Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b49d1b08-8855-432d-8be1-3a1bc8a72f20.roa
File: b49d1b08-8855-432d-8be1-3a1bc8a72f20.roa (raw, json)
Hash identifier: fyyv3ssvWETWPIeVTMQ893nsHHzqsTROXnXACut+Q7M=
Subject key identifier: E9:FA:CE:7E:72:1A:B7:2B:67:16:34:2A:FE:DF:DF:EA:B1:1C:24:3A
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 24A96085078D9DE25AE68DFA190A6C1CECE96521
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b49d1b08-8855-432d-8be1-3a1bc8a72f20.roa
Signing time: Wed 12 Aug 2026 20:32:22 +0000
ROA not before: Wed 12 Aug 2026 20:32:22 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.74.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:a9:60:85:07:8d:9d:e2:5a:e6:8d:fa:19:0a:6c:1c:ec:e9:65:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:32:22 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=b68446c26a05a38973c8c20bc1f8cd3c14c448a27538387f5f85ec39d5bad03a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a3:bc:34:91:33:99:96:b5:a4:fd:c2:99:cf:
ce:27:e8:16:5c:75:bc:fd:12:6b:25:95:86:3a:15:
79:6b:9e:48:00:32:66:f3:e1:e0:32:2b:15:d9:80:
5a:a7:e5:59:4f:9a:83:59:2a:23:bf:15:a7:ae:80:
cf:03:6e:a2:15:6f:98:87:ca:d4:03:14:86:8a:be:
95:24:93:fb:c4:95:e7:a3:56:1c:4a:de:86:d7:8c:
86:54:99:d2:95:c5:76:cd:89:22:55:86:69:2e:c3:
f7:ef:cd:74:e7:ee:ec:dd:f1:b8:3b:fe:a5:e8:8d:
06:fb:54:9e:1d:41:c0:0d:a9:b4:94:bb:9d:06:84:
c2:6b:b6:7e:14:79:82:21:13:eb:f6:9e:0c:86:d8:
bc:ed:d1:9f:99:48:4c:3f:7e:1f:a4:05:39:ac:73:
b0:53:8b:06:e4:1b:c4:b4:6e:a2:fb:c2:06:a6:c0:
2a:31:9b:52:8a:b8:bf:d4:1c:ce:b2:aa:1e:a7:ac:
1f:fe:c4:95:0c:e5:00:42:7d:f7:b4:a9:a3:91:9e:
a9:57:8d:da:d6:c7:7f:20:35:66:8b:60:50:24:76:
72:2a:51:4c:c2:47:20:68:1c:e0:d0:be:7a:24:2c:
4c:ad:08:1d:91:c4:3a:c4:14:98:24:04:ee:59:9f:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FA:CE:7E:72:1A:B7:2B:67:16:34:2A:FE:DF:DF:EA:B1:1C:24:3A
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b49d1b08-8855-432d-8be1-3a1bc8a72f20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.128.0/18
Signature Algorithm: sha256WithRSAEncryption
b6:42:ad:17:38:79:3b:bc:95:7f:2a:54:89:28:ec:39:ba:0e:
a7:ec:d1:de:c5:05:f8:f3:67:cf:e9:45:c8:9e:0e:e6:a7:ce:
17:61:3a:c9:24:c0:55:53:60:b4:02:14:d1:4b:6b:fd:1d:fd:
cf:10:71:08:ac:7e:48:4d:e8:84:f8:c1:18:3c:66:c5:5c:84:
94:93:c6:12:44:da:bf:5c:40:74:e0:62:75:a9:b5:8d:02:2c:
bd:1c:1f:d1:10:6c:53:88:61:a4:cc:fa:81:8a:65:ae:16:80:
27:e0:5c:dd:ad:d0:ed:a3:4b:e1:eb:25:71:1e:69:83:a9:16:
c4:fa:d6:c1:a9:06:f8:a0:28:d4:48:fc:42:7c:49:65:67:7b:
ff:17:ee:3f:56:aa:d4:9c:81:2a:1f:c7:33:94:bd:bd:f3:a7:
b8:e8:bf:6a:96:9d:bc:1a:50:d1:b3:fb:3e:dc:4a:a1:94:f7:
8b:d8:f3:67:c1:b6:c6:7a:95:35:c9:f5:70:b1:62:ea:1d:bf:
66:28:46:9a:10:56:3c:57:58:a6:73:8b:d0:5c:14:70:4b:8f:
51:98:8d:1d:7e:86:f7:59:8d:af:6f:43:7f:80:a5:56:62:f5:
20:09:b0:68:21:c0:a2:d7:0f:cb:75:00:0d:dc:0b:76:90:c9:
f3:40:71:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:26 2026 by rpki-client