Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/de6a2853-3803-405e-9bac-2b96eb87582d.roa
File: de6a2853-3803-405e-9bac-2b96eb87582d.roa (raw, json)
Hash identifier: Q+447ZocQ5j1r2ECBC76EvGZE0aGOcnsdfcBkmbsuYw=
Subject key identifier: B0:A2:70:AC:26:BE:CD:5D:E6:96:F0:EE:E9:0A:F2:01:0C:F6:4C:B2
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3A303098801B220C3757D9C9167F4AE88B611E92
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/de6a2853-3803-405e-9bac-2b96eb87582d.roa
Signing time: Sun 17 May 2026 02:00:28 +0000
ROA not before: Sun 17 May 2026 02:00:28 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:30:30:98:80:1b:22:0c:37:57:d9:c9:16:7f:4a:e8:8b:61:1e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 17 02:00:28 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=7c64378d3fc858c2f7389726458e19d0746df01aa7091894511f1f1cb5ce0262, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4e:72:e0:55:7e:9e:a2:d0:87:4e:b0:af:5a:
26:b3:d4:ca:f0:9a:22:b8:37:94:1b:99:d8:27:90:
45:8a:a2:85:0d:a6:c4:15:bc:be:da:d6:69:12:46:
6e:3f:59:8e:ff:7f:ec:c7:75:9b:52:70:5a:9b:b4:
2e:88:90:1e:e1:ff:b9:e9:1a:84:62:ce:30:8b:d8:
41:33:56:03:4d:a4:d3:b2:2c:f1:1c:95:91:1f:ac:
5a:54:b5:2b:2e:c6:89:f9:bc:98:aa:83:a9:5b:05:
4d:42:ad:a4:d3:51:e5:37:14:a2:51:f1:f5:6b:ab:
c4:af:c4:5a:83:5b:69:06:60:a6:cc:2f:58:76:ff:
ad:22:17:30:c2:bb:a3:21:1c:af:45:77:17:67:b2:
91:4f:76:b5:03:52:90:65:b7:67:9b:9c:f0:d7:1c:
2d:d2:b0:10:7b:5e:0f:a1:ff:01:a4:27:76:14:98:
ff:bc:74:5d:72:6b:c7:a1:b9:4c:fc:df:64:5b:e7:
18:cf:08:17:4b:e6:af:7b:a4:1a:a9:ac:7d:79:ab:
3f:99:06:fe:50:01:93:41:2f:04:51:4d:d4:14:46:
d6:18:52:c9:b2:87:e5:8c:97:3a:eb:2a:b1:81:c1:
9e:87:fa:7a:89:73:52:45:c0:93:ff:0b:dd:40:25:
a6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A2:70:AC:26:BE:CD:5D:E6:96:F0:EE:E9:0A:F2:01:0C:F6:4C:B2
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/de6a2853-3803-405e-9bac-2b96eb87582d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.30.0/24
Signature Algorithm: sha256WithRSAEncryption
34:19:98:02:b1:b6:b9:c0:e7:73:60:a2:22:f1:07:06:5f:33:
be:05:c0:82:4c:ff:ab:60:c7:41:65:7b:5b:35:32:85:09:99:
fa:45:39:bb:9e:94:73:64:f0:e8:23:53:30:99:2a:1e:77:5e:
11:fb:93:75:3c:6b:6f:56:7f:60:34:4a:be:10:84:91:8d:d6:
12:7d:d6:51:b9:e0:35:88:7e:cc:cb:d0:50:ba:57:f3:8c:f8:
0f:1c:f0:02:fb:a0:ea:76:80:82:68:b0:04:fd:1d:6d:a3:88:
e1:c2:b4:bf:c3:de:b1:88:a3:fd:3d:ea:ca:0f:2d:05:ab:43:
32:2a:c9:50:61:4f:a2:4c:14:00:67:cc:7c:4a:22:92:bc:cd:
ea:8a:86:65:ab:2c:df:29:59:7c:7d:15:5a:92:a4:54:29:25:
41:18:d1:fd:8e:24:8e:6d:d7:a2:8a:f3:02:ca:4d:f9:e7:f6:
d3:35:14:b5:3a:5f:72:8c:bb:e8:03:3d:86:d9:37:81:7d:c6:
9e:fe:e7:fa:f7:87:1f:6a:17:8b:08:38:12:b8:e8:f7:ef:a3:
d8:45:e5:79:a5:b1:1a:d7:c2:73:84:11:ba:9e:98:1f:c6:6d:
17:b8:f4:6e:26:27:9d:3a:c8:db:28:4e:03:ac:28:bb:44:bc:
e9:f8:a8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:04:19 2026 by rpki-client