Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4f61bc8f-5cd0-490e-9773-b17b31dc9d76.roa
File: 4f61bc8f-5cd0-490e-9773-b17b31dc9d76.roa (raw, json)
Hash identifier: v4vGpoTZjurwzUw43ukD39vPR99E29tjKIdWqIE0poo=
Subject key identifier: 3D:61:24:2C:2D:6E:45:1C:F3:1E:A9:4A:F2:64:35:90:E7:1A:FC:C3
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 443A81F7B044909827E453210A37387905252A96
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4f61bc8f-5cd0-490e-9773-b17b31dc9d76.roa
Signing time: Sun 26 Jul 2026 00:00:39 +0000
ROA not before: Sun 26 Jul 2026 00:00:39 +0000
ROA not after: Sat 24 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.74.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:3a:81:f7:b0:44:90:98:27:e4:53:21:0a:37:38:79:05:25:2a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 26 00:00:39 2026 GMT
Not After : Oct 24 23:59:59 2026 GMT
Subject: serialNumber=0334e6503600e0df9ed5c638b08acad3dd0cece87bb99efff3caae78de73d817, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:bc:2b:ba:af:bb:07:c8:3e:ca:22:2b:ca:
57:a9:2c:39:99:3a:ad:2c:eb:f6:a4:44:1d:8e:67:
1d:1a:86:1d:cf:9e:e6:15:25:40:78:57:81:fb:a9:
56:a8:d8:50:e4:95:dd:98:8c:d8:39:57:fb:80:36:
a3:2d:51:d7:60:76:a1:3b:31:fe:26:f0:fb:ec:15:
56:53:15:93:bf:39:7e:6a:a1:c1:ed:88:2c:02:29:
2c:a9:98:c9:8a:cb:db:db:95:4c:dd:15:3b:70:21:
30:ef:f8:9f:be:61:5c:b9:c1:e5:0c:91:59:17:0d:
fc:0e:12:55:4c:3f:2c:18:c4:c8:81:04:1a:b3:10:
9d:26:07:9c:6a:97:ec:8f:90:61:44:ce:f9:44:85:
c8:81:11:70:ba:c2:7f:ec:11:f3:95:99:c5:c8:dc:
7a:1e:50:e2:04:5d:c9:af:e9:d3:e9:7f:ae:40:c1:
93:fd:d6:bf:0d:65:6a:19:d6:62:ef:98:27:c3:51:
93:e6:8b:94:50:d6:0f:46:14:dc:26:c9:0d:b9:45:
ff:12:17:ac:ae:8e:f6:23:d1:6f:ec:ee:60:17:9c:
14:1a:a2:a4:34:d8:3c:06:06:92:cc:71:0b:a6:18:
15:8c:a8:a8:2a:4f:61:b4:f5:c9:11:5a:06:c7:b7:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:61:24:2C:2D:6E:45:1C:F3:1E:A9:4A:F2:64:35:90:E7:1A:FC:C3
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4f61bc8f-5cd0-490e-9773-b17b31dc9d76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.17.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:88:d9:d9:29:95:c3:2b:b7:49:80:93:b1:3c:5b:f5:f0:b9:
a5:92:32:3b:a3:a1:53:5d:c2:97:fa:9c:2a:be:af:67:a2:9a:
61:b5:b0:3b:9a:c0:5b:5d:c4:b4:e9:74:64:9c:c0:f8:3e:74:
ae:ed:2f:f5:b8:1c:d8:b8:79:63:a1:1f:f7:a9:44:dc:dd:26:
e9:42:27:f6:e9:5e:3f:36:89:95:39:16:17:aa:bd:c4:46:6f:
4b:b3:f0:55:66:9b:10:95:6a:82:ef:97:d3:16:c4:7e:6e:71:
1b:f8:cf:42:bd:a5:28:15:1b:ea:a6:ee:a0:88:ba:cd:61:e6:
61:eb:6d:49:df:bc:14:0f:9f:d6:aa:53:11:20:e4:d1:37:e1:
1c:2c:cf:bd:d7:1b:68:f8:b6:1c:d5:ed:a1:11:0e:a8:17:9a:
fe:a0:80:23:c0:4f:26:9b:7b:73:29:d6:f6:b1:12:d9:fe:16:
73:0f:fb:b8:dd:4a:9c:b7:c1:c1:ff:14:59:38:a5:46:25:e1:
cb:5b:e2:d9:bb:6d:f0:26:b7:a1:a9:47:3e:ea:c5:0a:c7:31:
78:32:97:d1:2e:d7:fa:93:0e:c4:d6:df:ff:a8:58:72:dd:0b:
88:3e:c9:56:17:e1:04:e8:85:a9:9d:0d:0d:c5:cb:d2:a5:d8:
ed:98:d7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:00:17 2026 by rpki-client