Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/409e157b-4120-4d9a-987d-302a50987746.roa
File: 409e157b-4120-4d9a-987d-302a50987746.roa (raw, json)
Hash identifier: jWbPFKGZNC0OXW/2E6qkCzBvIB5yWNDvW7phy7QQbjk=
Subject key identifier: 7A:8E:67:F8:99:C7:D5:BF:14:8B:D5:76:B7:31:89:9A:D9:C0:5E:96
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 38BDC85661ADC1173BD61A12DBE9DEC770B909F4
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/409e157b-4120-4d9a-987d-302a50987746.roa
Signing time: Wed 05 Aug 2026 02:00:23 +0000
ROA not before: Wed 05 Aug 2026 02:00:23 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:bd:c8:56:61:ad:c1:17:3b:d6:1a:12:db:e9:de:c7:70:b9:09:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:23 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=bb1acedd9ebc0aaf79e29fd6f1ea55727f24590f65d4a90e870f246c522eb500, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:6b:b2:9e:a8:8c:70:e2:ef:65:46:48:ff:
9a:55:c4:7f:34:08:8f:9d:2b:f9:a1:90:44:f6:a5:
1e:66:27:6d:6a:ee:39:55:67:a2:8e:d5:c8:3a:d0:
7d:43:13:5b:de:b5:1d:83:1c:b0:68:8d:9d:65:2e:
60:8a:23:45:2d:74:45:1a:88:54:a8:41:94:30:32:
96:4e:02:37:ab:bf:b9:39:5b:50:0e:62:88:d0:07:
a3:a1:0a:e6:d1:a5:29:72:46:a2:b9:4c:5a:76:39:
46:14:36:dc:8d:cf:77:65:18:3e:ea:3d:aa:0d:05:
0d:b8:0f:04:58:6e:3d:54:8a:f1:a5:bb:ad:bb:50:
23:4f:76:ca:16:3a:ed:01:b0:7a:60:75:a9:ba:99:
e4:94:7a:82:70:33:9d:29:ed:f7:9d:d9:93:0e:c1:
9f:31:43:24:f1:6b:fe:58:9c:34:ba:14:ef:38:80:
a1:8c:6c:67:24:8b:60:06:4c:e3:36:e0:fe:52:15:
62:55:c4:96:90:f3:99:95:ea:b3:aa:be:d7:c4:fd:
b1:66:b7:6b:bf:0e:a7:df:b1:9d:23:c1:cd:9e:98:
d0:bc:a9:ab:c0:fe:be:e8:dd:a4:e2:e9:36:48:1b:
e5:ed:c4:6a:93:6c:0c:22:de:00:b9:59:99:0a:fa:
14:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8E:67:F8:99:C7:D5:BF:14:8B:D5:76:B7:31:89:9A:D9:C0:5E:96
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/409e157b-4120-4d9a-987d-302a50987746.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.128.0/17
Signature Algorithm: sha256WithRSAEncryption
47:d8:72:f8:f7:b9:68:4b:40:fd:23:ea:72:2a:97:49:01:27:
0f:0e:4c:ae:60:84:14:e6:aa:1c:ed:6d:9f:6a:27:31:63:de:
c3:66:70:f4:ea:bf:a4:c8:76:5c:87:9a:6e:a4:51:ac:73:fb:
ae:f8:32:ab:c7:06:7a:1c:8e:56:41:48:fa:13:37:f8:d3:67:
79:b0:ca:f9:33:7d:e2:7d:95:3e:b0:6d:88:c8:f9:b2:07:b6:
95:9d:66:a8:8a:46:c4:22:21:ad:a2:94:70:e4:a7:fd:93:d4:
7c:1f:ec:89:43:5a:2f:57:73:61:a1:64:33:4d:52:58:63:c4:
5d:75:76:1b:b6:2f:a8:a2:e9:32:69:b7:92:7b:f3:d2:4b:1c:
fe:c1:da:34:c7:5f:98:bd:b6:e1:67:2f:62:e5:7b:25:82:00:
f3:dd:b2:8d:d1:ec:18:16:9c:33:e6:b2:df:58:e7:6d:d3:29:
f8:fc:83:53:df:41:71:f1:1a:34:91:44:c6:ee:f8:86:1a:98:
3a:00:32:f7:c4:d1:33:c6:1f:e8:06:59:e1:f2:be:b3:f5:3c:
e6:74:e2:41:62:ed:e6:50:5b:18:43:ac:cc:2e:58:0a:b7:34:
9b:ed:65:87:5c:1f:34:1a:6b:50:9f:0a:a9:6e:b9:7a:63:77:
d7:71:df:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:42:54 2026 by rpki-client