Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f6db5bce-e352-420d-afe4-8a12365284c3.roa
File: f6db5bce-e352-420d-afe4-8a12365284c3.roa (raw, json)
Hash identifier: 5oMPcX/fDE+OzDWOB+0hR26xOVlT+zD/YT8wPLv/ros=
Subject key identifier: 40:AC:AA:3C:57:41:03:64:49:8D:E0:77:48:C6:0A:B2:3E:80:F5:82
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6D630260F2CF7667BC608B7E2BA78E197B5123C3
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f6db5bce-e352-420d-afe4-8a12365284c3.roa
Signing time: Tue 28 Apr 2026 00:10:06 +0000
ROA not before: Tue 28 Apr 2026 00:10:06 +0000
ROA not after: Mon 27 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.74.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:63:02:60:f2:cf:76:67:bc:60:8b:7e:2b:a7:8e:19:7b:51:23:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Apr 28 00:10:06 2026 GMT
Not After : Jul 27 23:59:59 2026 GMT
Subject: serialNumber=39eeb4df2f2831eb30cf7cda5abc2cb37de16864f589c6fb405b4c394755caa2, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:8c:c1:b5:cc:eb:2f:dd:3c:3b:20:00:e6:
2b:8e:aa:51:82:06:3c:7e:73:9c:a4:cb:be:ff:f5:
db:05:56:01:83:55:9f:dc:23:b4:49:6e:21:39:46:
50:0a:60:86:95:62:0a:66:2f:68:b2:f7:04:b1:d8:
3f:d4:0e:24:b2:f7:42:1d:13:87:87:3a:17:b9:cb:
98:92:5f:36:6e:5a:06:a4:50:d0:8b:83:ef:a4:30:
65:d2:35:e4:e3:c1:89:94:34:c7:32:b6:db:68:07:
20:6e:27:56:08:ce:4a:04:b9:e2:87:a0:17:08:d8:
13:92:13:a5:ee:d1:82:ad:a4:ce:33:dc:ae:8d:d3:
a1:4b:35:fe:9d:c8:70:c0:8f:4b:43:77:6d:8a:40:
25:6a:52:79:dd:a8:7b:9e:f6:07:eb:88:6a:c9:81:
83:3d:88:83:e2:e9:10:43:59:16:00:1e:34:ed:9b:
be:97:78:60:5f:e8:88:8c:b4:71:95:17:86:e7:b9:
74:00:58:32:8a:0e:4a:5d:11:e4:ed:ae:80:3b:b6:
71:87:36:8d:3f:a3:f8:60:3b:23:0b:1d:e1:8e:7a:
f5:bf:b9:37:9d:48:10:b9:64:99:49:0c:35:85:cc:
4d:a8:cc:da:49:f5:7c:d3:34:1c:6b:e5:d3:e1:25:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AC:AA:3C:57:41:03:64:49:8D:E0:77:48:C6:0A:B2:3E:80:F5:82
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f6db5bce-e352-420d-afe4-8a12365284c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.16.0/24
Signature Algorithm: sha256WithRSAEncryption
11:36:3e:46:8a:ad:d6:43:6a:c5:46:27:5d:53:d0:ce:a3:b0:
35:aa:aa:de:c3:61:eb:96:9c:fe:fd:0e:2b:99:84:9e:b3:6d:
b0:08:fb:5d:f1:ee:10:df:52:a2:9e:15:86:a7:7a:cb:8f:58:
b5:bf:d1:99:24:9e:85:d7:70:81:9c:cd:8d:2d:bb:8c:db:cb:
be:0e:1d:0b:72:06:6b:b3:ab:2a:f9:72:4c:41:a2:d8:36:e2:
59:46:89:9d:59:5d:9e:86:19:5e:5c:c5:28:8c:66:06:07:e7:
be:08:5d:8c:05:19:6b:86:71:bf:cd:4c:77:73:e1:65:5a:0e:
16:dd:f8:f8:74:2e:f2:37:c6:10:9a:09:ed:ba:75:40:ec:a2:
d3:0c:f6:d0:d6:2c:f8:4f:69:c8:18:d5:c9:ad:d4:ac:11:8c:
f7:5b:98:a2:1d:09:fa:f3:b5:68:3a:be:56:84:f1:e9:2f:66:
6d:99:56:06:e4:bb:2e:96:01:bf:bd:0f:41:a3:8c:4d:dd:41:
4f:8e:04:df:ae:1c:76:48:db:08:5e:e7:b3:0d:25:4d:50:f8:
f5:2a:63:49:f6:cb:7c:12:91:e3:49:c7:1e:07:db:38:a8:8e:
32:7d:c0:cf:3f:8c:62:e7:78:20:ea:55:0b:69:f3:17:23:d9:
38:eb:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:00:18 2026 by rpki-client