Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/77e6bead-63ca-4fd0-a805-a35d7013e09e.roa
File: 77e6bead-63ca-4fd0-a805-a35d7013e09e.roa (raw, json)
Hash identifier: c+2Du+VtM2Tj+OWNWxJswZM2oOITCgqd47RfEI5bfgQ=
Subject key identifier: C3:CC:4C:D7:A5:E1:51:32:97:6F:BB:92:B4:19:79:B5:89:3A:DB:AE
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 0D134E885504F8A7DED5C805FC602BCD405E0BB6
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/77e6bead-63ca-4fd0-a805-a35d7013e09e.roa
Signing time: Wed 12 Aug 2026 20:48:00 +0000
ROA not before: Wed 12 Aug 2026 20:48:00 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.224.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:13:4e:88:55:04:f8:a7:de:d5:c8:05:fc:60:2b:cd:40:5e:0b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:48:00 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=72027356f3b20e66959bf2d4aef6fa00c2b9e5250be59608a33e07ec5ff8427f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:92:e4:46:3e:7d:d3:a2:14:3f:8f:42:61:
09:b3:9e:f8:da:23:99:3f:8b:f7:0b:f9:54:4e:90:
be:95:ec:03:54:f5:9c:92:34:b7:8f:c5:48:65:79:
57:af:1a:39:1c:52:75:80:b8:8e:63:0b:69:6d:ff:
61:c7:fd:1c:69:72:93:fc:fd:f0:c1:17:6d:b4:1c:
2d:c6:ee:e8:7c:7c:b4:78:92:02:d9:66:4b:34:e1:
8d:e9:5c:1d:ce:1e:28:f9:b2:dc:46:d7:a4:0f:71:
ce:60:bf:98:75:18:24:cc:a6:95:a1:92:63:7d:83:
b5:f0:29:13:a7:a4:18:ca:6a:a4:16:01:46:b9:91:
dc:5f:ac:d4:27:53:bc:4c:8b:43:5d:5b:92:3f:c4:
2c:99:0d:9f:5d:08:e7:9c:bf:ab:0e:27:a5:4a:2b:
e8:4b:e4:6a:53:87:a2:54:a3:bd:d0:a2:7e:d6:1e:
bf:41:04:f9:62:c7:98:66:04:44:88:a3:d2:3b:3f:
a0:f1:0c:b6:7e:ee:9f:5a:bc:17:c5:3b:be:86:1c:
4f:8c:e0:87:ed:1c:65:95:40:a6:c7:ec:1c:59:fe:
71:23:4e:0a:d0:f9:e8:59:af:4e:b4:78:51:83:f9:
67:95:17:f6:94:5c:4d:10:d2:9a:8a:45:a7:86:eb:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CC:4C:D7:A5:E1:51:32:97:6F:BB:92:B4:19:79:B5:89:3A:DB:AE
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/77e6bead-63ca-4fd0-a805-a35d7013e09e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.188.0/23
Signature Algorithm: sha256WithRSAEncryption
30:34:a7:9b:b2:56:e7:11:e0:c6:e6:ea:e0:46:a9:9c:4d:8f:
d6:70:2e:dc:98:f9:e1:6f:73:e4:02:44:10:1a:1d:36:92:2e:
03:a9:43:4b:c2:3e:7e:11:c9:b2:5f:86:97:ac:d1:07:9b:67:
73:59:39:4a:5d:ad:98:91:dd:5f:14:ad:a6:67:20:6f:62:21:
ca:0c:fa:bf:ea:04:ca:0c:51:5b:c2:06:f7:cb:04:28:00:59:
07:34:c7:3d:9a:f5:ac:fd:dc:41:01:54:7d:d0:19:fc:29:dd:
9e:f8:1a:e8:04:67:d5:c8:a1:c2:cd:fc:4d:b0:9f:48:43:bf:
47:df:72:92:5f:36:9c:bc:da:ca:e3:7a:c5:72:ec:c6:a3:49:
0b:90:9d:3a:5b:04:20:52:3e:58:33:a4:a8:b6:11:07:80:57:
93:ad:f7:19:8e:37:ee:7e:a0:3d:9a:02:33:e6:99:a1:c4:3b:
3e:45:40:62:b5:f5:89:71:91:2e:26:e5:ee:f1:ef:bb:48:0b:
ae:97:7e:7a:cd:1c:e7:7b:32:70:14:b9:8c:0d:33:d6:56:e6:
ca:ee:08:8c:37:bc:1e:3d:90:50:75:8a:88:e7:02:16:1f:74:
59:73:d8:ce:dc:18:2b:8d:33:ce:bf:b0:60:1f:12:b9:e3:95:
12:bb:a2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:44 2026 by rpki-client