Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4ba2e613-2f39-43d0-bd95-5a21ce239ff0.roa
File: 4ba2e613-2f39-43d0-bd95-5a21ce239ff0.roa (raw, json)
Hash identifier: 3oXPAboB7vnx8R4HlBPKXNV04t+jGTFnMLB78+zctTU=
Subject key identifier: E5:95:A8:59:D7:D8:A6:6C:11:E3:D9:17:46:D3:BA:8B:9E:9E:72:CA
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 0F613626C539223E33D1A2F4E36CE59490EA339A
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4ba2e613-2f39-43d0-bd95-5a21ce239ff0.roa
Signing time: Wed 05 Aug 2026 02:00:06 +0000
ROA not before: Wed 05 Aug 2026 02:00:06 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.224.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:61:36:26:c5:39:22:3e:33:d1:a2:f4:e3:6c:e5:94:90:ea:33:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:06 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=8292d9c8f886649ae7ddf953f83aae033e5e94981b06b000d672e047acdd2af1, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b2:25:4a:fa:34:f0:99:dc:e2:e9:da:16:60:
0a:d2:76:c4:f9:94:de:22:38:cd:7d:53:cc:e6:78:
e4:e0:3e:85:e2:e9:8a:da:be:cc:0c:32:a9:70:5c:
71:a4:c2:01:e1:7d:20:bb:2b:a0:ef:20:13:95:d6:
20:59:6c:5f:74:5f:21:6d:dd:58:8a:ab:b1:54:f1:
2c:55:c3:db:75:96:c1:9c:39:29:35:d6:1b:17:d8:
1e:28:90:83:8a:41:b5:bb:82:e3:ff:d3:f7:c6:3a:
f9:e6:f2:45:66:48:99:52:3a:cf:31:ed:06:7d:c4:
2f:0d:67:9f:ba:8b:bf:e0:49:a1:db:6f:e9:a2:b5:
a0:f2:3c:4f:c6:2d:03:e4:26:0e:e0:0c:30:b0:f1:
ae:ee:4a:35:09:82:4a:c7:89:6c:74:21:63:d9:d5:
d7:13:ba:11:4d:b7:c9:60:20:32:06:e4:17:cd:a7:
6d:75:c1:bc:d5:e3:5f:e9:e8:32:a2:db:99:07:87:
2d:c4:b6:75:ba:93:1e:35:b4:6a:ff:c8:f8:35:b1:
b3:92:83:2d:9e:07:f3:c0:3c:a9:81:51:fc:b6:d4:
2e:42:55:36:fa:70:f9:38:2b:7b:20:09:f8:f2:70:
12:c8:aa:3b:6a:c1:6c:5f:2b:de:e9:14:e8:6b:85:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:95:A8:59:D7:D8:A6:6C:11:E3:D9:17:46:D3:BA:8B:9E:9E:72:CA
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4ba2e613-2f39-43d0-bd95-5a21ce239ff0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.182.0/23
Signature Algorithm: sha256WithRSAEncryption
79:9c:8a:2a:bb:71:8d:d8:49:52:34:2e:33:e7:2e:b9:0d:85:
22:a2:2a:67:62:67:4b:8a:9b:68:c0:3a:43:5f:df:1f:1c:b0:
c0:0c:ae:4d:03:c1:39:70:31:1c:1a:fd:15:b0:98:64:51:56:
8f:ae:10:23:48:cd:3c:be:2f:a6:1d:86:26:a9:ea:8d:5f:76:
16:e5:88:ba:a7:c6:fd:b5:ce:ad:5f:0c:07:25:1a:72:82:3e:
c2:db:22:fb:49:1c:4d:13:f3:13:6e:55:35:d9:29:0f:ba:fb:
b6:28:03:da:33:f0:79:f7:0b:fe:f3:49:43:a5:17:da:7d:47:
df:38:83:d3:53:f3:73:0f:2f:08:f3:b1:5d:87:dc:97:81:88:
71:9d:64:85:9b:71:7e:5d:8b:6a:0b:a7:f5:53:8b:29:6d:7e:
ad:2e:cf:80:d1:dd:04:c0:1c:fb:0d:6b:06:3e:ae:61:99:e7:
38:a3:56:1c:92:b5:4c:d8:a6:9d:f7:23:d9:40:34:93:61:de:
0d:63:68:f8:c2:31:4e:de:77:1e:d5:2c:67:1a:cf:78:3d:7a:
79:48:8d:92:6c:02:cd:e8:36:b6:06:a4:00:21:7f:42:d4:d1:
c7:d9:88:6a:77:29:c2:04:b3:42:ad:69:55:8b:d3:2e:de:71:
af:f2:10:78
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUD2E2JsU5Ij4z0aL042zllJDqM5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MDUwMjAwMDZaFw0yNjExMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQDgyOTJkOWM4Zjg4NjY0OWFlN2RkZjk1M2Y4M2FhZTAzM2U1ZTk0OTgxYjA2
YjAwMGQ2NzJlMDQ3YWNkZDJhZjExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJayJUr6NPCZ3OLp2hZgCtJ2xPmU3iI4zX1TzOZ45OA+heLpitq+zAwyqXBc
caTCAeF9ILsroO8gE5XWIFlsX3RfIW3dWIqrsVTxLFXD23WWwZw5KTXWGxfYHiiQ
g4pBtbuC4//T98Y6+ebyRWZImVI6zzHtBn3ELw1nn7qLv+BJodtv6aK1oPI8T8Yt
A+QmDuAMMLDxru5KNQmCSseJbHQhY9nV1xO6EU23yWAgMgbkF82nbXXBvNXjX+no
MqLbmQeHLcS2dbqTHjW0av/I+DWxs5KDLZ4H88A8qYFR/LbULkJVNvpw+TgreyAJ
+PJwEsiqO2rBbF8r3ukU6GuF6TsCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTllahZ
19imbBHj2RdG07qLnp5yyjAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NGJhMmU2MTMtMmYzOS00M2QwLWJkOTUtNWEyMWNlMjM5ZmYwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATPgtjAN
BgkqhkiG9w0BAQsFAAOCAQEAeZyKKrtxjdhJUjQuM+cuuQ2FIqIqZ2JnS4qbaMA6
Q1/fHxywwAyuTQPBOXAxHBr9FbCYZFFWj64QI0jNPL4vph2GJqnqjV92FuWIuqfG
/bXOrV8MByUacoI+wtsi+0kcTRPzE25VNdkpD7r7tigD2jPwefcL/vNJQ6UX2n1H
3ziD01Pzcw8vCPOxXYfcl4GIcZ1khZtxfl2Lagun9VOLKW1+rS7PgNHdBMAc+w1r
Bj6uYZnnOKNWHJK1TNimnfcj2UA0k2HeDWNo+MIxTt53HtUsZxrPeD16eUiNkmwC
zeg2tgakACF/QtTRx9mIancpwgSzQq1pVYvTLt5xr/IQeA==
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:26 2026 by rpki-client