Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/736aa60e-d4e2-4ca5-b96b-c64d8fa18dc1.roa
File: 736aa60e-d4e2-4ca5-b96b-c64d8fa18dc1.roa (raw, json)
Hash identifier: G4tXhJ8ugdwxNfa149OvsiwwWtMM7jXfDR/MgTJRYMc=
Subject key identifier: A8:8F:6A:DC:CA:7D:FE:E6:DF:B1:D7:64:6D:72:5D:4E:9A:74:74:FC
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 49EF99DD992DF776FD77F0435004A61D0B580D49
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/736aa60e-d4e2-4ca5-b96b-c64d8fa18dc1.roa
Signing time: Sun 17 May 2026 02:00:07 +0000
ROA not before: Sun 17 May 2026 02:00:07 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.224.186.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ef:99:dd:99:2d:f7:76:fd:77:f0:43:50:04:a6:1d:0b:58:0d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 17 02:00:07 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=9dccc5b7b86ef863d367ec5aecd15b85d451789705e78bfbe712c4703d5faeca, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:a8:96:75:d0:e1:c7:ba:25:3a:61:67:4a:
12:3f:87:b9:5b:7d:5c:3d:5f:51:1c:a4:dd:ef:f0:
83:38:86:25:ec:7f:1c:fa:a7:72:9d:0c:95:35:fd:
f7:51:dd:c6:66:f4:50:41:50:81:bf:34:c6:10:85:
74:f9:7b:49:d9:1b:c6:43:14:6b:11:9d:5b:21:bb:
db:ff:c7:f6:b6:07:14:08:4e:59:bc:e6:19:f6:bf:
39:e7:4b:e5:b3:61:45:4e:37:e8:ef:21:59:b6:71:
de:f7:bd:45:65:bc:32:91:dc:84:e3:43:f6:35:d5:
dd:61:4a:3b:ab:77:c0:c8:83:23:2f:d9:63:46:75:
41:5a:73:00:e0:24:54:7b:e2:f6:ff:8f:a7:ab:fd:
21:67:f0:b6:c0:8b:52:27:b9:e8:3e:50:7c:b9:8d:
8a:26:ed:74:1e:fa:b6:0c:c5:0e:8a:70:e2:99:b4:
f5:ce:4f:bb:24:0e:90:17:c0:e1:53:d5:d0:bc:7a:
e5:99:8a:4e:be:4a:7f:fb:fe:c0:e5:47:0d:7f:3c:
66:06:39:ce:d2:37:a7:53:30:c7:db:b0:a3:35:d1:
42:ff:c8:d5:44:f9:ef:4d:b9:52:e6:b7:53:b4:08:
85:79:f7:ba:71:c1:84:40:94:b5:c2:70:2b:27:48:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8F:6A:DC:CA:7D:FE:E6:DF:B1:D7:64:6D:72:5D:4E:9A:74:74:FC
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/736aa60e-d4e2-4ca5-b96b-c64d8fa18dc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.186.0/23
Signature Algorithm: sha256WithRSAEncryption
59:1f:a0:db:d6:3f:69:af:7d:71:8d:4a:5d:7d:e3:b6:25:ff:
8f:37:23:f7:24:25:c4:7a:39:ed:1a:01:d8:1a:f7:70:9c:6a:
6d:60:69:40:a1:31:dc:29:30:cc:85:90:4f:b3:a3:63:a6:7a:
19:14:5e:9a:71:fd:7a:71:31:b6:d8:ad:50:78:7f:23:5a:c5:
10:ee:44:c5:a0:f8:0a:cb:1f:b9:63:9b:79:6e:e4:f4:a4:b3:
80:62:f1:94:ba:08:be:87:8c:95:eb:c9:19:b8:15:e8:b8:32:
a6:ff:da:fc:57:5b:16:a8:8d:80:69:e4:6a:1b:ae:59:d5:9b:
af:cd:7e:92:57:46:90:f3:06:77:08:ce:cd:e7:1c:a1:8d:59:
5e:96:60:5c:6b:7a:88:f9:97:07:2d:7f:85:ef:da:2e:db:0d:
1b:6f:6e:5a:84:d9:2b:36:a2:7f:87:8a:b4:71:7d:26:28:8d:
54:15:8e:1e:74:58:8c:62:84:51:2f:38:f6:79:32:cc:1b:4e:
1f:b9:cc:00:29:61:a2:81:01:a8:1d:a8:9d:cb:d8:f8:4e:e5:
d3:8d:4e:e6:8b:5a:3e:b7:ca:c9:df:5c:5a:c9:ad:41:22:9b:
25:9b:fa:81:2c:10:99:1f:a0:a0:91:dd:43:eb:7c:e6:23:34:
0b:99:f2:8e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUSe+Z3Zkt93b9d/BDUASmHQtYDUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA1MTcwMjAwMDdaFw0yNjA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQDlkY2NjNWI3Yjg2ZWY4NjNkMzY3ZWM1YWVjZDE1Yjg1ZDQ1MTc4OTcwNWU3
OGJmYmU3MTJjNDcwM2Q1ZmFlY2ExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMUxqJZ10OHHuiU6YWdKEj+HuVt9XD1fURyk3e/wgziGJex/HPqncp0MlTX9
91Hdxmb0UEFQgb80xhCFdPl7SdkbxkMUaxGdWyG72//H9rYHFAhOWbzmGfa/OedL
5bNhRU436O8hWbZx3ve9RWW8MpHchOND9jXV3WFKO6t3wMiDIy/ZY0Z1QVpzAOAk
VHvi9v+Pp6v9IWfwtsCLUie56D5QfLmNiibtdB76tgzFDopw4pm09c5PuyQOkBfA
4VPV0Lx65ZmKTr5Kf/v+wOVHDX88ZgY5ztI3p1Mwx9uwozXRQv/I1UT57025Uua3
U7QIhXn3unHBhECUtcJwKydIz0kCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSoj2rc
yn3+5t+x12Rtcl1OmnR0/DAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
NzM2YWE2MGUtZDRlMi00Y2E1LWI5NmItYzY0ZDhmYTE4ZGMxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATPgujAN
BgkqhkiG9w0BAQsFAAOCAQEAWR+g29Y/aa99cY1KXX3jtiX/jzcj9yQlxHo57RoB
2Br3cJxqbWBpQKEx3CkwzIWQT7OjY6Z6GRRemnH9enExttitUHh/I1rFEO5ExaD4
CssfuWObeW7k9KSzgGLxlLoIvoeMlevJGbgV6Lgypv/a/FdbFqiNgGnkahuuWdWb
r81+kldGkPMGdwjOzeccoY1ZXpZgXGt6iPmXBy1/he/aLtsNG29uWoTZKzaif4eK
tHF9JiiNVBWOHnRYjGKEUS849nkyzBtOH7nMAClhooEBqB2oncvY+E7l041O5ota
PrfKyd9cWsmtQSKbJZv6gSwQmR+goJHdQ+t85iM0C5nyjg==
-----END CERTIFICATE-----
Generated at Fri May 22 16:04:32 2026 by rpki-client