Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/51195615-aa01-4b44-ab00-63024ac9ba29.roa
File: 51195615-aa01-4b44-ab00-63024ac9ba29.roa (raw, json)
Hash identifier: fT7ZPEXpvQ1EFWhYPZtac8MsQon8wIejOs7DZpIRM+w=
Subject key identifier: 23:AB:7A:CD:63:7F:05:1D:64:AC:3C:82:21:08:69:EC:08:69:E0:19
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1D737BDD273F46405BA86BEF76AC6CA5EF0DC98A
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/51195615-aa01-4b44-ab00-63024ac9ba29.roa
Signing time: Wed 05 Aug 2026 02:00:10 +0000
ROA not before: Wed 05 Aug 2026 02:00:10 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.224.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:73:7b:dd:27:3f:46:40:5b:a8:6b:ef:76:ac:6c:a5:ef:0d:c9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:10 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=1da4023c00d1beb6742000eff185a378cf878f78c30d2c0ccd85b5512a779c55, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:28:5d:e7:cc:ec:1b:c3:ae:fd:62:12:a4:
21:a6:cc:2c:f6:b7:4c:a0:00:7d:bc:44:80:64:ca:
d0:f3:6b:b3:5e:9e:f2:17:cc:ca:8c:36:82:37:d3:
57:be:92:96:bc:e2:6c:46:c9:72:ca:d4:19:4b:3e:
23:0f:e9:e0:e1:f7:8e:ee:04:d5:5f:3d:16:d5:a7:
ca:97:f9:af:da:3f:65:2f:86:00:ac:2f:41:e7:cf:
43:ff:4c:18:02:95:08:f9:b8:61:15:fb:47:f7:94:
50:70:a1:3f:c7:b7:38:8f:29:24:95:c9:4d:45:81:
f5:32:0c:85:0c:29:85:20:f8:2b:82:0e:26:bc:2b:
f4:9e:be:79:62:e6:13:b2:c8:3b:3e:dd:e6:ae:d4:
05:f8:0e:8b:7d:8a:e9:dd:6d:fe:a6:42:0b:98:ae:
2b:00:6a:3e:97:b3:f1:53:ad:b8:2f:83:06:08:74:
7f:1f:da:73:e4:ba:22:e1:83:97:37:f0:ae:5a:50:
4b:06:a0:a1:60:ab:68:9d:1a:2f:aa:98:00:07:a8:
d0:48:d8:0e:89:03:6c:24:7b:33:2f:6c:b6:13:5c:
82:c0:9e:cd:d9:fa:83:75:8a:64:8b:42:cd:c4:c1:
71:e2:84:e2:a3:83:29:af:6a:63:58:de:af:81:6a:
8b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AB:7A:CD:63:7F:05:1D:64:AC:3C:82:21:08:69:EC:08:69:E0:19
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/51195615-aa01-4b44-ab00-63024ac9ba29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.196.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:af:fd:14:95:a7:28:dc:dc:c7:3f:e1:65:ef:79:da:b2:e0:
62:df:f4:ea:e3:97:46:20:59:a1:4f:bc:61:be:43:97:c4:43:
81:71:50:f5:21:e6:cb:6c:9d:b8:87:cd:ca:85:c1:de:93:c7:
c8:d0:fb:17:56:fc:82:be:1b:26:43:40:bf:3c:f5:24:bc:f3:
51:90:4d:cd:c2:39:67:e3:b2:7f:3e:b2:ae:fb:a1:33:a7:ae:
c3:bd:cf:87:a9:79:ca:e4:3f:ac:6b:89:29:9d:fe:78:b1:fa:
60:36:6f:65:a6:b5:a4:c2:0a:27:90:b6:e5:ea:4b:12:a7:df:
b4:ce:58:25:8b:ba:6a:49:d4:6b:f5:51:07:13:7f:f0:0b:65:
ba:a0:03:2a:ae:5a:f3:f0:ad:26:db:ee:c7:20:4f:df:96:5d:
ee:65:34:30:32:3a:4f:93:30:38:46:7c:32:70:96:db:65:36:
d9:6f:56:cf:99:09:89:4c:8e:88:b1:e9:09:8b:5d:fb:c9:04:
e3:d7:01:44:8b:61:39:d8:9a:d6:50:a2:b7:85:58:12:1b:c2:
28:60:93:19:65:6e:6c:86:20:c7:f0:a5:5b:7b:2a:05:f1:e1:
eb:04:9d:e7:07:cb:77:30:22:59:42:e8:ec:4a:40:01:8f:2a:
e5:92:2b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:16:16 2026 by rpki-client