Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ca2d1388-0504-4952-8d37-26d8e2788dc5.roa
File: ca2d1388-0504-4952-8d37-26d8e2788dc5.roa (raw, json)
Hash identifier: kbP42wEmeEhxHVnKqKxhmCS/s6pQN9C7d6ue9l+qymo=
Subject key identifier: E7:7A:FF:2D:3F:34:6F:9B:08:D6:C7:76:D1:28:E5:38:4D:9D:69:4B
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2C202877A3F9D1E2A758D578EEA116CF2279463A
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ca2d1388-0504-4952-8d37-26d8e2788dc5.roa
Signing time: Wed 12 Aug 2026 20:03:28 +0000
ROA not before: Wed 12 Aug 2026 20:03:28 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:20:28:77:a3:f9:d1:e2:a7:58:d5:78:ee:a1:16:cf:22:79:46:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:03:28 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=ce2023975321464683dcb1ee30e4ef931bb76d0a13b37cd184fa3dfc7c2ceba8, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:cc:56:6e:45:11:e5:bf:30:5e:40:4d:d9:
08:41:a5:8e:f6:c3:be:62:d4:f9:e1:39:bb:f2:4e:
09:73:7a:09:23:29:a6:81:28:1f:d3:70:f4:33:37:
4c:34:8a:c0:d3:fb:35:cf:54:6a:af:a2:2f:ae:6d:
de:00:b0:62:69:c8:50:c5:e7:be:75:43:37:7d:00:
44:6d:15:23:65:ee:45:b1:46:be:ba:5c:67:eb:04:
e4:0d:62:c9:12:6e:d5:f4:6c:b1:c0:8b:f6:8f:49:
10:6f:f8:be:25:7b:26:e7:fe:6a:2a:38:fd:a3:0d:
9c:12:e5:bc:86:17:f3:10:85:7c:3b:ed:83:e3:0a:
99:0b:db:d3:ce:44:a1:4e:ad:dd:fc:73:c3:d9:91:
0e:8f:41:e5:b7:77:6c:a7:c1:0a:b0:8a:d5:88:fd:
95:fa:43:80:a8:c7:4b:ef:f9:ab:e2:9e:4d:f8:aa:
f2:03:08:e6:4c:77:b9:9a:af:c8:8e:82:43:13:1a:
a9:88:48:5f:3b:a2:69:50:9b:af:97:49:f7:e5:0d:
2c:56:d4:40:81:bc:da:e1:9e:bb:c3:43:6a:5e:1d:
68:27:5d:11:ec:61:61:d7:2d:92:1a:08:12:d3:92:
ae:0d:9b:c3:05:24:7a:ea:c7:3f:0e:e2:f1:29:a2:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7A:FF:2D:3F:34:6F:9B:08:D6:C7:76:D1:28:E5:38:4D:9D:69:4B
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ca2d1388-0504-4952-8d37-26d8e2788dc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.16.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:b3:6c:3f:a9:ed:4b:fc:39:bb:92:de:bf:da:c3:47:77:66:
f4:58:3b:e0:37:90:bb:c0:9c:13:5e:1b:7e:36:52:e6:47:eb:
ba:3f:30:12:b9:29:6d:aa:71:d9:f2:a2:56:64:94:24:8b:84:
3a:62:ff:fd:6c:57:71:2e:0e:35:b4:8c:d7:fd:df:b8:65:9a:
5b:bf:61:13:d5:89:39:df:07:34:ed:1d:95:9d:97:c5:23:fb:
0e:09:7f:52:10:c0:3c:59:f6:ba:23:cc:3c:3c:af:87:d2:dc:
54:84:8f:87:f9:e6:d6:6c:eb:d3:3d:c2:1e:3a:a9:fb:fc:20:
80:b5:08:1f:9c:7c:20:15:1d:c2:4f:83:f5:70:c2:3a:87:09:
5b:75:aa:de:85:62:64:2e:ae:6f:55:e0:19:fe:72:87:e6:3c:
06:9c:3d:57:a9:ec:60:65:48:d9:b5:42:e6:82:1c:c1:1f:03:
9b:fd:cf:4e:82:ac:a9:bd:96:9f:e0:59:c9:8e:9c:e3:33:6c:
86:f0:e8:ed:33:f1:42:95:4d:38:fd:f6:54:07:b3:04:a7:db:
24:b3:0e:4a:8f:d3:7a:32:32:4b:36:86:c7:80:8f:cc:c7:3d:
18:4d:b0:eb:eb:40:a9:30:0d:e5:2e:3a:cf:00:4d:b9:a1:e5:
dc:1f:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:26 2026 by rpki-client