Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d2d2a245-8294-4368-91fd-afb707c56b2e.roa
File: d2d2a245-8294-4368-91fd-afb707c56b2e.roa (raw, json)
Hash identifier: dsVq7MuJgRN5Ad8BzHPZKxqSInGXf0cc4se+yk8uE7g=
Subject key identifier: 0D:E7:98:45:A9:5C:EE:93:CB:83:1B:B7:9F:71:FE:6D:B3:3D:E8:EB
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 66FF2DB77736E6B49B151468BC2C6A31E46DA35D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d2d2a245-8294-4368-91fd-afb707c56b2e.roa
Signing time: Wed 12 Aug 2026 20:18:06 +0000
ROA not before: Wed 12 Aug 2026 20:18:06 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ff:2d:b7:77:36:e6:b4:9b:15:14:68:bc:2c:6a:31:e4:6d:a3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:18:06 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=17b63418fa21ec2ad400a0da9955c628568486e07b863265f78349b76a209613, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:68:0d:b3:c2:5f:37:7f:4b:9e:1d:f3:89:72:
7f:75:10:37:65:19:13:49:cc:1e:3b:ef:0c:ee:d5:
eb:c5:da:64:67:7b:5c:64:72:c6:7a:7d:be:da:aa:
f1:e0:02:1c:66:f1:2b:2b:28:ce:f3:4e:81:8f:0a:
9f:50:ad:c6:11:18:b0:ac:3f:03:f1:d2:f1:e7:6e:
9d:36:5d:94:e0:b3:33:19:c1:fa:03:04:c2:a8:ef:
1d:d0:1f:23:05:c4:80:02:95:7a:1c:22:d2:f0:dc:
e2:92:a3:97:77:0b:70:f4:29:a8:1d:bb:a4:80:27:
66:ab:98:34:30:68:7f:be:e8:2d:00:0c:51:ce:6a:
a2:e2:60:3f:0e:f2:ea:6f:b4:d2:3c:22:a7:0a:9d:
76:fe:44:e9:4b:a5:d0:63:6f:1f:f0:11:34:24:51:
61:59:8e:09:94:d8:48:8a:28:ce:f1:52:56:5a:0b:
22:bc:de:47:9b:3c:4a:1d:14:01:e8:d6:36:73:5c:
be:b6:68:fc:d6:14:3c:f6:1b:77:08:db:38:5a:86:
42:a9:94:0d:3f:b5:b2:f7:55:2e:e8:63:79:58:0a:
e7:c5:7a:70:1b:d9:f7:14:a7:38:54:8b:9c:72:85:
8f:f7:cd:4e:00:67:12:d0:50:69:76:60:bf:1d:3e:
99:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E7:98:45:A9:5C:EE:93:CB:83:1B:B7:9F:71:FE:6D:B3:3D:E8:EB
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d2d2a245-8294-4368-91fd-afb707c56b2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.133.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2e:cb:cf:79:71:37:9b:ad:b5:c2:1e:9a:78:bc:67:af:bf:
b6:a0:6b:11:fa:e1:4e:cb:31:3c:92:ba:24:ba:fb:71:f3:95:
cc:a2:f0:85:86:08:54:d7:25:f5:10:1e:ab:18:3c:39:a7:9a:
91:c7:37:1a:c8:69:6f:2c:0c:79:b4:e0:40:64:bd:05:eb:e6:
79:2f:64:4e:64:a7:59:ec:19:d3:bb:c7:f6:31:0c:a0:4b:c9:
27:8b:73:e2:8a:42:96:69:45:8f:1e:db:0d:55:67:11:29:07:
9b:8e:c7:c4:72:27:5e:66:9b:e8:b9:8c:39:ea:17:38:9b:51:
70:45:ec:04:ce:6a:27:56:a0:9d:4d:e2:2a:cd:80:ea:7e:7b:
88:e7:14:2b:55:e2:80:fc:39:c8:11:84:90:a3:34:d4:24:1e:
c5:79:92:3c:b1:fa:c9:3c:e1:1d:e7:91:28:f3:2b:fb:b4:b0:
14:ea:a3:5e:6a:58:c2:99:c7:38:6f:d3:b7:70:4d:6c:cb:46:
44:a0:fa:52:75:ba:b6:ba:d6:5a:ad:56:99:22:c5:06:e4:ef:
45:39:d4:f7:b2:a8:16:e5:36:7f:81:fb:6c:ff:fd:4d:8c:f8:
b8:12:11:52:00:20:aa:6f:ea:51:13:84:ed:32:0a:e7:df:4d:
8f:a6:ad:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:50 2026 by rpki-client