Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/566f9159-e271-4224-9cc9-33a554331509.roa
File: 566f9159-e271-4224-9cc9-33a554331509.roa (raw, json)
Hash identifier: dhQvQSczK3D5YiRm+4Vx5gOg6ldMbV4CUJj7TrDBtJE=
Subject key identifier: 23:0E:A2:22:49:7C:29:E0:79:A2:A3:7F:6E:0C:EC:78:89:64:74:DB
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 268F22143A2B93AF8BABB5290066BE966E3591CF
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/566f9159-e271-4224-9cc9-33a554331509.roa
Signing time: Thu 26 Feb 2026 02:00:35 +0000
ROA not before: Thu 26 Feb 2026 02:00:35 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:8f:22:14:3a:2b:93:af:8b:ab:b5:29:00:66:be:96:6e:35:91:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 26 02:00:35 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=d22bed084fe81b78483989ee8280e549e0dc22d0c4567e0d87f1d367a809fe5f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:56:a2:2d:e4:7d:5b:7e:e8:69:29:56:9a:2d:
11:f2:6d:7b:35:aa:ea:7a:b4:ab:9b:20:27:c9:3c:
a7:5c:ea:d0:bd:17:e8:12:9d:0b:b2:1f:74:37:dd:
6d:46:d0:e4:58:f9:9a:a0:20:4e:5f:2a:ae:55:8c:
ad:64:0d:c1:7d:64:26:d6:0b:20:7d:30:25:c1:02:
9b:c8:4b:f4:03:ce:33:c6:b5:78:34:5b:59:00:03:
23:63:f9:85:02:0c:71:3b:df:2d:cd:a4:6f:d0:ac:
e3:d9:28:eb:d2:f3:ab:5f:74:49:a6:2f:42:28:52:
e3:44:8b:ba:b9:30:c8:a0:80:a5:38:f1:44:fe:24:
ef:75:79:fc:2a:4b:37:66:c1:5e:cc:e2:35:2e:95:
03:13:bf:e4:81:8f:6e:07:b1:44:25:e5:39:36:4d:
a4:06:08:a0:6b:ed:8f:78:e5:49:32:83:c9:ae:d0:
97:42:83:a8:60:eb:87:e9:d0:49:c6:9c:e7:8e:a0:
7f:c6:a6:24:6a:fe:fc:8b:83:ed:64:6d:13:68:d8:
6e:97:a7:c1:5c:14:9c:55:15:83:ce:d1:08:e2:53:
f6:3b:ad:44:8c:06:dc:5b:16:30:92:9f:b9:93:07:
8b:ea:4f:6c:62:bd:7f:e1:13:1e:3d:77:08:ba:73:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0E:A2:22:49:7C:29:E0:79:A2:A3:7F:6E:0C:EC:78:89:64:74:DB
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/566f9159-e271-4224-9cc9-33a554331509.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.0.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:88:21:b6:3d:8c:b3:80:72:db:71:9a:e6:ed:98:12:71:3c:
6a:0b:04:f8:b2:d2:89:f8:48:a4:dd:79:30:6c:d0:98:a5:5a:
48:05:a6:f0:cd:8d:95:78:73:ff:23:8b:99:fe:44:3d:ec:0e:
93:cf:82:75:23:e0:74:21:32:57:e5:80:82:25:95:66:19:2f:
01:f3:e5:a8:3f:96:55:bb:85:08:0d:99:90:c7:d1:e0:d3:3f:
13:49:02:58:fe:02:02:e9:ed:15:18:67:85:40:95:d7:82:d2:
68:95:b1:c7:d5:2d:62:d5:1c:75:dc:47:c7:f4:3a:86:b7:ac:
58:bb:d7:f5:fb:7c:d4:ff:f8:0a:a6:22:73:50:93:f8:f6:a4:
8e:4f:14:46:26:62:e4:6d:2f:33:a3:38:6d:9a:1a:cf:06:19:
12:13:04:f7:ba:7e:bb:7a:93:df:48:e5:75:4f:d1:f9:34:84:
f1:b8:b9:77:42:05:6b:3d:91:95:f7:ab:b3:3f:35:fe:6a:11:
38:bf:e5:2d:ef:87:d9:c6:fe:68:84:8c:fc:33:81:4b:8d:cf:
f7:4d:b5:13:27:3b:27:30:14:02:0b:1e:e2:37:64:0f:01:11:
9c:cc:3e:44:48:f5:be:27:6b:79:1f:8a:71:30:07:96:77:57:
de:cc:98:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:49:41 2026 by rpki-client