f1:38:21:ba:8f:a2:44:93:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B6:5C:FF:C8:0D:8E:87:29:29:CE:E5:D5:38:85:90:8B:E2:00:CC
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/963d0817-7ee2-4313-813f-2c9c7347b192.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.128.0/17
Signature Algorithm: sha256WithRSAEncryption
58:5c:bf:7d:ec:47:9c:3d:4e:36:71:94:20:37:f6:22:b1:65:
e2:42:21:ae:2e:84:9c:ff:b0:76:e9:e3:28:13:08:c5:ae:9a:
4b:b5:4d:77:cd:98:61:ff:dc:d3:39:64:2e:18:7b:50:a0:a7:
4e:82:d4:82:60:b4:14:ec:3e:91:99:97:63:fc:de:e8:8c:4d:
0f:7a:b1:81:26:d1:c9:21:73:24:11:a1:3e:05:27:d4:66:8c:
a4:73:3a:3e:de:7c:ed:ac:b9:c8:17:31:4c:8d:2e:99:97:b1:
cb:81:9f:57:5c:d7:3b:0c:65:e9:e5:52:dc:15:ca:e5:c7:e9:
85:7a:5e:f7:0e:24:91:bc:74:24:ce:4e:0a:dc:c9:c5:53:17:
17:07:8c:89:a3:2c:c7:d8:0b:1c:9f:17:f4:81:8f:85:a6:07:
fa:c2:2d:52:bf:d9:93:ef:e9:1d:fe:e0:85:b9:32:0e:35:b7:
f1:07:5f:c5:e3:f2:ea:4c:fa:d9:51:c5:dc:a9:72:50:ce:98:
3c:1a:06:03:cb:8a:71:6e:07:84:88:a8:e5:27:33:b1:86:54:
f4:6a:ae:53:09:91:d4:2f:43:a6:16:21:42:2e:37:20:86:d0:
2d:5a:a4:0a:fe:7d:f8:1b:b6:8c:5a:0d:e9:b6:2f:b1:60:43:
11:7a:00:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:09 2026 by rpki-client