Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/efb99c18-4a45-4f07-9c1c-080a66f77889.roa
File: efb99c18-4a45-4f07-9c1c-080a66f77889.roa (raw, json)
Hash identifier: QkLOSdANMLpma9Ma44cN7rs3f2Ytm0MOcPRKha/46o0=
Subject key identifier: AF:F5:A4:21:19:CB:7E:1D:4F:BC:4B:D8:16:8D:0A:99:0C:45:DB:86
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 55A93EA93A010D3348C210CDB4779C4FE9B88419
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/efb99c18-4a45-4f07-9c1c-080a66f77889.roa
Signing time: Wed 05 Aug 2026 02:00:27 +0000
ROA not before: Wed 05 Aug 2026 02:00:27 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a9:3e:a9:3a:01:0d:33:48:c2:10:cd:b4:77:9c:4f:e9:b8:84:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:27 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=09d30089d8007898d6ccc625a938bcf75e4e81ef7c84ecc8df0560fa9b163176, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:61:af:c9:6f:f4:3b:d7:06:b8:42:ef:4e:
c3:ff:7d:d0:68:d1:33:4e:7a:64:72:f5:63:0c:ad:
ef:72:c5:50:8b:8a:01:9c:60:46:ea:94:b8:94:98:
11:40:3e:72:07:df:4d:a0:ac:eb:96:5f:be:90:78:
51:58:34:21:2b:bf:8b:33:b3:f4:a4:93:d8:16:0f:
d1:d8:bf:c4:87:bf:a3:0c:77:49:ab:62:ff:1b:cf:
9e:b6:63:9b:fb:75:d9:b2:bb:ad:0b:93:cc:12:80:
1c:db:f2:df:46:67:f1:0d:97:ec:03:f3:33:d1:14:
9e:88:5b:00:a6:bb:5c:e5:ea:b8:89:8e:c1:16:cb:
26:18:ef:1f:36:0a:cc:0a:3d:25:c5:f6:7f:bb:90:
d6:23:66:32:7a:b6:05:5f:fa:6d:6c:96:f8:15:c1:
43:22:ad:d3:f9:0a:9c:3b:3d:79:31:59:52:f6:d5:
da:17:c8:a6:50:7a:8a:e9:73:40:2e:32:b2:19:8e:
8e:f6:12:01:bf:b4:1a:3e:cb:62:77:37:54:03:5e:
49:f2:f8:bd:20:00:68:03:e7:15:58:1a:b7:78:7a:
3b:81:a2:c6:d7:73:ee:4c:fd:16:75:ce:ee:70:29:
b5:69:47:2d:ee:14:04:f7:dd:e7:e3:07:f9:c8:09:
2c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F5:A4:21:19:CB:7E:1D:4F:BC:4B:D8:16:8D:0A:99:0C:45:DB:86
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/efb99c18-4a45-4f07-9c1c-080a66f77889.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:5b:19:c7:7f:0b:b4:ae:8e:26:22:60:32:bf:1a:6e:dc:14:
23:f3:8b:28:9e:89:22:f5:1f:6d:f2:d7:9b:24:17:ff:0e:c8:
2a:96:43:5e:5b:37:48:60:4c:13:23:86:a1:e1:bc:75:0e:a1:
1c:f0:88:e5:ef:a8:02:16:dc:91:d9:af:cc:ea:a7:6c:39:e3:
77:a2:d6:9c:18:6c:03:e2:15:0f:29:d8:99:a5:ed:7b:fe:8a:
8d:84:80:a4:61:f0:71:7f:44:13:3f:92:d3:d8:d3:14:ac:b7:
d1:2e:31:ee:0b:28:34:21:12:ad:00:36:0d:ad:00:85:8f:2f:
3a:b9:37:5f:e7:9a:31:34:01:c1:2e:d6:b6:16:fa:32:5f:38:
4e:e9:cd:24:6d:60:40:39:63:02:ce:bb:b0:80:17:60:2b:77:
48:b3:00:57:3e:b2:c1:aa:99:07:e9:7f:ac:23:4c:42:6b:e1:
ff:57:03:30:cb:1d:3b:73:93:d9:e6:dd:cd:d0:cb:54:36:9f:
21:c8:d1:a7:7c:cc:7a:37:5d:30:a6:cf:fa:a6:4d:06:33:c7:
b6:f9:fc:0d:28:7b:a7:9a:6c:a2:08:42:1f:4c:ec:09:47:70:
28:53:eb:85:81:f8:76:b7:30:89:7b:56:f7:cf:a3:b4:56:e9:
24:73:27:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:26 2026 by rpki-client