Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0439adea-88e8-466c-b9f4-4670fc14d494.roa
File: 0439adea-88e8-466c-b9f4-4670fc14d494.roa (raw, json)
Hash identifier: vj+SM6zh6xai0WBz6YnNSbBxRMpivOJhCdUO0pw4N3M=
Subject key identifier: 25:71:D6:6D:3D:74:11:4E:8E:FC:38:C1:BE:93:F7:93:78:44:3C:A8
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 746F41089C7D562DE71018A151C4901D848BD3CB
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0439adea-88e8-466c-b9f4-4670fc14d494.roa
Signing time: Thu 17 Sep 2026 00:00:05 +0000
ROA not before: Thu 17 Sep 2026 00:00:05 +0000
ROA not after: Wed 16 Dec 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.172.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:6f:41:08:9c:7d:56:2d:e7:10:18:a1:51:c4:90:1d:84:8b:d3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Sep 17 00:00:05 2026 GMT
Not After : Dec 16 23:59:59 2026 GMT
Subject: serialNumber=f9bdbc6f4ee9095ad95f52a742a6edaa41253f0072cb1c086281e910c8cb7dcc, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:33:4d:5d:44:99:cb:bc:b3:73:ba:43:8c:
5f:aa:f5:a5:0e:aa:20:fd:b1:ee:6b:83:27:ee:16:
a6:f4:b2:6e:9f:f6:90:2e:38:14:dd:18:a3:77:66:
5f:ad:a6:2c:bc:a6:29:d0:f3:70:48:6d:3f:53:7b:
27:7e:1c:d6:e5:44:8c:ed:b8:09:4f:54:93:0c:5c:
87:83:b4:70:0f:c9:c1:70:71:36:85:85:aa:cb:10:
66:e7:ce:e5:49:48:e5:c5:91:eb:07:81:11:7d:01:
52:d0:67:9a:7e:17:ad:33:8d:14:2f:76:0f:1b:fc:
45:9d:cb:d3:75:25:cd:9b:a8:a7:2d:09:0a:c2:0a:
fc:9f:e7:d5:3a:d3:8e:49:36:a0:97:38:5b:01:4d:
32:e8:28:f5:2a:55:e4:dc:ac:95:6a:f1:6d:c7:48:
b6:e6:0f:07:77:5e:c7:03:0a:fb:e8:a4:a5:51:de:
c3:12:91:45:e1:7f:32:e9:8d:07:28:d8:bc:cd:39:
d3:b1:f8:3d:34:97:f3:58:b3:7a:46:2c:ae:f1:1a:
8e:f9:30:63:01:d1:88:72:4e:4a:6a:5c:c3:7f:03:
d8:de:36:15:61:c5:45:d4:75:d8:ec:b3:65:bf:d9:
a7:8f:35:90:0f:18:8c:64:96:4e:d2:d6:14:62:d7:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:71:D6:6D:3D:74:11:4E:8E:FC:38:C1:BE:93:F7:93:78:44:3C:A8
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0439adea-88e8-466c-b9f4-4670fc14d494.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.172.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9d:24:69:1e:bd:be:42:d6:a6:5b:b1:16:bd:86:c4:f5:c2:bc:
0f:c9:5a:91:72:ba:f1:2c:c0:a2:8b:6f:7a:75:64:4e:03:af:
0e:05:a5:f7:62:31:a3:39:96:51:74:e3:8f:81:0e:3d:8b:f1:
a5:15:33:03:3c:cf:49:d9:e0:96:ae:61:d9:8a:f6:66:64:91:
bc:4f:cc:29:a7:e8:95:c6:ec:04:0b:f0:f1:76:53:ca:20:bf:
d3:da:07:8c:4d:88:fc:28:48:31:9f:08:f7:c0:0d:a9:f9:38:
96:e5:b2:88:5f:e5:24:da:96:9a:34:06:ae:29:9f:9d:e2:65:
83:1e:49:37:a2:98:07:20:33:e6:6f:81:fa:63:de:25:7c:41:
b2:44:29:d5:43:c4:ca:00:5a:bf:f3:93:8c:0f:85:1a:90:28:
6e:13:fe:61:9c:17:52:e2:be:05:8d:41:44:45:85:5e:c2:f5:
6f:1f:53:03:e8:44:47:ae:07:45:90:1b:0a:3d:7e:df:fc:68:
b2:ee:4b:44:12:1e:bd:55:9c:cc:3d:5b:09:4f:50:d4:e9:3e:
52:96:2a:aa:8a:53:39:a1:74:44:9e:d0:53:62:ba:04:db:35:
67:e8:8b:ca:14:1a:62:f3:26:b9:77:cd:6c:a1:09:a2:a6:51:
ac:da:9b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:55:43 2026 by rpki-client