Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a833bcbc-91ad-4e89-8666-86ec46002db6.roa
File: a833bcbc-91ad-4e89-8666-86ec46002db6.roa (raw, json)
Hash identifier: XieGGPp1IvYEBjKvCF6QHZia2BnyMFprabJiwsCEx90=
Subject key identifier: E7:8F:5F:58:BB:59:C3:55:7B:A8:69:F5:B6:D1:33:0F:EB:C8:15:9D
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 12521F0CAAE2191B7D3C0DA57B7533FAA5C8C91E
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a833bcbc-91ad-4e89-8666-86ec46002db6.roa
Signing time: Wed 05 Aug 2026 02:00:25 +0000
ROA not before: Wed 05 Aug 2026 02:00:25 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:52:1f:0c:aa:e2:19:1b:7d:3c:0d:a5:7b:75:33:fa:a5:c8:c9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:25 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=ceb531c2d2cb7d040f183dffb0e3ecaa8b65e316f15318ad9d9b2e15d15bf273, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:00:4b:5e:d8:ae:78:7a:6a:44:b8:f7:24:fa:
aa:39:ca:26:ed:66:ff:7c:0e:b9:76:da:e6:85:46:
1b:e1:aa:09:31:fc:b6:2d:ce:35:42:f1:bd:76:c0:
8b:0c:b8:4c:5e:7c:d7:05:f1:d2:70:f2:a7:47:a8:
d4:60:69:55:5d:f7:16:34:b9:b7:ec:59:fd:2f:6b:
79:b5:b4:aa:49:a9:78:3b:f6:d9:59:7a:1d:1e:03:
cd:bb:df:8b:15:1b:56:1a:ce:b7:62:51:0d:02:7d:
2d:68:07:ab:40:68:99:bd:f7:10:52:7b:c3:43:e9:
25:d9:ca:24:b1:2f:bd:f7:c3:8c:b5:91:68:0c:f5:
61:5d:2c:fe:db:34:76:8e:20:e8:e8:fc:26:04:12:
47:7b:ef:24:55:26:ed:78:63:c9:1c:81:e0:85:94:
bc:dc:e1:44:04:4a:de:b5:47:1c:6c:43:69:f0:83:
1a:fa:96:78:a4:7c:5a:f1:92:bb:e8:6a:54:ae:5c:
e5:aa:df:a0:52:78:e8:f0:e8:24:f8:80:79:bb:fc:
3d:27:0b:fc:96:53:31:4e:91:9f:ca:b2:51:2e:59:
54:fa:d0:22:fe:0b:76:d2:c3:96:13:db:bf:8f:cb:
55:15:f8:18:1a:bf:ca:16:65:19:c5:d6:ea:4e:4e:
e6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8F:5F:58:BB:59:C3:55:7B:A8:69:F5:B6:D1:33:0F:EB:C8:15:9D
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a833bcbc-91ad-4e89-8666-86ec46002db6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.142.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:72:42:0d:19:80:d6:07:97:9d:9d:72:06:69:eb:8a:44:71:
06:92:de:22:48:7a:07:ae:44:95:ec:90:8f:93:1a:24:88:74:
29:03:c4:72:d7:20:23:23:1b:c8:88:01:c9:54:86:87:59:1d:
a7:d0:df:f0:c8:af:56:5e:a6:57:16:24:cd:b0:a2:8a:4c:b9:
98:2d:6f:51:b9:1b:b9:d8:d2:5a:1c:e6:25:57:1a:a4:dd:0c:
5a:40:f0:1d:aa:b7:1a:16:9a:38:8e:42:61:cb:93:0b:ac:b1:
82:85:89:84:15:f5:52:ea:7e:2f:7f:85:b7:a4:1b:e4:17:6b:
4c:56:3f:05:5a:fb:7e:0a:d5:1a:f0:2c:dd:c5:37:7b:5a:f3:
92:f2:07:07:d4:46:72:b5:96:d5:49:3d:77:28:26:a1:a7:c9:
3c:ba:90:e5:e2:55:5f:1f:94:ed:72:63:d4:2b:b6:1c:bc:63:
53:3c:62:57:f0:d2:fd:d3:c0:1d:b3:bd:c9:5f:f2:d3:60:65:
e6:07:ae:8e:32:3f:5b:83:37:44:2f:2c:22:19:f5:a1:59:29:
61:e8:5f:22:20:ac:84:52:ac:8b:5d:71:c9:c7:7d:f2:3d:3d:
da:03:5b:0b:53:d1:08:06:ec:c0:8d:9b:65:9b:f0:05:65:ca:
22:74:38:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:27 2026 by rpki-client