Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8189d5ed-5d9b-4f13-a902-63fb2e412472.roa
File: 8189d5ed-5d9b-4f13-a902-63fb2e412472.roa (raw, json)
Hash identifier: o18g1wevKLfJ+8ynf18S4D8e8/YPMrt5e+9+a0k2lLU=
Subject key identifier: D8:6B:0D:77:8B:08:2A:73:B3:02:8E:B9:28:80:95:66:56:75:84:7F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 664EDFA2F4B63AC33708EFCC6F0593116E5C2553
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8189d5ed-5d9b-4f13-a902-63fb2e412472.roa
Signing time: Wed 12 Aug 2026 20:48:03 +0000
ROA not before: Wed 12 Aug 2026 20:48:03 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.224.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:4e:df:a2:f4:b6:3a:c3:37:08:ef:cc:6f:05:93:11:6e:5c:25:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:48:03 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=dc0777251ef06896f5f6a042c593034e3b588e684775d659d069c09b76fb8da1, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:15:66:0d:c2:ba:f8:ff:a4:a4:92:18:9c:0f:
f1:af:b1:2b:5b:db:6b:3c:a6:c1:04:24:6c:40:a6:
88:70:0e:14:64:aa:ce:59:c5:8b:ed:3a:98:9f:f3:
c9:97:37:a4:2c:a4:72:fb:fc:e2:38:ab:05:f3:ac:
1f:48:0c:93:20:ac:31:17:37:7c:50:53:e9:39:ee:
f6:88:e2:0e:d2:f4:83:7f:b4:6c:bd:34:72:2f:db:
65:1d:fe:43:2f:a8:51:24:e4:84:1d:95:28:ee:ad:
20:52:73:1d:f5:10:0c:ce:fe:0d:23:5c:a0:2c:2a:
29:f9:55:a0:f9:90:f6:98:3f:5f:21:5e:83:78:8c:
5d:f0:06:7d:56:db:c8:dc:65:9e:ee:3c:01:45:07:
36:c4:28:d0:05:76:d6:2c:c5:cb:42:0a:4c:8a:0a:
7d:a7:7c:e2:fa:62:66:e5:65:74:08:cd:59:d2:da:
6a:7d:ba:02:01:1b:49:ac:90:cf:2e:27:40:78:c5:
c5:4c:84:e8:c1:2b:df:99:5f:3f:5d:91:9e:cc:b2:
1a:1d:d1:33:f0:19:39:39:88:ad:c1:ce:ba:08:28:
8c:a2:69:61:38:a2:6d:9c:6d:e2:57:8c:a1:d7:dd:
27:eb:fa:3a:df:79:cd:39:53:01:b4:2c:8a:c4:64:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:0D:77:8B:08:2A:73:B3:02:8E:B9:28:80:95:66:56:75:84:7F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8189d5ed-5d9b-4f13-a902-63fb2e412472.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.0.0/15
Signature Algorithm: sha256WithRSAEncryption
8b:3b:88:4f:9d:82:97:8e:b6:ce:90:ef:41:a4:72:be:b2:aa:
3b:de:b6:80:0a:f1:c6:cb:1a:9d:33:06:c6:94:19:56:8d:29:
2c:f8:58:a3:46:64:c2:5f:51:6c:68:4a:24:54:c9:87:90:ed:
8d:18:4f:a6:58:30:d0:10:62:f1:2c:c2:f3:a9:4f:59:e0:c9:
f1:ba:73:52:d3:64:ce:8e:4f:c2:2b:1a:51:99:c2:9c:64:68:
b7:e4:f2:1e:8d:18:43:b3:64:91:06:50:f7:6b:b0:19:ef:4d:
56:d8:c1:18:1f:45:61:2c:82:37:1d:a1:b0:a4:7c:ea:2b:fc:
8f:54:43:52:cf:55:1e:76:a5:b8:47:9e:c2:5d:ad:a1:38:20:
66:b0:d9:6c:a5:49:57:8e:27:30:cf:30:9b:4e:5b:f0:6b:60:
de:df:10:92:69:e2:d5:5f:68:98:4e:57:c9:05:05:e2:98:8f:
f3:51:f4:83:9c:79:60:ad:9d:9c:04:ef:16:27:b6:68:d4:13:
06:ed:38:73:34:32:85:d5:ff:93:f1:a7:ba:28:07:f6:ab:8a:
43:53:9d:33:d8:29:d5:64:eb:7e:97:74:74:90:42:d2:bf:45:
24:ae:11:fd:9f:ee:aa:c2:21:8f:2b:18:92:a4:59:fc:35:ca:
79:83:d7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:12 2026 by rpki-client