Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0439adea-88e8-466c-b9f4-4670fc14d494.roa
File: 0439adea-88e8-466c-b9f4-4670fc14d494.roa (raw, json)
Hash identifier: 7/Ml17C9852TBKnqiX3Pg4vXBzaivsnv8aW8DOwxBU0=
Subject key identifier: BF:B0:97:D5:8F:81:CE:6F:23:41:06:2B:11:73:3C:52:7D:46:B6:E3
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5025CAE0ACF54136428D7D968307C9F0EB681511
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0439adea-88e8-466c-b9f4-4670fc14d494.roa
Signing time: Wed 12 Aug 2026 20:33:24 +0000
ROA not before: Wed 12 Aug 2026 20:33:24 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.172.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:25:ca:e0:ac:f5:41:36:42:8d:7d:96:83:07:c9:f0:eb:68:15:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:33:24 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=241af87c30253ec22da449247b77e1bdc64271c6550c4d9e202695ddf7e883bb, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:c8:a9:99:2f:94:d4:4e:13:e9:5b:2e:e3:
d2:64:c8:b2:e7:ed:8b:29:4a:25:8e:f3:29:aa:35:
22:a6:10:99:be:23:29:01:19:0e:e9:69:15:e4:7c:
4b:93:1e:50:8b:4e:0a:60:a9:c9:dc:57:49:04:0f:
01:71:e2:22:d6:77:b7:53:fe:de:00:c3:80:dc:7b:
7c:c2:ce:0a:79:35:f9:12:c7:74:77:32:a4:8a:9f:
c8:31:5f:7d:6f:b5:29:28:07:36:cb:27:f9:d6:0a:
88:eb:91:67:02:5f:24:d2:d1:91:77:13:49:ea:64:
1a:b7:8e:cc:4f:11:ec:a4:75:a7:9a:46:aa:27:32:
9e:b1:cc:7a:4b:42:59:82:f1:91:ec:ac:8e:3d:a3:
74:a3:5c:ce:11:03:4b:41:9f:1c:07:ed:c8:e5:37:
79:a5:87:dd:b1:b8:80:91:32:45:7a:78:a1:95:78:
2f:06:fa:21:d9:1f:fd:bb:f3:a0:25:9e:4c:2a:07:
5e:47:26:68:65:7a:56:7f:b4:9c:a8:65:11:d4:ad:
cd:0e:0c:98:3b:c3:27:4e:87:c9:19:05:10:2d:5c:
50:ed:ef:e9:15:76:86:2b:6a:5d:97:81:99:88:cc:
44:ab:85:88:70:48:de:34:5f:9c:fa:3f:3d:e4:55:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B0:97:D5:8F:81:CE:6F:23:41:06:2B:11:73:3C:52:7D:46:B6:E3
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0439adea-88e8-466c-b9f4-4670fc14d494.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.172.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c7:cf:69:9d:4d:1f:a9:1a:34:1a:01:57:1b:4d:dd:68:3b:74:
70:44:95:5a:49:49:5b:47:c2:d6:f3:d2:61:1b:6b:6a:4b:96:
1c:e9:98:8b:a6:43:db:c3:42:e7:49:a2:57:c9:2a:14:80:73:
12:ae:08:bb:4e:2a:2e:bf:cf:bd:eb:79:5d:23:25:fb:5f:2e:
3e:f2:3e:a0:3c:0f:78:e2:6c:c2:89:81:be:f1:e3:c8:2f:13:
34:5a:b3:7f:31:66:40:3e:d3:05:56:42:5c:1e:8b:94:73:3a:
37:81:26:38:62:b0:e0:00:3c:e2:8d:0b:b8:cc:50:d0:bc:1d:
7f:79:6e:03:66:63:3b:53:ec:f9:5e:84:83:af:f1:32:4a:7c:
ec:45:df:be:93:c5:04:90:35:23:ab:aa:8e:01:46:12:8f:3f:
24:66:25:1d:da:b2:78:b1:89:cc:4e:4d:eb:3c:51:ae:17:40:
db:0c:40:ac:21:d3:7e:f2:0f:44:04:7a:c5:11:e0:db:50:69:
55:fd:94:f4:13:ef:eb:46:a8:e1:93:93:13:ba:be:5d:1b:72:
9c:59:b3:9a:70:d0:df:ff:31:99:19:53:3e:00:8c:26:16:3f:
36:13:8a:f0:77:d7:8c:82:d9:7a:85:e3:0c:ef:38:cd:18:7e:
d0:02:30:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:08 2026 by rpki-client