Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a833bcbc-91ad-4e89-8666-86ec46002db6.roa
File: a833bcbc-91ad-4e89-8666-86ec46002db6.roa (raw, json)
Hash identifier: B/eVASpIEtkU7/+gdfcvpUCgrdt0933YZi9IZVDIs6k=
Subject key identifier: 23:45:53:55:E0:C0:6D:9E:32:E7:25:5B:3D:2F:01:32:D5:4F:B3:E9
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1A245655A87FB966A9B2EA04BFA851606719CA4D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a833bcbc-91ad-4e89-8666-86ec46002db6.roa
Signing time: Sun 17 May 2026 02:00:04 +0000
ROA not before: Sun 17 May 2026 02:00:04 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:24:56:55:a8:7f:b9:66:a9:b2:ea:04:bf:a8:51:60:67:19:ca:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 17 02:00:04 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=2d8d2a01a855e5202d9358d9481a6934cdcbbf31ee2808a4a80bf3ce3595c6ff, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:a4:49:27:19:31:7a:8e:54:62:19:df:ac:
7a:bb:e4:93:72:2b:74:04:0c:f1:0e:98:34:42:0d:
86:a7:38:fd:2f:70:5f:d3:d7:da:ea:c4:c9:57:10:
74:c3:3e:24:7c:10:0f:ee:bc:5b:8e:93:4e:f3:80:
0c:5d:bb:12:c0:f1:2b:60:63:bb:8d:fb:9a:16:a2:
e4:1f:b9:28:0a:d0:98:59:3f:8c:a5:0a:a4:c9:cb:
fb:78:a7:66:e9:6a:2a:07:ec:f3:60:a4:25:66:87:
6e:f4:14:5b:e1:0e:58:85:35:82:46:94:d4:5f:c5:
00:b2:ba:ae:5f:b2:5b:8c:83:eb:ff:ea:c1:cd:f8:
f5:66:5e:3f:1e:13:fc:f9:2c:bc:ef:85:36:df:d9:
41:be:75:4a:52:63:d7:4f:00:d3:2e:01:c3:08:70:
07:51:b7:22:49:e2:ff:b0:0b:07:7b:f0:36:dd:4e:
5e:82:bd:f7:7d:41:65:9d:a6:ec:ff:06:d1:db:f5:
e6:c1:18:5e:6a:56:df:11:60:56:16:46:d9:c7:ae:
10:4f:94:04:2d:77:79:e3:1c:98:d5:ef:03:01:e6:
f5:e9:ad:93:b4:ae:b2:74:24:31:76:eb:89:80:41:
cc:96:45:31:96:87:83:d5:60:bb:46:9f:0e:a3:e5:
f0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:45:53:55:E0:C0:6D:9E:32:E7:25:5B:3D:2F:01:32:D5:4F:B3:E9
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a833bcbc-91ad-4e89-8666-86ec46002db6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.142.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:02:69:c7:fd:28:34:c9:b0:ae:0d:eb:14:16:21:f7:ce:fd:
74:5f:e0:6a:38:4c:df:f4:ef:c6:ab:33:5f:2b:c8:ef:c6:de:
79:45:69:46:88:9c:94:34:48:c9:e7:e0:e8:aa:03:71:a3:c4:
06:90:98:67:f3:09:7f:ba:91:ac:30:54:a2:ae:34:d3:36:76:
30:76:f8:ce:10:ad:56:32:b1:eb:3b:91:38:8d:1e:fd:b4:61:
2b:0e:5f:0c:82:7d:c4:9b:42:ba:cb:e1:6b:b6:d5:70:fe:fd:
4b:a4:47:1f:cb:40:6f:c7:e3:de:0c:fb:7f:7a:62:23:0b:d1:
2b:7c:e8:47:f8:37:5c:f8:22:f2:7b:7e:6e:81:af:07:eb:6d:
b8:b5:2d:25:90:4c:96:2a:35:24:e1:f3:a0:0e:3a:1f:c7:c9:
6a:98:49:b8:71:2b:e9:94:13:0b:95:9e:75:3b:c5:17:52:18:
b2:eb:9a:dc:e2:1f:fb:59:73:6b:95:af:35:5a:b2:b3:3c:11:
f7:98:d9:ae:0c:60:7c:09:9d:b8:fe:f1:f2:f0:34:93:61:70:
c5:10:b6:96:c3:35:d0:50:56:1c:2d:b3:1a:02:8d:1f:b2:02:
35:bc:0e:2f:41:a5:38:56:98:88:53:e7:b2:dc:f0:a2:c1:12:
a9:88:7f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:04:23 2026 by rpki-client