Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a2a38309-dc8f-4fea-abcb-43fd0ba79d30.roa
File: a2a38309-dc8f-4fea-abcb-43fd0ba79d30.roa (raw, json)
Hash identifier: 8wh2hXwrRyNlR89552vRdlilrjaJOfYiBKT8zaY7MX8=
Subject key identifier: 0B:CD:71:CC:28:F5:4D:73:05:5D:56:20:7E:F2:DA:35:39:38:31:88
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6A78EB96A4088A78604FB51958401752B2305B4B
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a2a38309-dc8f-4fea-abcb-43fd0ba79d30.roa
Signing time: Wed 05 Aug 2026 02:00:08 +0000
ROA not before: Wed 05 Aug 2026 02:00:08 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:78:eb:96:a4:08:8a:78:60:4f:b5:19:58:40:17:52:b2:30:5b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:08 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=344ecf72d85a2e9c0c7fc1edd27251cea86853d06588eb19355deea23a166bba, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:20:d6:64:cb:7e:31:68:95:60:4c:87:48:
4d:4b:70:e8:c2:1b:74:ea:d9:57:1e:f3:04:98:ba:
c6:da:8d:51:8a:59:db:c5:72:fa:3d:8f:f5:83:46:
91:65:93:c2:e4:40:ac:e1:52:1a:ee:f9:c8:1d:3f:
a5:da:fe:16:19:14:95:47:b9:f7:56:e2:e0:5f:ad:
39:12:25:56:5c:71:db:bb:f2:c7:a4:7d:b7:0f:e0:
2e:e5:b7:0f:9a:1d:8f:50:3b:09:ed:2b:c5:08:3c:
e4:7d:81:1a:44:7a:2e:f2:41:de:37:bd:3b:75:bf:
bd:79:60:ab:85:ea:da:69:19:88:a8:59:4f:e0:7c:
4e:be:f3:6f:f5:4a:0a:f0:27:24:6f:13:95:88:87:
aa:c7:48:01:3a:67:c8:70:0b:f4:07:08:b4:57:e5:
ad:e3:8f:19:b2:8e:98:f2:aa:39:df:ff:e6:c6:06:
b2:7d:2b:68:b9:53:51:02:a5:64:31:be:d2:65:1b:
3c:b4:5e:02:23:7b:3a:6f:eb:c5:c2:3a:16:dc:2a:
30:dc:80:33:0a:ad:7f:b9:5c:92:db:44:7f:2c:32:
2c:e3:fc:7a:65:4b:42:48:43:13:3b:fb:d9:a4:bb:
18:0e:90:20:32:2c:a2:80:d8:37:f6:2e:d4:75:07:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CD:71:CC:28:F5:4D:73:05:5D:56:20:7E:F2:DA:35:39:38:31:88
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a2a38309-dc8f-4fea-abcb-43fd0ba79d30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.128.0/22
Signature Algorithm: sha256WithRSAEncryption
94:a2:07:57:54:f0:90:66:a5:f8:aa:0d:3f:ce:34:0b:7f:fd:
b8:16:1f:82:6a:07:f4:0d:8d:23:87:df:3c:b1:ad:69:42:6e:
37:cd:fe:ee:d1:4e:8e:a0:db:dc:fa:69:14:61:8d:66:6e:58:
2b:de:4c:59:d5:19:1e:c9:e6:d7:1f:6c:99:ed:80:cc:69:6f:
65:3e:4c:f2:b6:96:33:99:f5:21:da:0e:8d:b8:6b:d3:0b:31:
9e:59:4d:1c:f3:ac:3a:7a:a6:dc:07:0a:bf:12:f4:f8:a3:8f:
69:7a:54:16:e5:df:9a:02:da:3a:b3:ec:d6:d6:ea:29:1a:ef:
46:f3:43:15:a9:1f:38:bf:60:1c:f7:60:01:2f:f7:7b:07:b1:
78:4f:6d:f8:9b:7d:ee:e9:b5:fd:e0:6e:bc:fb:6b:5b:a2:d6:
78:e4:e5:46:55:f3:33:0c:e1:7d:8b:f8:30:ae:da:ef:34:a7:
be:e1:d6:73:09:78:61:2a:1b:9b:90:fb:cc:8e:f8:18:e2:d8:
6b:98:4f:d1:65:b4:e4:cf:4c:04:82:02:8c:60:f1:d5:d1:7f:
07:89:9f:b3:1e:8a:46:0b:60:fe:38:65:ee:5c:f4:dc:fd:50:
b2:c2:6b:d7:e2:57:b9:5c:23:e1:f6:af:03:fe:d3:81:1b:50:
ed:34:0f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:30 2026 by rpki-client