Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e1cea63b-03e0-4f40-9714-d077a989f009.roa
File: e1cea63b-03e0-4f40-9714-d077a989f009.roa (raw, json)
Hash identifier: xispzuLZN8ZPVZfvc2H69uILlCqZ+EEcJnGJmPPHTe0=
Subject key identifier: 31:F7:FD:18:A0:84:9D:A6:30:B9:DE:57:5F:B7:71:00:8A:94:45:0F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 4F0579A8FB0105EB85328981E522DC1A62A988F8
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e1cea63b-03e0-4f40-9714-d077a989f009.roa
Signing time: Wed 12 Aug 2026 20:03:29 +0000
ROA not before: Wed 12 Aug 2026 20:03:29 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:05:79:a8:fb:01:05:eb:85:32:89:81:e5:22:dc:1a:62:a9:88:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:03:29 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=7fb5b0c7c869eb38bda9e72838e955ebd1b41788c13459c87115a19d2ad5871d, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:df:f6:f6:e6:ac:14:c5:63:74:e8:ae:6b:
2f:b8:2f:ed:d1:09:2f:34:77:8d:44:7b:5b:16:46:
dc:1e:55:3d:87:bc:7b:59:e1:f8:77:3f:3a:af:7b:
e8:a9:93:c5:1e:ca:10:f1:14:4c:21:25:30:00:f9:
e8:78:9f:8f:79:b1:2a:b8:4e:f9:bc:88:b5:ec:0a:
ef:96:65:1d:4b:7f:28:1c:7b:4c:1d:1d:a6:d3:42:
68:00:2a:c4:fd:23:11:f0:47:ee:92:fb:47:ad:2b:
09:56:f3:cf:9c:43:d4:e9:0b:c1:cf:a7:a7:6d:60:
0c:78:6b:01:9c:e8:5b:e4:5b:82:81:6d:e9:e6:34:
76:ce:57:35:df:fe:0e:c3:5b:0a:2b:27:0f:dd:6c:
39:82:5d:e1:0f:45:10:a4:19:a2:40:e1:66:67:f7:
3e:a2:91:c1:ba:5e:9c:5d:8f:7c:9d:01:b7:96:c3:
37:be:4f:d6:90:33:f6:2e:30:a3:14:6c:0b:34:27:
7a:6d:14:48:f4:d7:d8:ee:13:ae:2c:cb:b4:e4:21:
7d:c8:37:c7:c3:e5:1d:d4:3e:f7:c7:32:a1:29:82:
1d:99:48:63:f6:cb:92:5e:93:1a:95:ec:cd:29:5c:
cb:83:7d:1a:76:01:d7:52:e3:67:6a:40:33:c7:35:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F7:FD:18:A0:84:9D:A6:30:B9:DE:57:5F:B7:71:00:8A:94:45:0F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e1cea63b-03e0-4f40-9714-d077a989f009.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.31.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5f:ce:1d:e9:70:8e:1c:f1:24:72:19:4d:27:97:01:cd:03:
33:cd:27:50:21:f7:ae:1f:50:c8:92:16:6b:97:fa:a2:6d:16:
d5:a8:76:1d:f1:bf:5b:05:51:f6:9b:3e:92:f7:15:5e:99:84:
b9:f5:7d:7c:bb:47:b9:71:5d:8d:db:4f:c5:ba:ee:6c:72:53:
81:18:dd:a0:21:43:44:f7:55:3a:f4:c9:38:57:70:09:5a:8d:
45:f9:59:a3:eb:04:32:47:1c:32:6b:28:3b:a9:2e:df:d2:35:
14:d3:78:92:28:b2:5a:d0:b6:b1:fa:fb:cc:ff:24:a8:47:e0:
2a:bc:b4:1d:28:db:50:64:de:f7:9f:57:8e:ae:87:ce:4e:3f:
64:06:98:c1:4e:94:e2:a2:46:9a:2c:b0:4a:a0:ce:5e:ba:5d:
5f:2f:bd:e5:cf:15:ea:10:39:30:fc:6a:2d:4a:af:69:14:a9:
08:5e:76:ca:b7:97:a3:82:6c:39:f7:99:79:78:db:30:51:6a:
a4:d2:56:ac:f0:82:ac:5c:ad:7d:13:72:f1:df:7d:c2:15:57:
11:71:af:6d:38:e4:d9:b4:aa:db:08:11:a2:d0:ea:12:d7:f5:
50:bd:9a:dc:7d:f6:ee:47:42:ad:4c:5e:ea:4a:20:37:ad:79:
b9:7b:4d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:32:07 2026 by rpki-client