Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f6db5bce-e352-420d-afe4-8a12365284c3.roa
File: f6db5bce-e352-420d-afe4-8a12365284c3.roa (raw, json)
Hash identifier: dWSxRJbT7EYbVmLH7Y5u385O7tkuzUUmobMRUQAKFxo=
Subject key identifier: D3:41:F2:6A:92:36:08:2A:38:AE:39:80:D3:56:C1:51:94:03:25:49
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 791E544BBCB93034E6758BBDB28865D0ECD53ABF
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f6db5bce-e352-420d-afe4-8a12365284c3.roa
Signing time: Fri 17 Jul 2026 00:10:03 +0000
ROA not before: Fri 17 Jul 2026 00:10:03 +0000
ROA not after: Thu 15 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.74.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:1e:54:4b:bc:b9:30:34:e6:75:8b:bd:b2:88:65:d0:ec:d5:3a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 17 00:10:03 2026 GMT
Not After : Oct 15 23:59:59 2026 GMT
Subject: serialNumber=07affcdf87fa817fca0bfe79b87f77f7afe00254bdb9d46547abef1e5eabfc2e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:f6:9a:60:da:71:7c:c5:a1:f2:42:0a:ce:
67:fb:09:46:2a:37:4c:f7:20:e4:11:17:05:37:b1:
51:90:ed:a5:28:0f:13:88:d4:ce:8f:1d:db:25:e4:
99:63:89:bb:bf:3f:00:d0:18:02:2e:c5:e9:0b:b5:
69:fb:80:75:be:ad:74:f7:71:f7:54:55:9c:d6:ca:
6a:27:01:99:c8:c8:6b:96:14:46:06:25:81:01:de:
66:3b:da:92:7d:0a:4a:7a:23:e6:42:4b:8e:0a:0a:
63:3f:67:17:e9:ed:42:c9:0b:6f:da:6d:7e:98:63:
8d:78:1c:5b:8e:74:6a:9a:33:75:c8:4b:d3:20:09:
3a:9d:4a:a0:e2:57:23:66:20:e9:ae:e6:d9:83:72:
e4:90:e4:18:be:3c:fb:0a:aa:25:6b:55:68:d5:33:
79:63:a3:db:98:99:60:1e:bc:29:4a:10:8d:49:87:
b7:69:7f:2b:6c:71:23:e1:42:2f:38:6b:ac:f3:48:
14:42:37:55:68:14:2d:f6:bc:e1:40:2b:85:09:a1:
1f:f7:95:a6:cf:c4:ec:f6:32:7b:9f:67:39:e6:1f:
51:45:b2:41:e6:eb:50:57:1a:38:e1:0c:3e:3b:dc:
fb:26:66:9e:4d:9e:a8:f6:c6:8c:ce:66:cf:a7:3b:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:41:F2:6A:92:36:08:2A:38:AE:39:80:D3:56:C1:51:94:03:25:49
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f6db5bce-e352-420d-afe4-8a12365284c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:44:ba:b9:04:33:83:d1:b8:72:68:db:dd:aa:ac:ec:70:9f:
43:91:88:44:2a:7f:c4:23:ce:98:dc:c9:fa:fb:d4:3f:7b:d8:
9a:24:a9:34:24:d2:80:96:f7:7d:de:ae:08:e5:64:d7:19:9a:
0c:2d:ad:09:0c:17:a8:ee:24:c9:03:1a:c7:ee:bc:5a:34:99:
e2:15:45:89:d5:2c:e0:de:03:0a:c5:26:c6:3d:61:82:10:0a:
dd:3b:4b:c4:6d:82:c8:0f:46:8a:49:f0:a4:d2:69:a6:3f:31:
a0:9c:70:59:b0:ac:a4:d3:c4:27:fc:32:e7:a2:55:d4:de:6e:
58:de:2c:12:6f:9d:e0:3c:41:24:33:00:c1:ef:3f:13:67:ef:
6d:68:ae:b4:10:bd:54:6b:4e:49:2e:f7:07:51:21:b7:e9:b3:
1d:23:f7:64:3a:01:6d:3b:48:2b:f3:7b:46:2b:b3:5e:d3:35:
c5:e9:7e:74:69:37:b2:82:cd:99:b7:04:60:6f:53:9d:6b:6e:
3e:74:af:44:9a:cc:8e:0a:3a:e5:8b:e7:11:dd:92:30:a9:71:
59:9c:1a:85:89:db:43:18:27:37:2c:69:ca:0f:35:ba:44:95:
60:f6:93:99:9d:68:70:79:11:02:fa:22:71:31:58:36:7c:ef:
1c:e7:16:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:24:00 2026 by rpki-client