Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9fc884bc-2b9f-4180-a386-f94e759f70bf.roa
File: 9fc884bc-2b9f-4180-a386-f94e759f70bf.roa (raw, json)
Hash identifier: Ab+8BrAhUKiDxogGXEnRKk0KdiHUspNgeQmW1OTxW9s=
Subject key identifier: FE:2C:CF:9B:FF:55:D7:01:EB:5E:5B:16:35:3C:30:A6:B4:51:7C:3C
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 41332433B21A5FAC349D3B5DA41C321B146DE1F3
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9fc884bc-2b9f-4180-a386-f94e759f70bf.roa
Signing time: Wed 05 Aug 2026 02:00:27 +0000
ROA not before: Wed 05 Aug 2026 02:00:27 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:33:24:33:b2:1a:5f:ac:34:9d:3b:5d:a4:1c:32:1b:14:6d:e1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:27 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=d7b870610df7383aac8aba393ad208817c41f2771340e69c10916c975c0a765d, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:8e:e6:54:17:4c:be:82:4c:b8:e0:7d:c1:
94:da:f3:77:c3:03:5c:92:29:7a:41:ab:1e:73:27:
56:40:d6:ae:5f:86:b2:85:d3:f3:e9:1d:c3:09:04:
5d:06:da:13:50:26:0f:f8:8a:80:f8:9f:c7:57:81:
03:05:2a:b5:23:5e:ff:f5:83:65:7a:63:05:dc:64:
bf:07:07:06:eb:db:d4:60:e3:70:7d:9f:69:32:b7:
59:0e:ed:57:b5:e9:b7:21:fd:92:b4:67:2f:76:9b:
60:21:17:3d:72:48:0b:b3:48:d9:8f:8e:af:60:23:
9f:8d:fe:8a:9a:d2:cb:41:cd:d0:be:8b:b2:fc:30:
6c:64:34:4a:9b:68:54:e7:15:51:86:e2:c5:bf:6b:
bf:ed:43:9a:53:c0:14:07:9d:5d:cd:54:fa:9b:50:
f2:05:02:ee:b4:ee:71:c6:ca:32:93:be:63:f7:18:
bb:b5:fe:38:84:46:00:c1:c2:1d:60:ef:9c:73:f5:
63:4b:86:36:4d:7d:d3:8e:8c:9b:ce:82:8a:5a:b9:
0f:e5:11:5e:34:de:86:11:f3:28:01:d4:1b:7b:fd:
9d:fb:1d:34:5e:f3:ff:64:56:3e:d3:12:05:8a:7b:
15:66:52:f4:2a:fd:0a:04:25:fd:1e:33:ab:99:5a:
bd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2C:CF:9B:FF:55:D7:01:EB:5E:5B:16:35:3C:30:A6:B4:51:7C:3C
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9fc884bc-2b9f-4180-a386-f94e759f70bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.31.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d3:ec:9d:11:1a:95:00:b4:74:9a:e9:01:9e:a8:e0:58:fb:
10:86:5b:1b:21:41:58:8e:30:e6:9c:af:41:31:5c:ea:d3:18:
4f:72:10:9e:36:00:95:a7:02:96:c7:8b:e6:98:1a:77:26:89:
86:87:c0:ec:85:79:9b:8f:aa:b6:bf:2f:26:7f:4d:5f:db:40:
32:15:c4:f7:aa:d6:99:0b:5b:42:74:59:49:3f:0c:b0:66:75:
8d:89:b6:c5:14:be:d5:49:83:33:8d:a4:dd:76:e8:d0:7d:d1:
03:15:3b:82:08:e0:59:04:99:0a:4f:1d:de:70:fc:ac:2a:d3:
1f:fa:2c:9c:53:ad:54:b5:d4:f0:77:6f:57:80:d7:33:79:f0:
0d:fb:14:30:f3:ee:60:27:5c:fe:27:99:4a:c4:dc:e6:aa:c0:
82:8d:40:6e:c7:2f:dc:be:c8:c4:d9:de:d2:9b:f8:3f:70:a0:
2f:d8:90:33:59:65:b4:1d:59:d9:2b:f0:2a:24:e1:f3:bc:a9:
54:aa:4e:f4:b0:bf:d2:ea:b3:d7:10:b1:1e:4c:b9:cd:42:7e:
02:c9:ef:c9:03:4c:6d:f0:96:bb:26:ae:9d:ae:bc:5c:5f:1b:
91:8b:23:4b:f6:20:cd:6e:c1:6d:d3:5a:24:91:34:b6:54:aa:
53:9d:6a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:05:11 2026 by rpki-client