Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1f22d04f-95b6-487f-8802-0f8853f6cf88.roa
File: 1f22d04f-95b6-487f-8802-0f8853f6cf88.roa (raw, json)
Hash identifier: Dvemg2KREYzOwsx1YvtiM8huqw9zDA2d0GPN1//ZTAI=
Subject key identifier: EC:A6:C6:D3:11:72:19:B2:B0:86:11:A7:7C:F3:A3:F8:8D:82:87:E7
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 31DA7B84912BF26494CD8721DDE7B9C72634BF40
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1f22d04f-95b6-487f-8802-0f8853f6cf88.roa
Signing time: Wed 12 Aug 2026 20:18:05 +0000
ROA not before: Wed 12 Aug 2026 20:18:05 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:da:7b:84:91:2b:f2:64:94:cd:87:21:dd:e7:b9:c7:26:34:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:18:05 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=cb60e62b238aafcd1357fef9028ddff170b714a0b5fc4ed1382583c234edbe82, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:45:41:7f:a5:6d:58:7f:91:01:2a:44:85:
b4:23:bf:7d:c6:a8:dd:85:19:91:d4:19:20:51:f9:
96:7c:c7:cc:e3:4e:bd:24:d0:b9:b7:dd:0c:11:be:
48:43:2e:80:f8:f4:4b:74:ee:84:4a:21:b7:57:0f:
7c:a7:96:d7:b9:8e:39:b1:a0:82:f5:1e:55:46:71:
30:48:fb:1c:73:f7:e9:e6:dc:5f:93:e9:42:ac:58:
f5:23:78:32:ea:29:13:91:c1:13:e4:34:3c:06:2f:
52:fe:4e:43:27:c9:fa:2b:c2:31:04:f1:3a:57:77:
8a:6d:eb:1a:70:76:0c:d3:73:25:05:00:26:2e:e3:
6c:21:24:8c:17:f1:6f:f1:d0:d0:12:4f:98:ae:7f:
c0:2a:17:a0:cb:10:84:69:1e:8e:69:b8:ff:61:f1:
59:f3:17:e6:89:9b:c9:d4:47:97:0d:56:19:f3:49:
ce:9d:17:32:ac:71:d4:a4:06:ad:1c:07:a4:80:a3:
66:93:6b:f5:8e:ae:bc:3d:ed:57:5b:ff:a2:90:3c:
09:16:75:92:36:7a:e3:f3:62:97:39:3f:e1:97:f4:
b4:49:57:95:4f:f7:f1:0e:16:a6:6d:37:a1:f2:ab:
87:9d:f5:33:02:c2:9c:ef:61:1b:9d:84:80:e6:97:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A6:C6:D3:11:72:19:B2:B0:86:11:A7:7C:F3:A3:F8:8D:82:87:E7
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1f22d04f-95b6-487f-8802-0f8853f6cf88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.250.0/24
Signature Algorithm: sha256WithRSAEncryption
39:16:c8:1a:09:af:83:7e:c3:02:ba:8f:bd:fc:a9:0d:1f:6a:
0a:bb:57:20:66:79:97:74:ca:8b:f2:1c:dc:94:22:a5:db:f0:
69:fd:7a:9c:ab:39:7d:b4:c5:d7:4e:b3:77:79:95:a4:54:64:
b3:71:3c:84:db:0b:68:9b:be:98:bb:71:32:d9:d8:66:fa:36:
c7:30:06:70:a5:ef:1d:2d:8f:21:a3:3f:17:20:93:73:8b:30:
46:e5:ad:f0:da:54:3f:58:c1:7e:bb:7f:fd:10:c3:29:68:dc:
46:df:50:3e:5a:0f:dd:b9:24:51:05:a6:23:4a:09:a5:e4:e9:
99:70:df:e1:6d:d4:be:18:33:7d:ef:6f:06:33:55:d2:5f:3a:
4a:4c:3b:e6:78:06:a0:96:11:0c:1d:3a:1a:85:c7:3a:f7:89:
a2:e0:f3:85:63:c4:b2:b8:4e:14:95:95:65:81:de:ff:34:33:
53:9c:df:cf:c7:28:5f:a5:68:11:67:ea:9b:c8:11:62:f8:39:
ea:6f:4e:3e:ac:19:97:fa:7e:90:92:eb:ac:17:28:dd:27:57:
5f:ba:ab:4b:30:67:13:f0:43:4c:f6:4d:66:a3:38:f5:8c:56:
bd:07:b4:45:45:b0:47:df:55:d7:57:03:42:0b:3a:03:0e:5e:
ac:21:1a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:39 2026 by rpki-client