Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9444075d-4227-42ae-a4ba-cd29f503db9c.roa
File: 9444075d-4227-42ae-a4ba-cd29f503db9c.roa (raw, json)
Hash identifier: g7MB/wYYG/E6jATaU9LGRojF2UIw8RQ/1p0sD83fvBo=
Subject key identifier: B4:0B:52:EF:3F:8A:95:50:DA:43:39:25:00:87:38:1E:3C:E5:2A:04
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3F75B8839AB50669D501F97E6F2463775EAA4E01
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9444075d-4227-42ae-a4ba-cd29f503db9c.roa
Signing time: Wed 12 Aug 2026 20:18:04 +0000
ROA not before: Wed 12 Aug 2026 20:18:04 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:75:b8:83:9a:b5:06:69:d5:01:f9:7e:6f:24:63:77:5e:aa:4e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:18:04 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=65aa35246ce222c881129bb15ffac658d236eab75a35fad56a9c6dabeedfeebc, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2e:13:a7:ee:68:08:c0:04:de:e4:8d:1c:23:
2d:05:f3:84:99:f9:3b:58:7d:1e:8c:c7:60:9a:1f:
e5:61:e1:4f:53:e5:59:58:44:ee:84:27:9b:cb:f6:
3c:fe:02:ac:15:83:4e:b4:ae:6e:46:c1:a7:86:ad:
81:a5:55:4c:f8:47:17:e4:2c:0f:3b:5b:33:50:2c:
01:04:c9:ac:bd:16:bd:67:6d:b8:1b:d7:51:30:9b:
b5:9c:6c:3f:f0:69:ad:2b:5a:21:c1:81:0b:cc:b0:
51:a7:f5:f9:71:9c:01:72:d7:f5:80:bc:bc:20:ad:
b2:b5:43:70:c9:06:21:6f:e2:07:6a:57:a7:20:24:
85:6a:b0:f8:eb:1a:53:03:32:5e:82:6e:94:50:9c:
df:e3:cf:76:50:2d:72:c0:83:8a:4e:73:71:92:27:
99:f4:92:4c:49:f2:cf:4f:cd:d6:e6:1b:8d:9e:51:
2a:1c:b3:57:a7:60:39:07:6f:cc:36:68:63:ac:db:
2b:b1:3d:54:24:c4:b5:2a:bf:45:a5:80:88:ff:ec:
e2:de:8b:42:1f:89:f4:1e:5e:08:4b:73:37:9a:94:
56:9c:18:b5:6b:40:f5:a7:62:d8:51:82:03:dd:20:
f7:f8:e9:e3:83:e7:fe:17:52:56:23:11:ed:ae:1c:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0B:52:EF:3F:8A:95:50:DA:43:39:25:00:87:38:1E:3C:E5:2A:04
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9444075d-4227-42ae-a4ba-cd29f503db9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.138.0/23
Signature Algorithm: sha256WithRSAEncryption
24:b2:df:08:dc:8a:e9:c4:7a:81:5e:4c:b3:2a:87:d8:3e:61:
87:5b:8f:ad:9e:50:57:bb:53:51:18:d4:1e:0c:43:ec:60:53:
33:10:b4:ff:9e:3e:8f:3e:54:ac:14:a8:4e:8c:9f:37:68:38:
07:66:f3:c5:40:6a:f8:0d:e2:ac:78:c2:a5:07:a6:f4:b9:e6:
2a:d1:a6:46:ee:46:f7:c4:00:cd:68:eb:fe:15:37:8d:ca:ab:
d2:e2:38:9f:17:92:10:44:b7:70:6e:ce:9b:de:7c:ef:c6:e2:
e7:99:68:49:0a:79:11:cd:53:da:63:8f:82:24:6d:a3:66:06:
56:e3:88:fa:e3:f1:5a:88:f6:e3:e6:74:12:ab:5b:91:40:da:
0a:a9:ba:0b:9a:41:d6:02:b4:9c:26:78:32:32:47:24:45:c9:
df:ab:7c:03:5a:54:a9:e3:6e:eb:37:46:3a:86:b5:03:e0:e8:
72:de:03:39:71:f2:be:bb:f4:45:9e:89:e4:38:ce:76:fc:46:
e9:9c:eb:83:0e:42:c4:69:0f:68:7e:05:18:1a:5e:5b:58:97:
6c:49:1a:72:5c:65:57:1f:4e:a7:5d:69:46:43:72:31:a0:81:
23:d1:41:20:18:82:a0:39:1e:f3:c0:d9:e4:cb:1d:92:e3:d8:
4b:af:57:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:10 2026 by rpki-client