Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/49b7e415-8d16-4bff-bd30-86cbe03fb42e.roa
File: 49b7e415-8d16-4bff-bd30-86cbe03fb42e.roa (raw, json)
Hash identifier: CLpGedln62nIbwFUN3VXIHqFgI2gFFiJ+Y8jBzJh+0g=
Subject key identifier: 92:01:EE:C2:84:9E:96:57:65:8A:93:BB:6E:31:AB:0D:23:85:24:83
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 648A1B5A1E7378AEA20AE9FF9B68E2843DE70C52
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/49b7e415-8d16-4bff-bd30-86cbe03fb42e.roa
Signing time: Wed 12 Aug 2026 20:18:04 +0000
ROA not before: Wed 12 Aug 2026 20:18:04 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:8a:1b:5a:1e:73:78:ae:a2:0a:e9:ff:9b:68:e2:84:3d:e7:0c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:18:04 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=fb586d82c0a50733e22f73b8aae83b27c2ba61f0d4c9ba9a1861dec2da20a8bf, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:15:a8:0f:32:f7:68:ea:08:9f:88:76:8f:
ac:a6:c7:60:14:25:83:b7:51:8a:fd:a0:98:91:11:
9c:96:a9:95:2c:2b:55:0f:25:95:73:e7:43:d1:2e:
84:d8:56:3f:66:b7:97:7d:b8:e2:d7:eb:90:06:b7:
4a:2a:e9:62:2a:36:d7:c1:f3:c9:ee:06:6f:8f:e4:
09:64:04:a2:15:5b:25:af:6c:47:11:1e:e7:75:68:
87:7b:0b:cb:0c:2d:8f:d3:31:a9:a2:9a:00:db:5d:
fa:7f:f2:fc:f9:8e:aa:4f:e8:8d:38:91:4c:1a:c9:
3c:e2:46:fe:fa:3c:2f:88:ad:d9:cc:e6:f6:53:1c:
2d:6b:e4:95:51:c0:68:17:7f:fe:82:74:f1:d9:82:
09:9f:7f:70:56:f6:dd:ee:fd:8b:16:c1:8c:85:47:
ba:e8:e9:b3:7f:6a:63:dc:7b:7e:b9:95:48:68:1a:
4e:c9:06:a9:c3:a0:ad:88:e1:1a:0b:77:25:74:51:
b5:1b:94:8f:84:fd:dd:a4:47:be:10:9a:ba:72:0b:
b7:54:b7:33:ca:c8:c0:d1:15:dc:54:57:08:bd:91:
66:3e:af:86:df:d5:61:b4:65:b7:67:77:2b:e2:0c:
78:dc:8a:b8:31:fe:91:3b:cd:c6:a6:df:39:46:67:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:01:EE:C2:84:9E:96:57:65:8A:93:BB:6E:31:AB:0D:23:85:24:83
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/49b7e415-8d16-4bff-bd30-86cbe03fb42e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.136.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:ba:e7:36:01:32:82:8a:65:83:82:78:9f:ce:19:d2:f3:d9:
12:61:62:56:bf:77:6c:4b:e3:18:d0:92:4c:ec:44:3e:03:8d:
a8:2b:cc:31:4e:e5:18:28:01:dc:bf:7c:05:f9:e2:08:77:21:
48:04:1a:6e:b3:50:ff:ce:6b:8b:1f:05:63:27:4e:95:cc:9f:
e3:71:b1:84:c8:ff:68:24:c1:e8:90:03:e6:a4:ad:4e:c8:a8:
b9:b4:c6:c0:59:81:6a:2d:18:9b:b8:7a:19:cd:9e:df:ca:49:
d6:8e:5d:29:30:b5:f0:1e:67:45:c0:85:a7:22:f4:68:9e:8b:
45:3c:97:f9:6c:c4:f2:18:3f:c0:9b:c7:62:2c:f3:2f:f2:af:
5c:c7:e5:00:ba:43:68:e5:8a:59:c5:83:b0:a9:97:18:1d:ec:
94:00:24:f6:cd:32:b6:8e:95:b8:b9:c9:d4:00:86:b8:d7:83:
16:41:7b:d8:53:ac:c2:8c:c0:a2:62:7f:3e:e0:6b:bc:30:96:
5d:9d:71:24:d5:12:f6:37:66:ff:fe:5c:9a:97:cd:74:9b:71:
9b:4b:b1:c1:9b:26:c8:ea:83:7c:eb:e2:cd:bb:3a:39:17:65:
f7:53:6d:2c:2c:ca:b3:d3:e7:0b:9a:81:8b:9c:6a:06:f7:7b:
e6:8c:b9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:06 2026 by rpki-client