Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f576b9dc-abc3-4a3a-80ad-74007d59d895.roa
File: f576b9dc-abc3-4a3a-80ad-74007d59d895.roa (raw, json)
Hash identifier: VpV7t72gUT17EP6tW0HSXmXdxO9+t7drstv4WdVLeHc=
Subject key identifier: AD:12:8C:00:6F:57:67:0B:6F:B7:6D:D2:46:34:0F:EF:43:51:41:27
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6C51A0A026A247268E6244A9BE7A44BB524CD303
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f576b9dc-abc3-4a3a-80ad-74007d59d895.roa
Signing time: Tue 11 Aug 2026 19:49:08 +0000
ROA not before: Tue 11 Aug 2026 19:49:08 +0000
ROA not after: Mon 09 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.74.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:51:a0:a0:26:a2:47:26:8e:62:44:a9:be:7a:44:bb:52:4c:d3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 11 19:49:08 2026 GMT
Not After : Nov 9 23:59:59 2026 GMT
Subject: serialNumber=b24df0e858f7f5202c59b21a811e79e9d276213c6e908380a98b02fed51077ec, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:9b:b2:63:47:50:7b:3e:23:d3:67:0c:d4:
7b:b7:b2:64:56:bf:6f:20:75:6f:6c:3f:ee:f7:e2:
25:52:ab:11:36:2f:41:a9:8e:da:5f:3b:07:75:85:
e7:60:92:7a:fd:59:92:b3:5e:d5:ce:79:4a:23:ad:
6e:50:17:06:ce:de:3b:83:00:a2:83:e1:fd:09:53:
3b:62:3d:13:69:17:6a:a9:94:9a:1e:b1:1c:e3:6e:
53:ad:a6:f8:d3:da:51:c1:5f:53:cf:8d:ef:ea:ef:
2b:33:8d:3f:2f:dd:04:e0:4a:24:1e:dd:43:e4:d8:
69:bf:36:65:a6:76:f4:52:3b:25:05:e6:2d:fa:b8:
4f:d9:3f:36:af:77:cc:a2:4b:60:c0:29:1d:9b:2a:
ff:65:8f:ab:b9:61:36:d1:4b:29:e1:50:0d:c1:bd:
6b:fe:d0:9a:ba:82:9d:76:81:74:22:82:d7:08:d5:
ed:66:13:99:1b:72:e1:80:7d:5c:79:82:87:61:94:
03:4c:98:5f:22:08:04:73:23:6a:32:21:76:b4:b5:
43:b6:78:0c:be:b8:7c:b4:ae:74:3d:6b:1b:36:85:
53:17:83:04:fb:69:4f:df:f3:a3:0e:b7:14:94:1d:
92:7c:78:76:dc:e1:c2:ba:19:c2:0a:a7:e0:72:ab:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:12:8C:00:6F:57:67:0B:6F:B7:6D:D2:46:34:0F:EF:43:51:41:27
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f576b9dc-abc3-4a3a-80ad-74007d59d895.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.16.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:57:d5:23:3a:c4:d3:ec:42:e6:1a:e4:f9:aa:96:30:60:4c:
5c:0d:2e:7f:53:e7:59:7c:20:96:90:c3:e9:26:dc:14:8d:29:
6d:bf:4e:90:66:a3:fe:9a:b8:b5:59:9f:f8:09:6e:5b:1f:db:
be:46:ce:ea:4e:d4:ae:7d:ed:ff:da:c7:60:8c:a9:f2:37:0b:
12:7f:a0:fb:d1:30:04:9e:b6:f7:e7:44:5f:de:05:3f:63:52:
39:51:a0:aa:90:aa:04:fb:7a:48:14:d6:9d:a3:5f:89:05:aa:
9d:2b:d7:59:91:c8:07:b7:10:2e:b9:19:33:70:3f:90:ef:af:
a2:98:24:cf:e2:1c:fd:2e:8f:f8:63:51:4c:60:f5:14:01:52:
ea:4d:3f:6e:ef:77:d2:3f:aa:52:42:ae:a5:e4:8d:44:b4:f6:
c6:cc:ca:dd:e2:bd:99:fe:78:8e:c3:46:4f:9f:f7:f3:81:92:
ea:9e:7c:22:f4:fa:11:1b:2b:07:49:7c:86:ef:cf:33:75:dd:
49:ec:f5:3a:19:d4:2b:e9:55:91:e0:47:60:75:2c:a4:f3:b1:
c0:7a:00:4c:3e:6e:19:8a:64:6b:c3:17:33:5d:4f:51:09:aa:
99:35:27:5a:a0:72:a2:fd:29:c7:03:e7:99:39:dc:2f:46:37:
48:f8:53:a3
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUbFGgoCaiRyaOYkSpvnpEu1JM0wMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTExOTQ5MDhaFw0yNjExMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGIyNGRmMGU4NThmN2Y1MjAyYzU5YjIxYTgxMWU3OWU5ZDI3NjIxM2M2ZTkw
ODM4MGE5OGIwMmZlZDUxMDc3ZWMxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANnnm7JjR1B7PiPTZwzUe7eyZFa/byB1b2w/7vfiJVKrETYvQamO2l87B3WF
52CSev1ZkrNe1c55SiOtblAXBs7eO4MAooPh/QlTO2I9E2kXaqmUmh6xHONuU62m
+NPaUcFfU8+N7+rvKzONPy/dBOBKJB7dQ+TYab82ZaZ29FI7JQXmLfq4T9k/Nq93
zKJLYMApHZsq/2WPq7lhNtFLKeFQDcG9a/7QmrqCnXaBdCKC1wjV7WYTmRty4YB9
XHmCh2GUA0yYXyIIBHMjajIhdrS1Q7Z4DL64fLSudD1rGzaFUxeDBPtpT9/zow63
FJQdknx4dtzhwroZwgqn4HKraG0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBStEowA
b1dnC2+3bdJGNA/vQ1FBJzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
ZjU3NmI5ZGMtYWJjMy00YTNhLTgwYWQtNzQwMDdkNTlkODk1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADNKEDAN
BgkqhkiG9w0BAQsFAAOCAQEAtlfVIzrE0+xC5hrk+aqWMGBMXA0uf1PnWXwglpDD
6SbcFI0pbb9OkGaj/pq4tVmf+AluWx/bvkbO6k7Urn3t/9rHYIyp8jcLEn+g+9Ew
BJ629+dEX94FP2NSOVGgqpCqBPt6SBTWnaNfiQWqnSvXWZHIB7cQLrkZM3A/kO+v
opgkz+Ic/S6P+GNRTGD1FAFS6k0/bu930j+qUkKupeSNRLT2xszK3eK9mf54jsNG
T5/384GS6p58IvT6ERsrB0l8hu/PM3XdSez1OhnUK+lVkeBHYHUspPOxwHoATD5u
GYpka8MXM11PUQmqmTUnWqByov0pxwPnmTncL0Y3SPhTow==
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:46 2026 by rpki-client