Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ecde89a1-b242-4ed1-a7e1-50efb0a2e2e3.roa
File: ecde89a1-b242-4ed1-a7e1-50efb0a2e2e3.roa (raw, json)
Hash identifier: v/3T0U7ubMWtUlzCy+2A4GVPD0KZ6g7LhlYu6eIYnr8=
Subject key identifier: D6:CD:CF:A7:C0:2A:FD:CC:E0:F8:42:40:93:9B:52:EB:E4:1C:C5:FC
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 72F95A5C98EAA4F9AF3E0B0CAAA96550E9F07E6F
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ecde89a1-b242-4ed1-a7e1-50efb0a2e2e3.roa
Signing time: Wed 12 Aug 2026 20:18:08 +0000
ROA not before: Wed 12 Aug 2026 20:18:08 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f9:5a:5c:98:ea:a4:f9:af:3e:0b:0c:aa:a9:65:50:e9:f0:7e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:18:08 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=0f862afa8b2729b34bd9555ee33a288aff09b2083bd3adbb133f23bec8314f41, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:77:02:fa:8f:3c:b1:1f:58:5c:47:65:8b:
e2:ff:fd:28:44:cc:81:2d:80:ae:04:a9:29:5a:c3:
2b:89:e6:a3:a0:e7:a5:28:1f:65:00:09:69:53:b7:
26:75:fa:f5:2e:34:ce:05:17:7a:5a:b0:0a:b7:af:
42:43:e6:62:67:4e:02:5e:c0:c1:05:ff:f2:07:d7:
e8:4b:85:10:96:00:b2:f7:ba:56:11:0c:30:e6:9a:
4d:d1:e6:c5:62:a2:59:aa:2d:79:23:e9:79:76:9f:
74:ea:64:cd:ee:71:cf:79:74:50:78:d0:32:d0:9c:
a1:f3:1e:58:2f:ed:88:06:e7:c6:80:d7:b1:28:26:
0b:4a:bc:a0:49:cd:ec:0b:3e:95:c2:3d:e6:df:b8:
c2:ba:f8:60:85:d8:dd:8d:08:c2:a3:14:89:3d:6e:
cb:2c:a2:3a:62:f2:aa:52:62:b6:15:52:2c:57:75:
14:ee:91:68:b9:dd:d9:c4:18:11:e5:32:5e:3c:3e:
02:e3:1f:27:a0:62:3b:a7:73:61:c3:1a:7f:cb:77:
26:85:9c:3a:22:7f:49:18:bf:78:93:5a:e0:6c:40:
6b:3e:3e:50:5e:c0:8f:e5:93:59:f2:0f:21:e4:f2:
d0:1b:2a:b8:4d:f7:d7:b6:c4:43:f7:2f:e6:32:ca:
98:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CD:CF:A7:C0:2A:FD:CC:E0:F8:42:40:93:9B:52:EB:E4:1C:C5:FC
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ecde89a1-b242-4ed1-a7e1-50efb0a2e2e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.136.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:c3:b9:88:c5:87:c6:71:81:0e:91:09:47:db:69:7b:da:f5:
fc:14:d7:6f:e0:97:5a:af:17:6d:e5:2f:c7:ed:9d:e5:6b:5e:
8d:fd:59:c5:66:92:1e:c3:87:3c:95:20:0b:c6:c0:41:e6:f3:
b6:7e:1f:c6:29:66:4e:26:df:87:19:95:08:a1:b2:23:f0:d7:
a8:2b:db:38:82:47:9e:50:6b:c5:99:b6:e6:d9:6d:2f:0e:35:
68:28:4d:6d:bf:8a:8e:b0:38:8a:f2:e2:b1:6d:ca:5f:29:a1:
2b:ce:13:78:e1:4f:5e:27:58:d3:26:6f:be:98:c1:ba:94:9a:
df:73:31:2e:11:ba:03:f3:23:63:7a:cb:54:73:e5:7b:15:28:
71:e4:5a:77:c7:a8:92:65:36:ff:42:46:8f:d7:46:ef:b0:a5:
37:3e:94:bf:3a:5b:48:66:03:02:f2:60:22:72:d1:06:e4:17:
49:41:50:de:55:49:17:6b:08:95:2b:7a:57:69:3c:8b:ba:d4:
fe:09:2e:8f:10:2b:52:09:7d:9c:0f:8e:43:26:83:f3:1c:51:
4f:23:50:1a:02:30:ab:17:c3:3a:98:1e:69:1e:b1:f7:7b:d4:
05:30:d4:d9:50:21:43:e1:49:27:d4:8f:cd:60:c8:4e:50:4e:
e1:65:96:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:43 2026 by rpki-client