Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e31b4829-a8a6-4dd2-ba5c-985e6234c3f7.roa
File: e31b4829-a8a6-4dd2-ba5c-985e6234c3f7.roa (raw, json)
Hash identifier: zBVItRCJZPnLKF7oh4zGrevZjWy0c0r+AdUBuvDLvDU=
Subject key identifier: 89:CF:D5:AA:E7:42:8B:3C:07:4D:B2:BA:3D:60:5D:A9:AC:DC:10:21
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7914612F345CE0308667D4B7A637884F2BA79BFB
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e31b4829-a8a6-4dd2-ba5c-985e6234c3f7.roa
Signing time: Wed 05 Aug 2026 02:00:09 +0000
ROA not before: Wed 05 Aug 2026 02:00:09 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.224.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:14:61:2f:34:5c:e0:30:86:67:d4:b7:a6:37:88:4f:2b:a7:9b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:09 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=b5544c9b4736e262d9fa4b20845da4e0dc86241a396655b8302162ecb731fca7, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a0:1b:63:39:88:05:25:83:18:d3:8f:44:f7:
88:c0:46:bc:8f:6f:62:66:65:d8:77:08:b9:e0:57:
c9:9e:69:92:52:4c:4e:e9:4e:14:09:5a:e2:86:81:
74:48:23:31:46:bb:2b:51:fe:c2:73:64:bb:dd:31:
c4:64:f2:fc:75:01:79:db:c8:78:ad:5f:4e:cf:4e:
b9:3d:8a:f4:6c:c7:14:4c:ba:b9:05:ce:1a:8b:e8:
18:c0:15:e7:70:e5:55:26:76:24:10:59:a2:d9:3e:
52:aa:56:3d:ba:5c:17:d1:31:82:3e:19:a3:8b:7d:
04:ba:b3:ed:b6:dc:cd:c3:ac:e3:ca:81:e4:0b:eb:
41:af:b6:29:55:8a:ef:79:d8:95:56:83:19:20:12:
b5:85:6d:94:b0:fc:97:6e:8d:bd:0d:d4:f7:0c:43:
b3:a7:5b:bd:89:9e:dd:3a:d3:cc:d5:19:51:5c:5c:
2d:9b:c5:c8:bb:96:10:19:38:b2:d3:1a:f3:1e:61:
7e:aa:fb:20:5c:a9:42:e4:27:47:2d:82:2e:18:e8:
8a:d7:c6:8a:dc:05:a1:5b:6b:be:7d:fb:b7:6c:da:
37:4e:fb:96:af:3f:0a:d6:50:82:8f:94:bb:bb:01:
ad:e7:4a:43:2c:a4:c9:f6:19:e8:49:6c:9f:61:d4:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CF:D5:AA:E7:42:8B:3C:07:4D:B2:BA:3D:60:5D:A9:AC:DC:10:21
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e31b4829-a8a6-4dd2-ba5c-985e6234c3f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.194.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:14:06:de:45:23:4e:2d:ca:c7:90:0f:e5:54:26:09:c8:c4:
1b:f0:a0:91:eb:15:1e:57:50:87:78:4a:99:ac:62:11:b6:27:
29:a8:6e:cc:bc:74:01:58:21:90:e4:cf:a8:90:d8:d8:fc:30:
c7:4c:68:87:78:41:30:30:1c:39:aa:3f:8c:60:7c:d6:2e:63:
1f:52:36:f7:34:5c:b3:85:1e:22:05:4f:69:b2:5f:41:cd:f1:
97:aa:8d:13:09:83:37:8e:31:f9:ed:40:9b:3a:db:9f:39:5a:
9f:3b:7b:b4:47:fa:a1:7e:6e:ec:cc:f8:bc:a1:58:22:8c:d6:
50:ac:02:f5:f6:95:39:40:fa:e0:3e:64:f4:fc:7d:4f:7e:16:
d0:e5:3a:a2:21:ca:60:b3:7b:b2:05:8c:9a:e0:7b:36:49:4a:
4b:00:6a:8f:9e:23:a4:c8:7b:8b:05:be:6c:0f:cd:58:87:ad:
05:b7:a5:0e:73:b3:fe:b7:50:94:77:7d:8c:5c:55:d5:f6:80:
30:ef:a4:07:8e:d0:83:7d:ae:9d:64:ec:e9:e2:ad:44:c7:8b:
f8:a4:eb:ab:0e:99:c7:6f:68:09:22:8d:e8:59:79:06:df:3d:
ed:12:20:fc:96:e0:f2:3a:7d:a5:39:15:35:31:d0:ce:8e:b3:
52:fb:ea:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:28 2026 by rpki-client