Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fba9947a-0607-4761-81a2-5b74aa43989f.roa
File: fba9947a-0607-4761-81a2-5b74aa43989f.roa (raw, json)
Hash identifier: I5ojb+NgK6cRiYgOSR83slmfZtON0d5k+9cFKS9XjKM=
Subject key identifier: D2:12:BD:F7:D4:CA:93:A2:B6:89:67:7B:76:DB:48:92:43:C7:2B:5A
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3EFE0E84A3AFDA1FA1832F1092D90373185C56FA
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fba9947a-0607-4761-81a2-5b74aa43989f.roa
Signing time: Wed 12 Aug 2026 20:48:03 +0000
ROA not before: Wed 12 Aug 2026 20:48:03 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.224.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:fe:0e:84:a3:af:da:1f:a1:83:2f:10:92:d9:03:73:18:5c:56:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:48:03 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=6ae74231e44c0bf1ce7ce3a963fcd700150b9687cdf29adec6ea5ded1e50bf8c, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:56:d0:e0:3b:88:ac:68:0c:59:ac:26:5f:a3:
5c:f3:90:34:0d:1e:b9:d8:ed:7d:b2:6f:95:ff:9a:
d3:a8:3d:56:01:bf:fb:19:e9:73:55:59:dd:65:bf:
d8:0c:6b:61:d4:2d:87:5c:ad:04:ee:21:e4:96:66:
93:ce:63:ee:3d:bf:36:b7:b3:35:bd:19:0d:7d:9e:
98:9f:20:25:76:1a:3e:e4:95:db:38:72:c5:ae:5a:
07:b3:88:f2:99:b0:8c:35:ab:14:da:e0:78:a1:90:
6b:d3:d0:95:00:8e:62:e9:0b:73:a9:03:57:69:d5:
f3:1b:07:24:4c:57:2a:9e:f0:62:59:2b:e9:fb:e4:
d2:e9:2c:10:50:8c:58:e3:61:a4:4a:70:5a:4f:f2:
8f:8f:6a:02:cf:f7:2a:13:5c:da:56:c4:37:91:25:
f8:6c:5d:17:b7:62:6f:b0:b0:16:7f:ce:34:9c:4d:
c7:a3:33:0a:b5:ef:55:38:c2:7c:4f:5d:7e:ed:1f:
44:d6:ef:77:fa:e4:7a:42:68:be:02:ce:53:e9:93:
f2:d1:19:8d:d5:a1:f4:4d:1c:af:4a:98:6f:ac:6d:
cb:16:b4:2c:fa:4a:7e:17:a8:c1:99:12:01:26:eb:
a5:6f:e8:7b:b7:a3:48:18:b4:92:97:e2:5b:fa:ee:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:12:BD:F7:D4:CA:93:A2:B6:89:67:7B:76:DB:48:92:43:C7:2B:5A
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fba9947a-0607-4761-81a2-5b74aa43989f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.196.0/23
Signature Algorithm: sha256WithRSAEncryption
99:d1:32:eb:c9:56:bb:e5:6c:5d:e0:ae:ce:77:03:3f:e7:af:
1d:fd:c4:42:56:38:28:68:02:23:20:c4:9c:25:cf:a1:65:dc:
d6:7d:2a:da:a1:ea:12:52:11:f3:a3:af:90:5e:84:4d:50:a0:
71:cd:b5:af:a3:70:75:81:96:84:85:a5:d2:59:d9:3c:0c:fa:
ce:06:3d:1c:72:c2:25:2b:fc:80:6c:36:61:76:7f:2b:68:c2:
80:fb:fb:2b:ef:be:ea:93:0a:a4:36:29:cd:45:3e:9a:7b:28:
33:52:a4:a0:ba:c1:21:9d:c9:55:36:7c:09:e9:fe:18:20:fe:
9f:23:6a:d8:91:b5:80:95:f5:ea:31:14:b2:f4:8a:69:c0:ed:
6f:b2:ed:bc:8c:5a:26:4a:53:4b:85:69:4d:df:7b:2c:49:be:
49:47:3a:7a:37:e9:0c:19:0b:a8:80:ea:e7:a9:96:a3:83:0e:
a1:90:64:30:44:bb:34:26:c1:10:45:38:5d:89:97:da:98:e6:
e4:ed:9d:6f:88:38:ec:e4:24:d0:ca:aa:f8:a6:fe:7d:59:a0:
3a:02:d6:20:52:eb:4c:ba:2f:29:ca:06:dc:d9:dd:3b:42:52:
b2:90:06:ab:79:9a:c7:e4:29:fa:52:1c:5a:61:1a:92:a8:35:
4c:05:4a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:22 2026 by rpki-client