Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/80c8537f-f518-4230-9f14-470ee4d649e2.roa
File: 80c8537f-f518-4230-9f14-470ee4d649e2.roa (raw, json)
Hash identifier: kXM39f7FJnzqhmudTJXDoNvRRiCvXVN76zHqHdIffbE=
Subject key identifier: 1D:F5:BA:0E:46:D3:FF:E6:3B:9D:5B:52:0E:2B:83:01:31:A9:8B:A1
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2250A916908EA371A91AF78E636AE89CBBB7D1B0
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/80c8537f-f518-4230-9f14-470ee4d649e2.roa
Signing time: Wed 05 Aug 2026 02:00:08 +0000
ROA not before: Wed 05 Aug 2026 02:00:08 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:50:a9:16:90:8e:a3:71:a9:1a:f7:8e:63:6a:e8:9c:bb:b7:d1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:08 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=b0ddb8b01d51c04042f085e08996144521e6912ccae4e7f8b919b56a735ba9eb, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:53:ac:a3:91:bf:38:f0:6f:40:a5:76:02:
b1:26:ba:a4:14:4b:76:7a:36:f3:04:f1:ed:9a:19:
39:00:73:c2:91:7a:90:a0:b7:53:1f:fe:6e:57:e6:
72:ad:24:cb:a1:f0:88:61:19:da:38:f2:0b:f0:fc:
d2:a4:a1:3e:e4:da:89:e9:b4:be:1a:06:a5:4e:9b:
cf:58:75:a4:66:20:3d:90:63:e4:0f:62:fb:d9:9e:
14:ae:d5:0f:1d:7f:79:75:98:98:d6:74:db:7d:0d:
90:88:09:39:db:62:6f:64:22:ab:ff:f0:e0:6e:6d:
7f:a8:87:42:c2:3e:25:a1:fd:89:5d:5f:84:f8:34:
8a:58:6d:96:b8:3b:a4:98:89:b5:8f:fa:ec:53:c6:
8e:51:70:4a:35:64:f0:ca:83:62:75:ca:ea:2b:30:
16:90:d1:0a:fc:b8:f7:a0:2e:38:1f:29:f3:c9:70:
91:11:07:07:00:c2:b1:8e:6d:ba:e3:eb:17:d9:3e:
0c:9e:b3:d1:da:86:b8:5c:da:4d:6d:57:ef:d5:94:
f2:c1:9c:02:dc:c3:28:a1:73:bf:b7:33:6f:de:77:
db:92:24:69:49:62:7d:23:e2:3b:58:42:e8:a6:35:
a6:9d:43:3b:5c:86:03:cd:8d:7d:3e:38:91:59:1e:
ee:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F5:BA:0E:46:D3:FF:E6:3B:9D:5B:52:0E:2B:83:01:31:A9:8B:A1
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/80c8537f-f518-4230-9f14-470ee4d649e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.136.0/23
Signature Algorithm: sha256WithRSAEncryption
15:75:19:23:8d:4e:6a:74:c4:f8:ac:f8:c6:4a:1f:f4:43:1d:
49:17:a6:28:54:ee:e9:e7:d7:c4:9b:78:b9:83:e1:95:a1:72:
4a:ca:71:93:86:44:b9:e3:e2:92:e4:65:a6:4e:9c:53:e6:f0:
8d:cb:53:7c:71:57:9b:23:4e:55:6f:1b:1b:22:8a:52:5c:a3:
ee:dd:74:f1:70:b9:9b:f0:64:d0:b9:ce:0b:be:aa:a1:ff:64:
cf:08:9d:3c:a3:13:a9:3f:fb:ea:47:a2:fd:6d:9c:64:df:89:
7b:80:f3:49:cf:b1:00:76:28:85:a4:40:e5:76:94:a4:5f:1d:
ca:dd:b4:a1:e3:53:72:43:e3:a1:12:84:66:4b:ca:c1:c4:8c:
d5:67:39:bd:a7:ae:a2:37:73:8e:32:f8:f6:66:22:a2:32:f9:
45:77:58:85:27:91:e5:c2:7a:b7:33:ff:f6:68:60:ac:ed:12:
1c:12:bb:b2:a2:85:8b:75:1c:ad:e8:79:12:26:22:d6:31:1c:
95:3f:23:33:0a:73:6b:ba:10:49:a6:9a:a9:39:89:25:f6:fe:
ec:02:3b:b1:b2:64:df:10:99:49:72:fb:09:5c:e6:43:86:c7:
7b:7c:c5:5b:b9:76:5c:1e:06:6f:90:24:d3:4b:4a:8c:89:b8:
15:23:e8:b7
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUIlCpFpCOo3GpGveOY2ronLu30bAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MDUwMjAwMDhaFw0yNjExMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQGIwZGRiOGIwMWQ1MWMwNDA0MmYwODVlMDg5OTYxNDQ1MjFlNjkxMmNjYWU0
ZTdmOGI5MTliNTZhNzM1YmE5ZWIxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANBoU6yjkb848G9ApXYCsSa6pBRLdno28wTx7ZoZOQBzwpF6kKC3Ux/+blfm
cq0ky6HwiGEZ2jjyC/D80qShPuTaiem0vhoGpU6bz1h1pGYgPZBj5A9i+9meFK7V
Dx1/eXWYmNZ0230NkIgJOdtib2Qiq//w4G5tf6iHQsI+JaH9iV1fhPg0ilhtlrg7
pJiJtY/67FPGjlFwSjVk8MqDYnXK6iswFpDRCvy496AuOB8p88lwkREHBwDCsY5t
uuPrF9k+DJ6z0dqGuFzaTW1X79WU8sGcAtzDKKFzv7czb95325IkaUlifSPiO1hC
6KY1pp1DO1yGA82NfT44kVke7oMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQd9boO
RtP/5judW1IOK4MBMamLoTAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
ODBjODUzN2YtZjUxOC00MjMwLTlmMTQtNDcwZWU0ZDY0OWUyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATMAiDAN
BgkqhkiG9w0BAQsFAAOCAQEAFXUZI41OanTE+Kz4xkof9EMdSRemKFTu6efXxJt4
uYPhlaFySspxk4ZEuePikuRlpk6cU+bwjctTfHFXmyNOVW8bGyKKUlyj7t108XC5
m/Bk0LnOC76qof9kzwidPKMTqT/76kei/W2cZN+Je4DzSc+xAHYohaRA5XaUpF8d
yt20oeNTckPjoRKEZkvKwcSM1Wc5vaeuojdzjjL49mYiojL5RXdYhSeR5cJ6tzP/
9mhgrO0SHBK7sqKFi3Ucreh5EiYi1jEclT8jMwpza7oQSaaaqTmJJfb+7AI7sbJk
3xCZSXL7CVzmQ4bHe3zFW7l2XB4Gb5Ak00tKjIm4FSPotw==
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:16:08 2026 by rpki-client