Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/cdd9a3d1-ae65-4307-aa79-4988b2ad61a3.roa
File: cdd9a3d1-ae65-4307-aa79-4988b2ad61a3.roa (raw, json)
Hash identifier: FzPNgR4NQKIfWkAOCLpjPLBwUjC9szZjBMCASFoDcoU=
Subject key identifier: A2:71:F5:01:1B:3C:7A:B4:1E:E3:03:A7:88:D1:28:49:5D:22:8C:E4
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5E12B842F0971E0B2BC39B6073C7BBE3BA6491A4
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/cdd9a3d1-ae65-4307-aa79-4988b2ad61a3.roa
Signing time: Wed 12 Aug 2026 20:32:23 +0000
ROA not before: Wed 12 Aug 2026 20:32:23 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.74.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:12:b8:42:f0:97:1e:0b:2b:c3:9b:60:73:c7:bb:e3:ba:64:91:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:32:23 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=86138243c4ea961c2b66b039205fba89a61e35c8f33134c31ea768a0daf99ebf, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:c5:a4:b3:32:5b:80:55:51:43:b2:cd:3e:
26:53:35:a3:20:20:36:31:2b:21:15:14:90:d0:c7:
90:72:14:4d:6c:05:ea:8c:8a:73:a3:67:f9:b2:07:
31:76:20:93:48:b8:c0:4d:4a:35:56:3a:d3:e7:e8:
66:2f:bd:25:2f:e7:3d:cd:1a:6e:c0:7f:72:92:ae:
7d:01:86:dd:e1:39:46:89:bc:40:57:74:04:89:81:
3d:3c:43:dc:1d:ec:1d:d3:07:1b:f0:d5:e1:85:94:
ab:aa:32:5b:9a:d8:0e:9c:89:a8:8e:97:94:b6:cd:
e6:2c:40:88:90:86:69:68:fe:83:5b:86:3b:de:d7:
36:33:ad:de:49:00:ae:2f:d7:76:6a:38:5b:c2:ce:
04:a3:ac:c2:69:15:3f:f7:37:a2:0e:d2:cb:14:85:
25:85:64:6b:1a:76:1e:75:d3:e5:65:f5:ed:38:fb:
5a:4f:c0:c4:29:29:d7:bc:a2:d8:63:8d:c1:da:66:
b3:5c:8c:d2:f3:a5:a9:f9:48:61:34:f3:69:e5:38:
f3:36:5a:8f:36:82:17:a2:53:d7:92:f8:7f:20:8e:
ae:bb:c3:f5:5b:a0:51:67:41:fb:82:78:fa:b5:cd:
91:f8:7d:61:4d:24:f7:51:ce:5a:d9:8f:71:bf:f3:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:71:F5:01:1B:3C:7A:B4:1E:E3:03:A7:88:D1:28:49:5D:22:8C:E4
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/cdd9a3d1-ae65-4307-aa79-4988b2ad61a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:a8:3a:ad:46:bb:b7:3a:1b:78:fb:d4:3d:62:1a:ed:16:2f:
db:b6:0a:a9:aa:34:fc:8c:8e:d2:57:92:39:fe:c5:9e:08:ef:
8e:41:4e:17:7c:8c:ed:5f:57:c7:88:62:af:8e:33:72:a8:73:
36:4c:18:02:0b:8b:b8:48:05:20:c6:c5:e4:62:28:58:38:c2:
3f:29:91:6c:42:3b:6d:21:1f:59:d7:42:0d:ec:3a:c4:8c:da:
a2:aa:36:db:57:77:1c:cd:2d:6e:14:5e:95:92:d6:56:25:64:
ee:f5:f5:d9:68:9f:68:a4:0a:e0:8a:a9:70:86:9a:f2:41:7f:
a5:dd:b2:43:da:17:2c:b8:d8:16:2d:9e:0f:45:30:14:88:60:
56:33:76:1e:8d:4c:19:6f:f0:e7:9f:1a:49:87:c4:a0:f2:9a:
ce:14:cd:23:36:0c:83:e5:03:2b:ad:19:76:2e:c6:39:c5:cb:
2a:a2:17:a1:88:b6:5e:4c:8d:c5:5a:29:5c:5e:fb:98:05:72:
a6:ef:86:5f:ae:76:02:b9:db:94:d8:e6:2b:5b:08:bc:e8:f7:
c0:5c:8f:11:6a:8d:51:dc:97:f3:2b:81:8f:5d:97:20:1a:c1:
82:44:93:01:60:bb:5c:1a:a5:5d:8c:79:fb:0f:1e:91:36:f2:
0a:ae:e8:2a
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUXhK4QvCXHgsrw5tgc8e747pkkaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMDMyMjNaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDg2MTM4MjQzYzRlYTk2MWMyYjY2YjAzOTIwNWZiYTg5YTYxZTM1YzhmMzMx
MzRjMzFlYTc2OGEwZGFmOTllYmYxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKVWxaSzMluAVVFDss0+JlM1oyAgNjErIRUUkNDHkHIUTWwF6oyKc6Nn+bIH
MXYgk0i4wE1KNVY60+foZi+9JS/nPc0absB/cpKufQGG3eE5Rom8QFd0BImBPTxD
3B3sHdMHG/DV4YWUq6oyW5rYDpyJqI6XlLbN5ixAiJCGaWj+g1uGO97XNjOt3kkA
ri/Xdmo4W8LOBKOswmkVP/c3og7SyxSFJYVkaxp2HnXT5WX17Tj7Wk/AxCkp17yi
2GONwdpms1yM0vOlqflIYTTzaeU48zZajzaCF6JT15L4fyCOrrvD9VugUWdB+4J4
+rXNkfh9YU0k91HOWtmPcb/zYwUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSicfUB
Gzx6tB7jA6eI0ShJXSKM5DAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
Y2RkOWEzZDEtYWU2NS00MzA3LWFhNzktNDk4OGIyYWQ2MWEzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNKMA0G
CSqGSIb3DQEBCwUAA4IBAQBvqDqtRru3Oht4+9Q9YhrtFi/btgqpqjT8jI7SV5I5
/sWeCO+OQU4XfIztX1fHiGKvjjNyqHM2TBgCC4u4SAUgxsXkYihYOMI/KZFsQjtt
IR9Z10IN7DrEjNqiqjbbV3cczS1uFF6VktZWJWTu9fXZaJ9opArgiqlwhpryQX+l
3bJD2hcsuNgWLZ4PRTAUiGBWM3YejUwZb/DnnxpJh8Sg8prOFM0jNgyD5QMrrRl2
LsY5xcsqohehiLZeTI3FWilcXvuYBXKm74ZfrnYCuduU2OYrWwi86PfAXI8Rao1R
3JfzK4GPXZcgGsGCRJMBYLtcGqVdjHn7Dx6RNvIKrugq
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:29 2026 by rpki-client