Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d9c73f5c-1d23-457e-affb-45387b6cc5e9.roa
File: d9c73f5c-1d23-457e-affb-45387b6cc5e9.roa (raw, json)
Hash identifier: ikK6h56KH+dKPKZydySC+6h6XNOp2ajzD5GgNp/Llsc=
Subject key identifier: 2E:9C:16:71:9D:D1:AB:0D:6A:CA:93:4C:37:24:F8:C4:5C:C8:19:7F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3F2A7A21D4B26450C13468DB9C19D6BDE0B3A074
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d9c73f5c-1d23-457e-affb-45387b6cc5e9.roa
Signing time: Mon 03 Aug 2026 00:40:06 +0000
ROA not before: Mon 03 Aug 2026 00:40:06 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.74.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:2a:7a:21:d4:b2:64:50:c1:34:68:db:9c:19:d6:bd:e0:b3:a0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 3 00:40:06 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=ec8ab27b9b8478b9683de370093dbb43bda516aded6e3b9bf1ee07234fdf64d1, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:88:36:18:cc:bd:16:21:31:78:a0:7d:5f:
0e:18:46:82:e5:bc:b0:c0:57:13:8f:73:0a:40:29:
e6:43:3c:69:65:d3:df:ff:53:9f:fe:6c:94:c4:ef:
40:48:8e:d1:a4:03:11:44:62:be:75:c1:82:92:1b:
2e:52:35:37:50:e3:f7:22:7f:5e:a9:7f:dc:4b:bc:
11:ad:08:9e:10:0d:db:da:b7:28:f6:e7:9d:cb:0d:
3e:76:7e:f4:36:ec:45:d5:c2:d1:54:c9:c7:7e:e4:
75:69:4c:5c:9f:26:5a:97:14:f4:61:cf:2e:0d:b1:
25:02:eb:8d:d8:0e:ea:08:19:a8:ad:d4:fd:82:d3:
6c:16:4b:dc:28:ed:4c:a8:20:d5:bf:67:29:12:84:
6a:69:cd:60:37:42:31:91:28:b0:0d:59:6f:ba:63:
aa:97:76:13:af:23:b6:4e:fd:30:1a:89:a8:ed:ae:
fe:0b:65:1d:89:0a:f2:e4:c9:c8:8f:09:c4:a9:28:
ca:1e:17:47:0c:3c:07:d1:b0:5e:28:89:29:7b:40:
b3:f7:a9:d0:e4:37:ef:94:0e:82:7e:f8:82:38:db:
d9:e5:32:de:ff:87:7f:df:8a:03:2e:3d:0e:a4:e4:
5e:5c:0e:e5:5f:0f:74:12:38:8e:5e:cb:33:e2:e9:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9C:16:71:9D:D1:AB:0D:6A:CA:93:4C:37:24:F8:C4:5C:C8:19:7F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d9c73f5c-1d23-457e-affb-45387b6cc5e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.0.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:87:82:a3:ac:a5:ac:62:89:74:48:3a:3d:e6:d5:29:a9:1a:
91:cf:1a:e1:1a:30:3d:4a:09:21:2a:26:c5:c5:65:28:5c:e8:
51:b3:fb:2c:43:d5:14:3b:9b:9f:0e:d6:1f:cd:fb:95:52:91:
03:02:2f:c4:45:c9:00:90:81:e7:06:df:02:91:9e:66:4f:89:
71:b8:ca:f5:ae:80:92:27:8e:41:dd:ee:88:b7:49:f7:a1:97:
ce:42:b5:16:10:01:45:0d:87:49:1d:ed:a3:0a:9f:60:b3:75:
e6:6d:7e:24:78:ff:be:9f:dc:ce:eb:b9:62:b9:26:be:48:aa:
db:33:84:1e:dd:39:ef:3c:73:24:b6:dc:79:70:67:ab:75:95:
bd:cf:99:70:98:6b:c7:05:1f:b5:d8:48:d1:83:35:f0:c9:52:
7d:a8:18:28:7b:bc:6f:68:22:f0:c1:7c:65:c2:8d:7f:7b:94:
f3:61:87:8b:af:79:2e:74:3d:f1:d5:96:b4:4f:92:cc:35:6b:
4e:26:b9:9c:07:ad:16:ab:21:d0:f6:9a:91:54:57:26:83:b7:
a7:51:35:c1:2b:5d:ea:a9:cb:af:9a:f8:20:a1:dc:86:02:af:
be:6c:82:36:7b:54:3e:94:a7:76:9d:8a:6f:cb:1f:20:98:15:
92:ed:d2:78
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUPyp6IdSyZFDBNGjbnBnWveCzoHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MDMwMDQwMDZaFw0yNjExMDEyMzU5NTlaMHoxSTBHBgNV
BAUTQGVjOGFiMjdiOWI4NDc4Yjk2ODNkZTM3MDA5M2RiYjQzYmRhNTE2YWRlZDZl
M2I5YmYxZWUwNzIzNGZkZjY0ZDExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALBKiDYYzL0WITF4oH1fDhhGguW8sMBXE49zCkAp5kM8aWXT3/9Tn/5slMTv
QEiO0aQDEURivnXBgpIbLlI1N1Dj9yJ/Xql/3Eu8Ea0InhAN29q3KPbnncsNPnZ+
9DbsRdXC0VTJx37kdWlMXJ8mWpcU9GHPLg2xJQLrjdgO6ggZqK3U/YLTbBZL3Cjt
TKgg1b9nKRKEamnNYDdCMZEosA1Zb7pjqpd2E68jtk79MBqJqO2u/gtlHYkK8uTJ
yI8JxKkoyh4XRww8B9GwXiiJKXtAs/ep0OQ375QOgn74gjjb2eUy3v+Hf9+KAy49
DqTkXlwO5V8PdBI4jl7LM+LpnD8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQunBZx
ndGrDWrKk0w3JPjEXMgZfzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
ZDljNzNmNWMtMWQyMy00NTdlLWFmZmItNDUzODdiNmNjNWU5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBDNKADAN
BgkqhkiG9w0BAQsFAAOCAQEAP4eCo6ylrGKJdEg6PebVKakakc8a4RowPUoJISom
xcVlKFzoUbP7LEPVFDubnw7WH837lVKRAwIvxEXJAJCB5wbfApGeZk+JcbjK9a6A
kieOQd3uiLdJ96GXzkK1FhABRQ2HSR3towqfYLN15m1+JHj/vp/czuu5Yrkmvkiq
2zOEHt057zxzJLbceXBnq3WVvc+ZcJhrxwUftdhI0YM18MlSfagYKHu8b2gi8MF8
ZcKNf3uU82GHi695LnQ98dWWtE+SzDVrTia5nAetFqsh0PaakVRXJoO3p1E1wStd
6qnLr5r4IKHchgKvvmyCNntUPpSndp2Kb8sfIJgVku3SeA==
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:23 2026 by rpki-client