Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/caf04ce0-0dbd-43ea-843a-a139a615d156.roa
File: caf04ce0-0dbd-43ea-843a-a139a615d156.roa (raw, json)
Hash identifier: IvQwJiPrJiWfovU3MXYESwxck6ERqe0IIUcRbdpmFOY=
Subject key identifier: A2:5A:FA:6C:60:DE:DD:66:D0:40:A1:96:72:3B:86:5E:03:3D:0F:B5
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 58F0C1617CF0B6B509D9C4DCF6ED228C4BB5AF19
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/caf04ce0-0dbd-43ea-843a-a139a615d156.roa
Signing time: Wed 05 Aug 2026 02:00:23 +0000
ROA not before: Wed 05 Aug 2026 02:00:23 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f0:c1:61:7c:f0:b6:b5:09:d9:c4:dc:f6:ed:22:8c:4b:b5:af:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:23 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=49a781deb5fd6c82ee972b623310919e46dd31b9cc5d30ae8524a92030c12ef9, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:1a:09:a3:38:ee:7b:64:e5:d3:38:f7:b8:
2a:14:63:81:ed:56:62:6f:16:86:51:8a:a6:94:38:
2b:ec:df:c4:16:55:0f:86:77:aa:17:c1:b0:9d:30:
fe:7f:9f:4c:eb:e3:ef:4a:df:53:b9:2c:1b:21:82:
bd:84:c0:28:6e:09:92:30:ad:57:15:ff:87:a6:39:
c8:77:cc:f4:b0:12:79:4b:ff:5a:1d:13:82:c9:39:
5b:10:a2:df:55:d2:35:e3:5d:ce:af:76:ea:9c:f0:
c1:58:62:d1:74:82:e8:69:30:d7:9a:58:6d:9a:72:
21:b2:37:0a:23:83:d5:c0:06:5d:8a:3e:7c:c5:2e:
02:ca:50:fa:44:98:41:2f:17:b7:fe:37:ec:f8:c0:
3d:c1:db:3c:15:92:a0:d6:70:fe:93:dc:9a:11:9e:
dc:88:b0:6f:77:0f:04:a0:40:fd:0a:41:35:1c:4b:
f7:6b:0c:8f:51:dc:e7:b3:60:ff:26:07:85:56:3c:
50:6c:26:5b:c4:e2:d9:32:6c:29:36:3d:f4:62:db:
fb:c4:5c:14:21:c9:2a:e3:e8:d3:5d:d4:ae:16:97:
0a:06:ab:25:61:92:45:2a:3e:f9:78:a0:c8:3b:c4:
8f:80:8c:a4:b0:9a:d2:9a:f4:a7:e1:eb:b6:5a:a9:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:FA:6C:60:DE:DD:66:D0:40:A1:96:72:3B:86:5E:03:3D:0F:B5
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/caf04ce0-0dbd-43ea-843a-a139a615d156.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.28.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:50:1c:f5:31:3f:b6:2e:7c:62:c1:25:19:46:9e:42:48:4f:
87:d1:83:07:63:a3:ff:45:af:38:03:e9:ce:a1:24:3b:b7:38:
57:54:36:e3:cc:53:4c:7f:f9:08:c4:bf:40:8f:54:3e:d9:34:
9a:33:72:6a:74:26:c8:59:72:91:5e:48:c9:19:1b:14:97:47:
97:96:f5:10:9c:dd:fb:92:12:75:45:34:d1:59:ba:15:5a:94:
f1:0b:23:a4:8e:41:7c:74:81:42:bc:0b:18:a3:d7:ca:bf:7f:
5e:6f:46:68:43:3a:fa:e6:50:6a:3d:12:26:38:6f:a6:63:3d:
c1:dc:ce:84:15:67:81:5b:3d:a5:51:e9:1a:a9:4e:65:6d:01:
da:20:ae:45:5b:d9:41:4d:9c:b4:30:70:f7:2e:a3:a1:eb:b0:
d6:8b:6c:fa:77:69:e2:37:33:35:e6:bf:94:84:f5:9b:db:1b:
b2:cb:6f:cf:c0:6a:79:cd:22:55:21:81:0f:36:be:4f:21:fb:
9c:e4:21:77:c8:26:7b:5a:e1:ef:df:66:88:77:5b:a8:c9:81:
48:dc:79:fd:6e:a0:f5:e0:6f:3c:7e:e9:59:96:6f:1c:67:23:
50:24:e2:89:30:cd:26:bf:83:e1:09:08:5f:cb:62:ed:94:01:
9c:3a:be:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:23 2026 by rpki-client