Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/970baa53-c4dc-4c2a-96d5-cb4107d1d8ab.roa
File: 970baa53-c4dc-4c2a-96d5-cb4107d1d8ab.roa (raw, json)
Hash identifier: kmMiHeO0dHtKOjf8Cb1szW8y3R9zxxlOnsU5WYGa1I4=
Subject key identifier: A0:46:BF:FF:C9:F3:BD:8A:4B:AD:34:ED:E8:17:2D:E2:C0:E4:E0:46
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 232D59B97791D901188F696AF508CB755C8DDB44
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/970baa53-c4dc-4c2a-96d5-cb4107d1d8ab.roa
Signing time: Sun 17 May 2026 02:00:29 +0000
ROA not before: Sun 17 May 2026 02:00:29 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:2d:59:b9:77:91:d9:01:18:8f:69:6a:f5:08:cb:75:5c:8d:db:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 17 02:00:29 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=4c6c2438f67b115c1860f5cc5dafe1cc4a2bc648ae1f140f376d3bf173075ba7, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:ca:41:88:ad:6e:73:e7:ac:44:e4:2e:0d:
bd:b2:d6:b4:b9:4a:6f:c8:68:79:15:53:fe:1f:32:
65:3f:ab:07:6d:f6:29:fe:76:63:20:58:08:18:8c:
a5:d9:43:7f:fd:2b:51:d9:22:79:da:92:ab:b4:8d:
7d:91:f1:93:8a:e5:a7:3f:76:be:6d:22:e8:76:1e:
a0:b6:fe:cf:f2:7d:cc:de:98:cf:5b:68:2d:b7:1d:
93:45:5a:fb:41:bd:5c:9a:ba:ff:3e:76:ef:8e:c5:
31:33:4f:8e:44:94:68:eb:fa:e2:7f:13:f2:b9:e4:
d3:aa:63:e5:d7:e2:ae:2a:78:91:cd:30:a9:47:c0:
ee:3e:db:31:60:dd:93:30:26:c4:32:03:b6:f6:fb:
41:55:74:7b:6d:d3:f0:fe:a7:ec:ee:2b:fe:8c:4f:
27:24:90:d4:9b:19:4d:86:2e:e7:c3:18:27:03:a8:
84:57:82:1c:7d:94:c6:69:83:31:ea:44:17:bf:5a:
19:b2:b8:43:57:09:fd:b1:89:fb:0c:dd:33:17:8b:
c3:ea:43:a9:39:bc:51:02:8c:e7:d1:0c:92:f4:32:
72:5f:45:4d:ba:b9:4a:7d:db:fe:0f:1e:17:5a:a2:
f9:a2:4e:a2:4b:08:35:4f:bc:b8:a0:eb:43:d6:b9:
09:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:46:BF:FF:C9:F3:BD:8A:4B:AD:34:ED:E8:17:2D:E2:C0:E4:E0:46
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/970baa53-c4dc-4c2a-96d5-cb4107d1d8ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.16.0/21
Signature Algorithm: sha256WithRSAEncryption
76:5b:df:42:5a:54:72:7c:64:0a:4f:90:c3:32:d0:ec:f3:59:
b2:b8:9c:7d:bb:25:9b:c8:06:a8:b0:1d:5f:66:13:86:4b:ec:
da:c9:82:c8:60:eb:3f:f0:ad:dd:e8:8a:2d:6d:95:a3:f8:11:
28:15:f7:bc:87:19:0e:d5:08:43:cf:a4:9c:79:58:59:d3:7f:
5e:0c:d3:8e:8d:f6:7d:e1:a2:a2:ce:80:7b:ce:be:25:7d:44:
f9:34:ae:75:e1:d7:55:0c:31:4e:50:8b:0c:1e:aa:a1:b1:b0:
62:c9:d9:07:e5:1e:f5:e2:16:e0:50:a6:25:b7:fc:64:f0:27:
8d:7c:18:24:93:38:4d:a5:21:0a:f9:39:a7:83:e9:47:10:a4:
3e:c7:29:c5:99:f3:22:8a:02:32:2f:3b:1c:b1:96:4b:09:c7:
ed:af:3c:b5:ab:a9:3d:bb:d2:09:49:cb:c4:dd:52:99:5c:83:
6e:3c:58:21:18:98:df:a8:14:d7:25:f5:08:ea:9c:84:c5:9f:
59:03:f4:b1:e6:19:db:33:53:fc:ce:a8:19:f2:70:4c:70:93:
fa:c8:52:2f:62:64:2c:32:16:6f:63:c0:18:ef:cd:90:c6:77:
04:57:0e:66:f4:f6:c0:58:43:96:0d:9d:bc:70:fa:d8:91:7a:
c2:99:d9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:04:24 2026 by rpki-client