Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fe3ce580-d204-4167-8723-0a480c50b6ad.roa
File: fe3ce580-d204-4167-8723-0a480c50b6ad.roa (raw, json)
Hash identifier: gEeRq0NSMz/gLq6NCz8B/2HweaSWnvH/0wYFeChQJ18=
Subject key identifier: 6F:22:7A:41:43:17:A5:2E:54:97:2A:C6:8A:E9:DF:5A:BD:6C:B4:CD
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2EBBCEF8C384A629C51A48C8AA16BD2933F13C39
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fe3ce580-d204-4167-8723-0a480c50b6ad.roa
Signing time: Thu 26 Feb 2026 02:00:31 +0000
ROA not before: Thu 26 Feb 2026 02:00:31 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 193.202.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:bb:ce:f8:c3:84:a6:29:c5:1a:48:c8:aa:16:bd:29:33:f1:3c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 26 02:00:31 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=84732ac60850240dde7fb1ad9926c16575eb6899314e09c8746fc7cdee56d2c0, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:1f:af:3a:92:f3:8d:a2:1a:86:22:81:ac:
bf:96:4b:44:2c:b1:2e:3a:b3:a0:54:e3:30:a6:5f:
07:94:15:db:36:09:16:3c:a0:4e:39:0e:b9:1f:76:
89:25:d4:68:c6:82:ea:50:c1:d4:f5:17:89:e5:fa:
1e:b5:e6:de:00:ee:95:bd:f0:d6:e6:d0:16:f2:93:
26:93:f3:40:d8:62:f4:dc:76:47:36:ad:e7:c1:44:
bc:fb:9a:50:b1:89:ab:34:21:6c:4a:0e:7c:23:b2:
33:46:cd:2e:21:44:19:f1:d6:3c:5f:93:2e:09:9c:
2a:f2:77:5c:cf:8d:31:0d:de:81:ed:e9:44:5b:6e:
40:99:4a:6d:49:ef:6c:9c:96:0c:cf:40:1e:26:c3:
47:c8:d7:b4:31:06:00:ac:d9:5b:b2:d5:20:66:c0:
34:59:9b:3b:20:e3:cc:5f:e6:86:53:2c:d8:6f:41:
50:46:61:4b:dd:54:91:e1:86:08:08:3c:07:af:24:
a9:bf:fe:ac:f7:47:3d:2b:7e:94:59:48:55:8d:f7:
95:7a:d7:53:e9:02:11:12:96:6a:c9:ce:ef:82:d2:
e9:54:aa:f9:7a:30:d5:70:50:0c:74:f2:48:c4:39:
6a:0c:a2:67:3e:83:15:37:1c:83:4b:7d:4e:8d:b2:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:22:7A:41:43:17:A5:2E:54:97:2A:C6:8A:E9:DF:5A:BD:6C:B4:CD
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fe3ce580-d204-4167-8723-0a480c50b6ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.192.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:98:ff:da:45:99:5a:32:22:43:19:1d:23:cd:5f:5a:7e:ab:
9e:ae:2b:52:23:1a:0a:91:75:fa:11:37:90:36:97:86:06:e4:
6d:37:b5:d5:1f:f6:b7:d4:43:d2:45:3c:92:5c:e1:17:e0:f5:
66:19:a0:94:b1:89:59:98:80:cd:89:66:6f:05:fa:12:a7:05:
5c:ca:e3:ee:9f:13:8a:e4:c2:1b:83:e2:7d:2b:ab:c3:38:33:
3e:a1:ee:91:df:63:93:41:8f:f7:c8:2d:52:0d:04:7b:b4:57:
c6:1a:da:c5:8c:e0:3d:3a:be:82:83:cd:b9:19:f9:38:1f:f2:
2a:31:af:5e:3b:a4:16:ad:db:56:bf:bb:ce:25:6d:e4:de:a3:
c8:7e:df:51:55:b1:06:77:14:4e:4b:6b:e2:b3:41:53:0d:42:
3c:24:c9:04:aa:62:3c:ad:cc:fe:39:60:22:bb:05:6c:b8:cf:
57:81:25:9e:69:85:18:78:90:77:2f:70:79:74:25:12:23:5a:
a1:f4:b0:de:1f:5d:fb:e1:c9:e0:48:e9:6b:0d:61:49:a9:57:
69:1a:45:3b:48:0c:e0:24:8e:09:ee:02:ea:18:1e:61:17:7a:
b3:c1:93:67:7e:c7:0b:8d:1a:82:fc:f5:ce:77:f8:cb:ed:68:
3f:ac:53:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:04 2026 by rpki-client