Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d944ab55-e596-4301-a331-22631b97a422.roa
File: d944ab55-e596-4301-a331-22631b97a422.roa (raw, json)
Hash identifier: ML8nvopanfm2xhiI3cX7iexiRXAdOznxeVkn406PqR0=
Subject key identifier: 02:E4:47:A3:55:F9:52:5C:2F:80:BA:05:6D:7C:B7:A7:1D:1F:AC:75
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 12DC9FCA908F1C455934A6C929CABACCF8C8DE3F
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d944ab55-e596-4301-a331-22631b97a422.roa
Signing time: Sun 17 May 2026 02:00:07 +0000
ROA not before: Sun 17 May 2026 02:00:07 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:dc:9f:ca:90:8f:1c:45:59:34:a6:c9:29:ca:ba:cc:f8:c8:de:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 17 02:00:07 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=093629b63d6c11dfe56e3890ba4944e43f6ac0be9a553bb41b468206062541b4, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:61:8a:39:23:68:43:8a:6d:80:59:e6:ca:
9a:4f:c9:5a:4e:15:b9:70:e1:55:ac:a1:39:da:75:
14:b9:be:ed:98:95:6d:b6:35:06:79:57:fa:03:e6:
4b:c6:db:01:e8:08:52:86:fb:f8:55:b7:3b:84:eb:
d6:91:f1:4d:88:56:c1:15:5c:8d:31:a4:07:b3:65:
37:de:af:a7:a2:ed:9c:41:6c:9c:1c:2d:ab:26:44:
a0:1e:ef:75:07:66:44:4f:3b:e2:30:f2:6d:9a:98:
83:3a:6a:5e:b1:13:aa:ac:8e:75:94:a6:83:ff:46:
0e:cf:b3:ec:83:7e:62:ad:e0:1d:e3:26:14:98:df:
58:94:95:cc:04:ba:75:3c:41:82:b8:50:2f:8b:f2:
c1:4a:61:fa:3b:b7:06:71:af:8a:1b:5e:fc:a8:3b:
e6:b1:ae:eb:d7:78:c7:a2:db:a4:bd:6c:6a:78:31:
0e:25:7a:8f:90:18:90:13:f6:f7:16:11:1c:26:56:
e6:5e:61:9d:28:67:93:da:76:3c:83:33:35:4d:ec:
9d:f4:60:6c:fc:75:e2:27:84:8f:26:ad:8b:d1:34:
cb:90:8d:b3:2a:ce:c0:16:61:e2:6b:77:ec:45:aa:
a2:e4:56:6e:2b:7d:e7:a4:89:48:0e:d2:a7:58:34:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E4:47:A3:55:F9:52:5C:2F:80:BA:05:6D:7C:B7:A7:1D:1F:AC:75
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d944ab55-e596-4301-a331-22631b97a422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:48:d2:b2:17:ae:5a:49:bc:1e:e9:7c:9a:38:ec:be:34:aa:
32:34:cb:e4:db:e1:ae:9e:e0:2c:00:e0:25:58:0f:a9:1b:c3:
73:8c:d6:14:36:a2:13:90:10:9f:2e:85:30:c4:ad:46:c2:d5:
2c:66:ba:c7:34:63:0e:cb:86:f5:ac:c5:8c:82:e5:f2:df:8c:
75:25:6f:2d:dc:0c:08:85:63:f3:dd:a2:cd:7c:8b:23:aa:db:
f8:c9:ab:4b:6b:0d:3c:b4:c6:6b:bb:f2:2f:aa:c6:12:59:db:
65:a8:0f:d7:61:85:c7:9e:cf:cd:8e:eb:87:53:9a:a1:ec:bd:
f7:94:61:0e:57:d0:c2:04:2d:f3:93:1b:e5:65:a1:8f:8a:69:
d1:53:e1:d1:38:af:a4:f6:fb:00:25:ac:9e:4e:dd:45:78:4d:
d3:bb:7d:2e:04:45:8d:1e:70:0c:5d:17:08:18:50:53:e1:0d:
71:d1:5f:59:33:d5:b5:38:e4:40:f7:02:75:7a:6a:e5:86:a7:
68:4a:3a:ae:e9:17:bc:a6:d1:df:b4:f3:1c:b2:6f:f7:1f:cc:
16:d0:b9:6d:8a:37:b1:fa:8c:14:66:a8:26:4c:78:f0:aa:60:
5e:bc:ab:b0:e2:e7:72:7d:78:71:b7:a8:59:26:29:ea:ec:2d:
36:03:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:04:29 2026 by rpki-client