Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/80c8537f-f518-4230-9f14-470ee4d649e2.roa
File: 80c8537f-f518-4230-9f14-470ee4d649e2.roa (raw, json)
Hash identifier: TgSKVOfVaRx+vdfw52Sp84rW6DiVWxs76alNMwr62Tg=
Subject key identifier: 47:89:46:15:CC:B3:DA:0F:AA:44:04:C0:C4:DE:AA:7A:2F:72:1F:2F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 09B6DF19F9B07B59733071ACD50D3586325EE718
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/80c8537f-f518-4230-9f14-470ee4d649e2.roa
Signing time: Thu 26 Feb 2026 02:00:33 +0000
ROA not before: Thu 26 Feb 2026 02:00:33 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b6:df:19:f9:b0:7b:59:73:30:71:ac:d5:0d:35:86:32:5e:e7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 26 02:00:33 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=0d6544232f400d502aae9e614b14987c69a6072932db287e4c64443b3c9803bb, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:15:d6:ef:ac:98:8e:13:23:a0:5a:2f:bb:
25:5e:54:e0:6a:6b:05:4f:33:6e:de:a2:b6:cc:16:
cc:54:7c:1f:90:43:b4:13:24:ba:80:3d:81:80:d9:
36:11:de:7c:80:8c:d8:c1:b5:cd:e7:17:f2:03:8c:
97:46:b0:7a:07:32:e7:2c:15:33:49:a1:d5:11:e5:
8a:bd:62:50:c6:43:79:ea:9f:ee:70:0c:8b:db:57:
28:e3:2c:77:4f:4f:d7:e2:2b:59:a4:26:bd:27:cb:
aa:13:be:39:c0:70:74:2a:2d:0e:df:d5:4b:ba:f6:
7b:55:6c:34:2b:16:2e:5c:fe:4c:aa:79:b0:30:9e:
7e:5b:9a:4a:f2:d7:79:49:43:d0:f4:61:17:68:ab:
6b:f7:e3:35:52:cf:c1:42:30:ee:e7:83:19:8f:d2:
ad:c5:93:77:57:2c:f7:b5:0c:3c:62:98:21:9c:35:
38:5c:7c:57:4f:ab:ca:52:bd:db:29:c6:04:6f:8f:
14:be:ab:05:71:15:c1:8b:10:0a:1c:77:1e:d0:d0:
30:63:1a:8f:33:e5:10:29:53:84:fb:98:b9:95:67:
29:9d:8d:a1:94:11:06:c8:d1:50:c6:b0:54:19:8c:
27:7a:e5:a1:25:02:5e:3c:a2:ec:1e:74:0e:ea:76:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:89:46:15:CC:B3:DA:0F:AA:44:04:C0:C4:DE:AA:7A:2F:72:1F:2F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/80c8537f-f518-4230-9f14-470ee4d649e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.136.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:dd:85:bf:9e:04:e8:a7:2f:8f:0d:73:42:cf:d5:a2:77:b9:
f4:cd:11:07:6e:11:c8:39:eb:f6:4a:12:2b:38:ec:30:1a:11:
68:7f:10:85:4f:50:11:f7:78:8c:42:83:ee:47:fd:4c:56:6e:
f1:9a:6b:97:7e:09:1d:df:07:c2:14:d6:18:8f:68:ee:63:ff:
ab:a4:dc:c9:f2:f4:8c:ec:a6:4e:c8:fc:74:43:21:aa:98:ed:
93:32:ca:37:36:0e:a4:27:0b:ef:58:a3:30:62:c6:6a:88:68:
90:82:97:ff:63:c5:94:df:03:02:be:f3:ac:d8:02:06:44:ca:
5d:39:02:9a:75:8c:e2:4f:d0:7f:2e:3a:fb:1f:56:e4:da:56:
52:23:b6:32:06:3d:4f:e7:3c:10:c5:37:b2:51:2a:51:2d:98:
09:c5:36:18:08:80:9e:02:af:99:61:dc:ce:8f:6f:4b:f0:d0:
a8:d5:1b:1a:fc:34:e4:51:33:f2:88:2f:0e:71:3b:f3:06:1c:
66:44:49:a3:2f:60:7f:b0:ca:68:c6:74:de:f1:9a:50:a2:39:
e5:96:b9:ea:d0:71:c0:2d:8a:53:9a:7d:bc:30:ee:19:a9:ff:
8f:aa:c1:ac:c7:e2:83:6c:69:64:5b:a3:ec:73:63:19:c0:41:
c8:bb:4b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:10 2026 by rpki-client