Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7ca55aad-890f-4a52-9daa-e3d8a128f118.roa
File: 7ca55aad-890f-4a52-9daa-e3d8a128f118.roa (raw, json)
Hash identifier: s23vaEFY717S6CZQb7UV4AKimHWPYYgTDKMeE9DVjK4=
Subject key identifier: F6:8D:94:96:0F:DF:5F:F0:EE:38:F9:90:D6:4E:25:E4:ED:CF:81:02
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1E2A0DC000B49D9B520C13188BC677768C9E92EA
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7ca55aad-890f-4a52-9daa-e3d8a128f118.roa
Signing time: Sun 20 Sep 2026 00:00:11 +0000
ROA not before: Sun 20 Sep 2026 00:00:11 +0000
ROA not after: Sat 19 Dec 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:2a:0d:c0:00:b4:9d:9b:52:0c:13:18:8b:c6:77:76:8c:9e:92:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Sep 20 00:00:11 2026 GMT
Not After : Dec 19 23:59:59 2026 GMT
Subject: serialNumber=6c9229f29454d645e779a11d851d03236313674eba974fbf16560036a2950656, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:c0:c1:87:8c:0a:74:18:d4:d3:d2:8e:33:
12:67:7e:53:84:49:ad:d7:bc:1c:8c:24:cd:08:db:
4a:5e:01:95:a0:38:d4:7b:9f:73:20:82:96:af:20:
b8:49:6c:eb:7e:1c:48:44:97:c4:6b:b4:ea:b5:dc:
94:51:59:b7:31:ef:f1:dc:cb:d5:00:4c:93:15:e0:
f2:28:be:4d:a3:e4:44:ca:9a:13:24:0b:56:37:36:
75:6d:0c:06:9f:1b:a1:66:0a:f9:b8:ab:79:71:3b:
14:2f:24:ff:5b:57:98:87:f6:e0:01:73:af:5d:5b:
11:ae:b8:03:7a:fd:e9:b4:47:74:7b:86:0f:9c:ad:
79:ac:ed:46:30:08:e6:3e:8b:57:ba:0f:42:72:db:
1b:c2:3a:56:a1:54:fd:78:b1:ea:d6:5f:e0:94:bd:
84:49:9d:19:e1:21:0a:d0:0d:0c:8f:d2:13:24:5c:
5c:eb:83:47:b9:71:31:1d:fe:f8:83:3e:e5:b3:28:
7a:0b:f1:a0:0e:3e:0f:d3:5b:ac:ed:48:3b:ce:4b:
44:e4:7c:10:a9:ef:c0:52:82:17:c8:4c:34:35:c8:
96:a2:fb:81:46:dd:ca:d4:0c:72:a3:50:fe:3a:01:
87:23:80:e3:69:50:d0:31:a5:e3:f1:47:e9:25:48:
ae:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8D:94:96:0F:DF:5F:F0:EE:38:F9:90:D6:4E:25:E4:ED:CF:81:02
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7ca55aad-890f-4a52-9daa-e3d8a128f118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.251.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4b:f8:b0:37:5c:c0:15:10:f0:a7:a4:f5:3b:6d:7b:83:5d:
ea:8a:b0:fd:c5:05:ac:f4:9d:ba:26:b9:0d:71:b4:fc:38:26:
91:66:01:30:5a:8d:8b:67:14:27:8b:f1:6a:b2:c7:eb:1c:42:
98:28:89:80:cc:74:a6:a5:20:a6:b5:c5:6c:44:2f:45:d3:ba:
83:e1:26:54:f5:10:6b:3f:2b:72:56:b4:35:6b:50:3d:b1:1d:
c3:07:a8:27:ed:7d:ae:1d:dc:3e:2a:57:4a:3b:0b:7d:21:26:
8a:56:82:de:44:12:96:36:ba:98:b1:0f:fa:a1:8d:a2:41:2b:
38:bb:d6:16:7c:6e:43:02:4c:e0:94:6c:fd:54:7b:c9:71:d9:
6e:3e:32:c0:03:f3:b0:3a:3f:35:67:3d:5b:18:65:07:c5:c5:
3c:ec:4d:93:9b:6b:e2:9d:80:d7:36:5b:4e:b3:92:71:56:5c:
05:1f:13:be:cc:f8:9c:e2:7f:b8:1e:f4:0f:11:ef:9a:bf:c3:
bd:c2:93:62:81:0f:5a:e7:13:98:3f:29:5a:55:8d:5c:cd:49:
e1:3c:ed:0c:72:9b:44:5b:ea:ab:77:ef:d6:85:f8:d0:53:d3:
89:26:c5:df:22:68:1e:b2:9f:76:de:37:04:01:93:25:3e:ca:
09:82:31:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:55:12 2026 by rpki-client