Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/58a02d47-65d9-49b8-bdf2-00c72a86ef95.roa
File: 58a02d47-65d9-49b8-bdf2-00c72a86ef95.roa (raw, json)
Hash identifier: 6Irtm6aV2nJOvHidsEZ6CujhQBmoZvIREt+LoFtMB+g=
Subject key identifier: EC:C0:2A:25:53:E0:08:05:44:23:77:48:04:7F:CD:E5:F5:EB:E5:C2
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 41254543CB8A067B590916FA73D5A12B1941A343
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/58a02d47-65d9-49b8-bdf2-00c72a86ef95.roa
Signing time: Mon 11 May 2026 16:17:14 +0000
ROA not before: Mon 11 May 2026 16:17:14 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.74.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:25:45:43:cb:8a:06:7b:59:09:16:fa:73:d5:a1:2b:19:41:a3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 16:17:14 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=0064102bbdf2351db43b6f73e1fa970dc13bee0a96897bf236930eee310d6920, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:d3:ce:20:d5:e5:cf:e7:f1:75:f1:99:af:
3a:09:1e:67:1c:4a:10:13:19:22:e7:50:7d:46:55:
cc:27:7f:a3:fe:19:7e:68:1d:ac:da:69:7b:94:27:
09:05:20:47:f8:76:6f:0a:7b:0b:75:b4:ca:a7:ad:
f5:98:bd:7b:39:f0:09:6b:9e:c8:5b:e7:a0:8a:89:
25:0c:a2:de:93:3f:6f:36:23:29:4a:11:1b:60:2a:
ac:41:5e:e4:eb:e5:8b:ff:e3:b2:d9:cd:7f:f1:bd:
fe:af:bd:99:00:01:23:19:3f:19:05:cc:94:bd:94:
48:22:29:a8:8e:a8:00:4d:95:4a:9c:50:a8:af:20:
c9:0b:03:bd:c9:cd:55:9b:01:ea:5a:22:87:75:fe:
b8:90:c5:2a:fb:af:67:11:4f:56:1b:73:2e:f0:a1:
21:e2:d7:10:31:13:53:60:61:09:a7:24:e7:89:33:
14:2d:bf:5e:fb:62:77:be:21:ba:fb:6b:8f:41:2c:
db:93:88:9d:1c:2e:f7:c5:6d:2b:1c:39:ca:64:27:
31:00:72:00:ce:f4:b4:eb:f7:0a:37:8a:3e:88:92:
7b:a1:50:3b:d8:a1:d8:79:a2:31:4e:29:36:98:a6:
17:56:11:0e:c1:cf:54:ff:f1:1b:d5:7b:1f:d9:1e:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C0:2A:25:53:E0:08:05:44:23:77:48:04:7F:CD:E5:F5:EB:E5:C2
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/58a02d47-65d9-49b8-bdf2-00c72a86ef95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.128.0/18
Signature Algorithm: sha256WithRSAEncryption
c5:25:c1:c0:57:1e:21:b3:96:67:0d:e3:94:c7:04:c8:d4:af:
32:ae:b7:9c:0f:18:db:59:73:2d:e1:ca:37:a1:64:4b:b5:22:
65:89:8f:99:c2:35:fd:f8:33:cf:e6:2a:f9:bf:a7:5d:2b:39:
36:17:f1:6f:77:a5:9f:b1:f1:e8:f0:b0:25:10:3b:5d:83:19:
2e:b6:83:ac:91:e6:33:08:a4:57:43:01:13:a6:61:04:9c:d6:
e5:27:90:fc:15:71:41:b6:2c:7a:f9:01:51:c3:50:09:1c:ec:
3e:66:d8:e2:0e:d8:0f:46:ca:1b:f9:b5:81:10:bc:8e:f7:82:
f7:dc:72:05:78:e8:65:f2:00:78:e8:b5:1b:08:f3:d7:e1:1f:
04:60:74:c3:06:1b:de:07:03:ba:06:4c:91:99:3c:62:0c:85:
2e:fc:24:a8:e6:e8:13:d2:05:76:98:45:b3:1a:7a:a3:82:65:
ae:9a:ac:8e:da:04:83:fa:7b:ef:f8:b8:23:f7:36:89:5e:32:
8f:6e:d2:6d:83:b6:b8:bb:43:89:df:2b:00:26:29:d3:a7:a7:
3c:15:f2:be:cf:5e:c4:e0:cf:e6:74:7a:0c:fc:e3:b2:7a:39:
fb:85:de:65:c4:c8:83:23:01:4b:c3:59:7f:9c:bf:f5:18:d2:
a3:32:ac:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:42 2026 by rpki-client