Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/16271914-dc77-4545-b526-a3ebfab5d63a.roa
File: 16271914-dc77-4545-b526-a3ebfab5d63a.roa (raw, json)
Hash identifier: j3AtD4yy+TmlPE4YaJ5bP9fOxG8Ch8IZwAv7jvA4jKE=
Subject key identifier: BB:26:A5:9F:CF:DB:49:FF:6A:4F:7F:4F:37:EF:13:EC:6B:66:6F:10
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 317C04D5FB3F6252D0F0A78937BD390AA3FAEB0C
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/16271914-dc77-4545-b526-a3ebfab5d63a.roa
Signing time: Wed 05 Aug 2026 02:00:07 +0000
ROA not before: Wed 05 Aug 2026 02:00:07 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.224.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:7c:04:d5:fb:3f:62:52:d0:f0:a7:89:37:bd:39:0a:a3:fa:eb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:07 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=25ba922f27e9e9fc54d6e8db7b518b6fe192e27c9be659c561642196dc9f681b, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:7f:25:3b:44:73:83:d3:4d:90:21:cb:f6:
dd:fa:88:55:2b:03:8d:f2:e7:b7:d7:93:73:28:3a:
fb:92:40:ba:6f:4e:15:f4:71:1c:04:67:e2:37:bd:
88:90:97:75:12:a7:eb:32:fb:05:c4:df:fd:18:79:
f3:dc:d9:29:00:3b:da:f2:38:d6:6a:43:e2:fa:c0:
51:c7:e5:9a:aa:62:ba:8d:9b:78:92:27:54:3c:58:
2d:ae:2e:58:02:e5:7b:29:99:39:bf:7e:59:2c:54:
2b:6d:1c:ec:06:6e:fc:96:de:e2:a9:fa:9f:23:9c:
e8:6e:7c:6b:e2:d1:11:b2:18:02:ce:6e:19:8d:84:
52:ac:3a:0b:cf:dc:3c:88:50:b3:69:62:69:35:0f:
fa:14:a7:1a:d0:11:c7:6f:1d:a5:a8:a7:9c:f2:cc:
f8:a7:83:99:4c:12:6b:2f:de:d7:04:87:1c:b0:35:
21:4d:95:5c:a9:1d:05:fb:9a:2e:76:cb:e6:9c:03:
35:ce:b1:e5:bc:e6:39:02:c6:67:26:51:b5:3b:9a:
3a:94:bd:41:2b:7a:32:3f:89:b5:44:57:b4:6d:5d:
30:6f:ae:80:b4:af:cc:1d:f9:15:55:98:5e:24:f6:
42:f7:18:38:8a:ba:49:9a:8d:33:c1:3d:45:70:0e:
79:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:26:A5:9F:CF:DB:49:FF:6A:4F:7F:4F:37:EF:13:EC:6B:66:6F:10
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/16271914-dc77-4545-b526-a3ebfab5d63a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.192.0/23
Signature Algorithm: sha256WithRSAEncryption
06:f8:0c:2b:14:08:8e:1c:30:34:28:ae:0d:af:7f:67:90:a3:
f2:4e:b7:2a:ef:bb:aa:6d:16:15:17:4c:d8:44:e4:cf:f6:d0:
83:d9:a1:ec:1d:7f:e1:a6:05:7d:93:5a:db:97:cb:16:7b:e8:
4a:fe:a3:2a:89:89:15:69:bd:c2:9c:49:06:d7:79:a1:fd:c8:
b4:e0:a8:3e:99:e7:6b:29:f4:ff:2c:4b:c3:91:2c:10:6f:a3:
ed:df:e4:ff:02:f6:74:46:fc:f8:f7:1f:cb:a9:df:78:c1:2d:
40:a3:b7:17:ff:0b:63:5d:e5:bf:b0:9b:ab:11:a1:63:22:04:
95:b8:d4:e2:16:59:03:c3:4b:3a:77:1c:40:0a:b4:74:bd:06:
82:fd:61:74:d2:8b:bc:cd:13:a6:d3:dc:68:25:89:6e:a0:98:
69:7a:49:61:96:14:f0:4b:26:2d:64:27:ff:03:05:78:f5:6e:
5f:1e:54:5f:99:53:d5:12:50:f2:41:4d:3e:1e:09:f6:79:88:
a1:bb:85:8b:29:66:7f:8c:0a:0e:95:de:1c:50:66:4b:b2:7a:
00:32:78:9b:fb:1f:1c:58:75:ad:c4:85:2c:c1:d3:a4:26:7a:
ba:ba:9b:16:c4:1b:30:3f:32:cf:b4:f3:1c:65:11:fd:60:c4:
82:3c:62:2f
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUMXwE1fs/YlLQ8KeJN705CqP66wwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MDUwMjAwMDdaFw0yNjExMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQDI1YmE5MjJmMjdlOWU5ZmM1NGQ2ZThkYjdiNTE4YjZmZTE5MmUyN2M5YmU2
NTljNTYxNjQyMTk2ZGM5ZjY4MWIxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALbpfyU7RHOD002QIcv23fqIVSsDjfLnt9eTcyg6+5JAum9OFfRxHARn4je9
iJCXdRKn6zL7BcTf/Rh589zZKQA72vI41mpD4vrAUcflmqpiuo2beJInVDxYLa4u
WALleymZOb9+WSxUK20c7AZu/Jbe4qn6nyOc6G58a+LREbIYAs5uGY2EUqw6C8/c
PIhQs2liaTUP+hSnGtARx28dpainnPLM+KeDmUwSay/e1wSHHLA1IU2VXKkdBfua
LnbL5pwDNc6x5bzmOQLGZyZRtTuaOpS9QSt6Mj+JtURXtG1dMG+ugLSvzB35FVWY
XiT2QvcYOIq6SZqNM8E9RXAOed8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBS7JqWf
z9tJ/2pPf0837xPsa2ZvEDAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
MTYyNzE5MTQtZGM3Ny00NTQ1LWI1MjYtYTNlYmZhYjVkNjNhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATPgwDAN
BgkqhkiG9w0BAQsFAAOCAQEABvgMKxQIjhwwNCiuDa9/Z5Cj8k63Ku+7qm0WFRdM
2ETkz/bQg9mh7B1/4aYFfZNa25fLFnvoSv6jKomJFWm9wpxJBtd5of3ItOCoPpnn
ayn0/yxLw5EsEG+j7d/k/wL2dEb8+Pcfy6nfeMEtQKO3F/8LY13lv7CbqxGhYyIE
lbjU4hZZA8NLOnccQAq0dL0Ggv1hdNKLvM0TptPcaCWJbqCYaXpJYZYU8EsmLWQn
/wMFePVuXx5UX5lT1RJQ8kFNPh4J9nmIobuFiylmf4wKDpXeHFBmS7J6ADJ4m/sf
HFh1rcSFLMHTpCZ6urqbFsQbMD8yz7TzHGUR/WDEgjxiLw==
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:41:23 2026 by rpki-client