Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/51195615-aa01-4b44-ab00-63024ac9ba29.roa
File: 51195615-aa01-4b44-ab00-63024ac9ba29.roa (raw, json)
Hash identifier: 1nojV2ipe5VsY0AqFhNibVRJ5aLYC04Fj+n6UkaBEzo=
Subject key identifier: F7:C9:79:4A:D9:BF:AF:F6:A3:F9:04:AC:C2:F9:C2:F2:47:C5:89:F3
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 4832CFBBAD36CC8B1C51F7F7BAF7A00354739A6E
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/51195615-aa01-4b44-ab00-63024ac9ba29.roa
Signing time: Thu 13 Nov 2025 16:37:48 +0000
ROA not before: Thu 13 Nov 2025 16:37:48 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.224.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:32:cf:bb:ad:36:cc:8b:1c:51:f7:f7:ba:f7:a0:03:54:73:9a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 13 16:37:48 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=fbccb36c81bc7faf8c6aee3eb86b085922aeaf4f0b147e7d1e6d861f567e6eba, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:67:94:df:75:a2:49:77:12:52:9b:83:a5:
2e:c9:1c:9e:0a:8e:8b:3a:96:b9:20:21:15:08:17:
6d:00:48:b7:5b:69:a1:9f:13:a9:4e:c5:e4:6d:d9:
7a:2c:4a:a6:75:a5:fc:ef:1f:29:86:69:60:97:22:
7f:23:dc:09:6e:31:fd:ac:42:e6:46:13:0a:24:6a:
dd:ee:d4:3c:cd:b4:b8:a2:9d:25:7c:41:9c:13:c5:
1b:55:0c:91:9c:c2:d0:50:5c:f1:e4:c8:1b:37:c5:
e4:0b:c6:e6:9b:8a:5d:a6:b7:6b:4f:24:4c:36:1a:
a2:93:76:23:ee:7d:e9:ac:fe:18:55:02:21:db:09:
5e:e8:ce:1b:be:fe:cc:52:eb:30:64:d4:d9:7b:ae:
cf:d0:2c:98:40:b0:30:96:8a:53:82:61:8a:5c:dd:
24:ed:23:fb:d4:29:80:1d:24:84:00:d2:af:5a:8f:
92:0a:e3:54:93:26:1f:4c:5d:25:1a:7b:1a:79:c2:
d4:8d:94:0d:51:77:5d:3f:5e:20:28:3d:cc:9e:46:
72:be:14:79:36:67:78:cd:3a:1d:fb:28:f6:eb:39:
25:c4:f9:e9:c0:cb:db:40:0a:a9:50:cd:bc:99:0a:
db:fc:3d:94:53:72:b4:af:33:1b:17:d5:bd:99:2f:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C9:79:4A:D9:BF:AF:F6:A3:F9:04:AC:C2:F9:C2:F2:47:C5:89:F3
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/51195615-aa01-4b44-ab00-63024ac9ba29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.196.0/23
Signature Algorithm: sha256WithRSAEncryption
73:ed:45:99:d5:80:86:ee:9a:2d:81:0a:93:45:76:c2:89:5e:
31:99:61:08:66:0a:00:41:af:da:3a:77:9d:f4:e9:41:45:b5:
08:23:26:50:cf:c0:c5:cc:05:f8:2d:a4:ae:ae:bb:61:2a:e9:
05:17:a7:f7:7f:1f:e5:d3:43:b7:ea:66:1b:cd:18:91:ee:c4:
8e:58:ef:48:ea:ff:51:aa:81:8d:df:90:4e:d6:82:a1:dc:8e:
a6:91:67:28:03:b8:5b:de:df:91:d1:ea:b9:b4:17:d2:2b:20:
da:13:20:d0:cf:cc:ee:bf:0c:cb:7b:fc:ed:bd:d3:27:cd:0c:
9d:23:64:de:9b:77:ed:74:7a:b5:ea:fa:cf:f0:7d:0a:4f:26:
d5:9d:a2:17:d9:0a:e8:5e:b2:24:d4:fc:8b:ca:1a:18:e2:74:
33:09:e0:ca:c3:37:11:3e:82:6e:71:2b:80:8f:f1:d3:a1:62:
15:76:fe:0f:c5:c4:85:bf:8e:60:0b:cb:5c:55:f0:52:63:96:
95:9b:a6:4a:e8:3d:2e:bb:c5:11:02:33:97:5a:8b:91:20:3f:
ed:00:da:2b:d9:ec:a5:a1:3a:dd:25:1c:e4:9e:f3:ba:a9:fc:
0a:ec:b2:8a:cb:71:35:0f:2c:94:3a:cd:9c:cd:b0:92:b0:a5:
ee:15:38:69
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUSDLPu602zIscUff3uvegA1Rzmm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNTExMTMxNjM3NDhaFw0yNTEyMTgyMzU5NTlaMHoxSTBHBgNV
BAUTQGZiY2NiMzZjODFiYzdmYWY4YzZhZWUzZWI4NmIwODU5MjJhZWFmNGYwYjE0
N2U3ZDFlNmQ4NjFmNTY3ZTZlYmExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANB9Z5TfdaJJdxJSm4OlLskcngqOizqWuSAhFQgXbQBIt1tpoZ8TqU7F5G3Z
eixKpnWl/O8fKYZpYJcifyPcCW4x/axC5kYTCiRq3e7UPM20uKKdJXxBnBPFG1UM
kZzC0FBc8eTIGzfF5AvG5puKXaa3a08kTDYaopN2I+596az+GFUCIdsJXujOG77+
zFLrMGTU2Xuuz9AsmECwMJaKU4JhilzdJO0j+9QpgB0khADSr1qPkgrjVJMmH0xd
JRp7GnnC1I2UDVF3XT9eICg9zJ5Gcr4UeTZneM06Hfso9us5JcT56cDL20AKqVDN
vJkK2/w9lFNytK8zGxfVvZkvU1ECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBT3yXlK
2b+v9qP5BKzC+cLyR8WJ8zAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NTExOTU2MTUtYWEwMS00YjQ0LWFiMDAtNjMwMjRhYzliYTI5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATPgxDAN
BgkqhkiG9w0BAQsFAAOCAQEAc+1FmdWAhu6aLYEKk0V2woleMZlhCGYKAEGv2jp3
nfTpQUW1CCMmUM/AxcwF+C2krq67YSrpBRen938f5dNDt+pmG80Yke7EjljvSOr/
UaqBjd+QTtaCodyOppFnKAO4W97fkdHqubQX0isg2hMg0M/M7r8My3v87b3TJ80M
nSNk3pt37XR6ter6z/B9Ck8m1Z2iF9kK6F6yJNT8i8oaGOJ0MwngysM3ET6CbnEr
gI/x06FiFXb+D8XEhb+OYAvLXFXwUmOWlZumSug9LrvFEQIzl1qLkSA/7QDaK9ns
paE63SUc5J7zuqn8CuyyistxNQ8slDrNnM2wkrCl7hU4aQ==
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:19:55 2025 by rpki-client