Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/bdf7b264-e727-4ddb-afaa-512b53c680e7.roa
File: bdf7b264-e727-4ddb-afaa-512b53c680e7.roa (raw, json)
Hash identifier: EnITYtBtGcOp8Ud4eLQqG0QlDCEq+cjm72V+eGt4it8=
Subject key identifier: E9:74:86:D2:1D:EB:6C:B7:CA:AA:A5:DA:D1:16:65:F9:FC:58:40:D6
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 47F607D849DFDA3C7FAA25A2AC01E9F8F4E9C24D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/bdf7b264-e727-4ddb-afaa-512b53c680e7.roa
Signing time: Mon 11 May 2026 16:46:48 +0000
ROA not before: Mon 11 May 2026 16:46:48 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f6:07:d8:49:df:da:3c:7f:aa:25:a2:ac:01:e9:f8:f4:e9:c2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 16:46:48 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=729dcc53661f6d8612cd37077a286128ce1d8826ad70aa5e48173df0127d0fb3, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:70:88:d2:a2:1e:37:57:c1:37:04:59:89:7a:
57:c5:0b:83:58:16:fd:21:4f:64:fa:3e:c5:25:a6:
54:59:89:18:c8:78:58:ce:e3:2f:36:83:e2:af:95:
c8:49:93:aa:17:42:97:08:83:46:41:48:be:b7:f6:
76:39:8d:e8:54:99:b4:dc:5c:6e:bf:b8:84:c5:4c:
06:42:0c:38:d4:65:58:79:fc:29:fb:ce:79:cb:81:
63:d5:44:a7:cf:d6:2d:79:b8:4d:a3:3b:e5:56:a7:
70:eb:7d:f8:49:da:d3:21:be:90:7d:da:be:22:fe:
0a:43:d6:c1:1c:03:b9:04:76:86:ab:62:83:36:1f:
e4:6a:e6:85:52:f6:92:84:97:5f:fa:d0:85:81:39:
42:69:0b:0e:af:a3:5a:5b:4b:6c:cf:e4:12:74:95:
2d:70:68:d4:67:c6:66:bd:9c:06:76:90:f6:d2:0e:
36:36:38:fd:15:cf:c8:35:a9:fb:3f:66:e0:4d:64:
f2:5b:85:b4:d1:86:4c:21:ff:06:0f:c9:13:21:7e:
53:96:c0:eb:61:db:78:04:32:8a:83:ca:c9:86:12:
28:a1:8b:6b:77:3f:72:7f:23:ea:ef:d5:c1:90:1c:
80:8f:21:95:aa:66:f0:d6:e3:33:39:07:ed:2f:f4:
04:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:74:86:D2:1D:EB:6C:B7:CA:AA:A5:DA:D1:16:65:F9:FC:58:40:D6
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/bdf7b264-e727-4ddb-afaa-512b53c680e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.250.0/24
Signature Algorithm: sha256WithRSAEncryption
47:df:b7:5a:a7:1f:4a:0f:f7:b6:ff:ed:7f:17:30:46:6e:ca:
16:59:7d:cf:31:e5:f4:4b:91:2e:5b:f2:bc:fc:5b:c2:42:c9:
98:8c:5a:45:58:5f:7e:9c:cf:3f:81:b0:27:16:ef:29:dc:24:
15:87:36:ad:02:80:eb:ec:24:a9:6b:21:7d:cf:65:eb:83:70:
09:39:b5:75:af:23:59:ca:e0:d4:16:fa:02:ac:42:75:87:86:
8e:b0:cd:5f:48:54:47:12:db:79:11:58:87:81:f7:7e:b5:64:
e9:d8:6a:3b:1f:04:12:65:1e:cb:9d:53:cb:1f:c6:e5:9d:eb:
0d:77:29:3e:55:3f:27:a8:97:ba:05:a5:24:a1:9c:39:a8:af:
c3:6f:dc:d4:a2:ac:a4:0b:d7:05:7c:d9:fd:56:cf:f5:84:7c:
23:80:d2:55:da:d3:34:10:4b:5b:f4:72:3d:ff:40:4c:44:a8:
44:11:f3:3e:3f:bd:6e:d9:f6:f5:b3:03:0d:79:7c:89:e0:0d:
b4:1a:23:57:da:c3:33:5b:da:84:d0:37:99:a7:04:74:d3:31:
58:29:11:39:2a:6b:43:af:1a:31:47:d0:70:b2:50:d8:2c:b7:
6a:21:f2:07:05:56:fa:23:67:b8:c9:62:ce:c1:f0:f6:d6:36:
c0:7b:77:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:04 2026 by rpki-client