Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e8ce0f48-7eb9-4575-90e4-f66ac33569e5.roa
File: e8ce0f48-7eb9-4575-90e4-f66ac33569e5.roa (raw, json)
Hash identifier: ZExnia+PxTokX176vpoaMLD9p/e7RZoppuLsYVup4Mw=
Subject key identifier: E8:F3:A5:9A:F3:DD:D5:DA:EB:C6:89:57:CA:AB:C5:F7:F1:73:4F:91
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 71540F082DEA85913C7C22904E91FCCE20318761
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e8ce0f48-7eb9-4575-90e4-f66ac33569e5.roa
Signing time: Sat 07 Feb 2026 00:10:04 +0000
ROA not before: Sat 07 Feb 2026 00:10:04 +0000
ROA not after: Fri 08 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.74.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:54:0f:08:2d:ea:85:91:3c:7c:22:90:4e:91:fc:ce:20:31:87:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 7 00:10:04 2026 GMT
Not After : May 8 23:59:59 2026 GMT
Subject: serialNumber=71665eebcfc1e6a9f599f1175d7e661184840b179a3dc07fa964b2ba8bebe576, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:37:2a:46:87:a3:dd:e6:5a:e6:ba:e4:56:
0d:c7:49:13:bf:db:44:84:26:12:d4:8a:e4:d4:b0:
a5:23:be:39:c0:6e:97:15:d4:6d:27:93:38:eb:2f:
f2:a2:fc:bb:2c:2e:13:ec:12:49:e9:6d:9a:59:48:
3c:e8:2d:05:7e:bd:cf:9a:98:dd:e1:82:88:c6:23:
94:61:89:5f:a4:3c:b0:4e:07:eb:b0:97:10:39:02:
99:2f:01:6e:61:90:9e:85:c6:ea:95:f0:5f:b7:f4:
1c:75:bb:fe:26:62:72:ba:1f:87:69:01:e4:28:70:
58:5a:ef:6f:11:90:f6:d7:23:39:5f:c2:3d:b6:18:
98:e7:02:ea:a7:4c:78:3d:94:ff:02:ca:44:1c:5b:
43:76:2f:35:cc:6b:05:9d:84:cb:5d:7d:80:fd:6f:
a8:43:f5:98:39:ca:52:9e:32:82:42:7f:79:15:86:
4f:7d:24:b4:c9:da:f5:b8:8e:fb:fd:42:cf:c0:b8:
e6:14:8d:fb:85:3a:6c:96:dd:0b:46:30:59:ab:ca:
dd:92:72:49:d0:83:df:2c:0d:c1:a5:d8:ee:93:06:
a4:66:c6:e6:ac:92:5e:b3:ae:8c:ba:03:01:df:1c:
5c:79:a1:04:b1:88:e6:11:53:8b:ad:e1:17:6b:12:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F3:A5:9A:F3:DD:D5:DA:EB:C6:89:57:CA:AB:C5:F7:F1:73:4F:91
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e8ce0f48-7eb9-4575-90e4-f66ac33569e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:00:eb:77:e9:b9:1c:68:e0:fb:45:bd:46:e8:82:c6:28:16:
00:76:3f:01:f1:a8:9c:98:9d:12:e6:2b:f6:53:61:2c:4d:ce:
51:fb:81:c4:42:37:df:22:9a:1a:66:c1:f3:2c:52:16:8d:45:
56:9c:85:c3:d6:62:c1:e6:b8:cd:09:29:de:96:4c:1c:45:03:
1a:ef:94:23:fb:bf:f2:76:3e:70:7f:33:db:f4:f8:14:3b:b8:
b5:f6:a9:e2:79:1c:23:71:2c:a9:5e:02:9f:90:3d:57:7f:ae:
0a:e3:87:a8:57:a3:ee:9b:f9:7b:35:6f:6a:90:86:7e:25:7c:
86:e2:e1:34:59:f4:41:a5:bf:21:52:52:4f:07:e6:9d:13:5c:
15:78:99:7b:4b:55:34:64:df:bb:a2:14:93:6d:5d:dd:93:6d:
74:72:27:00:03:d0:c9:de:85:63:88:85:15:ca:f1:a8:d9:ef:
4e:bf:20:f8:10:60:04:a1:7e:7c:19:4c:ca:ba:15:29:7d:c9:
d9:68:2a:8e:b5:3c:37:1c:ad:41:1a:b7:7a:86:d4:2a:ed:12:
00:32:ba:5a:cd:61:1a:c9:15:64:cb:fb:1c:16:31:a8:51:2c:
1d:7d:9f:1c:29:eb:40:12:3c:16:b8:3d:c1:43:65:1d:2c:ea:
40:59:70:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:25:29 2026 by rpki-client