Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4ba2e613-2f39-43d0-bd95-5a21ce239ff0.roa
File: 4ba2e613-2f39-43d0-bd95-5a21ce239ff0.roa (raw, json)
Hash identifier: JuOoO9RZmcNj/uZBRFvNPm0nP1aMJF2J1JZ5shvdd70=
Subject key identifier: 8B:46:A8:A2:9E:79:53:86:E8:D7:B5:64:C1:B2:C9:7E:51:0C:8F:17
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5299BB645B7BA14BCE02B1AF5CEC97DC32300BF3
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4ba2e613-2f39-43d0-bd95-5a21ce239ff0.roa
Signing time: Sun 17 May 2026 02:00:24 +0000
ROA not before: Sun 17 May 2026 02:00:24 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.224.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:99:bb:64:5b:7b:a1:4b:ce:02:b1:af:5c:ec:97:dc:32:30:0b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 17 02:00:24 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=a5e9ec6c041c62c8ad4c484e69d645f6c5455db79c27ddbd408a7b75f9de0e07, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:2f:af:34:16:ab:a4:a2:ab:e1:08:40:3b:
29:eb:ab:22:0c:94:96:1b:06:7e:43:58:06:ed:3b:
61:15:0c:f3:f1:17:e1:30:7f:69:f2:8c:d2:3e:9e:
02:90:a1:bd:7a:91:1e:48:fc:74:b8:5d:de:97:c7:
b5:17:96:d1:b3:4c:57:45:b3:af:8c:b4:72:46:93:
a6:30:7a:ff:35:c9:68:07:8f:2c:db:5f:fd:b7:fc:
0a:84:8a:0f:9f:99:1f:74:9f:47:6e:c6:37:22:93:
13:04:a6:1b:12:43:17:7a:98:31:54:64:56:d6:7d:
61:79:b5:86:76:83:26:df:e8:54:c7:57:96:6d:31:
e6:75:24:65:8e:48:88:dd:f8:ba:08:59:90:2b:11:
1b:f7:9b:61:bf:15:0c:24:ba:18:a1:b6:4e:e6:cb:
b2:3e:c2:74:fb:9d:16:50:3b:5d:e6:9e:ea:c7:ad:
4c:8b:69:22:98:7d:ab:d6:32:ba:8d:e6:c5:d4:b6:
fd:2f:a6:8b:ab:19:30:be:c2:e7:19:42:96:66:cb:
2d:d2:10:cb:29:1d:08:57:13:74:aa:60:b2:c9:2f:
b7:7c:9d:4a:3e:33:e9:f5:c9:72:70:e2:45:51:0f:
d3:b3:ca:3a:f6:c1:65:ac:5b:8a:10:bf:30:dc:4f:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:46:A8:A2:9E:79:53:86:E8:D7:B5:64:C1:B2:C9:7E:51:0C:8F:17
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4ba2e613-2f39-43d0-bd95-5a21ce239ff0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.182.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:4e:85:bd:dd:fa:43:02:1e:53:4c:b8:3f:a5:f9:d4:5a:bf:
0d:15:3c:74:a2:a4:77:66:4c:a0:47:be:a9:73:90:25:06:fd:
b8:d1:99:34:99:20:30:9c:11:72:11:59:9f:a6:74:21:06:50:
e6:45:95:48:1e:0f:1d:66:18:cf:94:27:3a:1d:41:85:ae:d7:
b1:72:3b:f3:6c:06:55:e3:d5:d4:ca:a7:31:e4:0c:09:1c:b7:
ce:4a:be:af:ff:a3:34:49:58:54:94:be:c7:67:40:93:7d:82:
45:0a:99:84:9b:78:9b:11:dc:0b:c2:57:76:17:29:43:fe:32:
8e:9a:8e:46:e7:44:39:d8:7b:a8:34:cf:75:1e:1b:b6:1b:04:
c0:4a:4e:e2:f5:71:54:3c:c4:af:0a:e4:04:a9:48:b9:c5:8b:
0a:38:dd:a0:a5:84:e5:75:e7:1b:6a:ee:c0:44:18:ab:31:02:
0c:76:e3:0e:0c:81:aa:7f:75:46:30:58:14:fc:7d:40:11:77:
d8:9a:6e:b8:ba:b4:bb:88:18:4c:03:56:7c:db:46:79:58:2d:
65:de:2f:1b:d3:72:ec:40:24:20:33:93:23:9f:8e:2f:91:e7:
fe:5c:58:a0:95:0a:50:95:59:49:e8:cb:f2:e5:c8:ef:99:50:
00:b9:58:85
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUUpm7ZFt7oUvOArGvXOyX3DIwC/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA1MTcwMjAwMjRaFw0yNjA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQGE1ZTllYzZjMDQxYzYyYzhhZDRjNDg0ZTY5ZDY0NWY2YzU0NTVkYjc5YzI3
ZGRiZDQwOGE3Yjc1ZjlkZTBlMDcxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALvhL680FqukoqvhCEA7KeurIgyUlhsGfkNYBu07YRUM8/EX4TB/afKM0j6e
ApChvXqRHkj8dLhd3pfHtReW0bNMV0Wzr4y0ckaTpjB6/zXJaAePLNtf/bf8CoSK
D5+ZH3SfR27GNyKTEwSmGxJDF3qYMVRkVtZ9YXm1hnaDJt/oVMdXlm0x5nUkZY5I
iN34ughZkCsRG/ebYb8VDCS6GKG2TubLsj7CdPudFlA7Xeae6setTItpIph9q9Yy
uo3mxdS2/S+mi6sZML7C5xlClmbLLdIQyykdCFcTdKpgsskvt3ydSj4z6fXJcnDi
RVEP07PKOvbBZaxbihC/MNxPtDkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSLRqii
nnlThujXtWTBssl+UQyPFzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NGJhMmU2MTMtMmYzOS00M2QwLWJkOTUtNWEyMWNlMjM5ZmYwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATPgtjAN
BgkqhkiG9w0BAQsFAAOCAQEAnU6Fvd36QwIeU0y4P6X51Fq/DRU8dKKkd2ZMoEe+
qXOQJQb9uNGZNJkgMJwRchFZn6Z0IQZQ5kWVSB4PHWYYz5QnOh1Bha7XsXI782wG
VePV1MqnMeQMCRy3zkq+r/+jNElYVJS+x2dAk32CRQqZhJt4mxHcC8JXdhcpQ/4y
jpqORudEOdh7qDTPdR4bthsEwEpO4vVxVDzErwrkBKlIucWLCjjdoKWE5XXnG2ru
wEQYqzECDHbjDgyBqn91RjBYFPx9QBF32JpuuLq0u4gYTANWfNtGeVgtZd4vG9Ny
7EAkIDOTI5+OL5Hn/lxYoJUKUJVZSejL8uXI75lQALlYhQ==
-----END CERTIFICATE-----
Generated at Fri May 22 16:04:22 2026 by rpki-client