Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/970baa53-c4dc-4c2a-96d5-cb4107d1d8ab.roa
File: 970baa53-c4dc-4c2a-96d5-cb4107d1d8ab.roa (raw, json)
Hash identifier: w9dZMuZSueElS/33CedWU4G+1VBmHEd6eNf87m2RfIA=
Subject key identifier: CD:A9:60:33:63:3C:4D:4B:14:E1:00:E6:6D:CE:5D:4D:54:E4:12:3C
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1658ED2BF2FA87DA8947E48C84A0DB4AD44074F9
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/970baa53-c4dc-4c2a-96d5-cb4107d1d8ab.roa
Signing time: Wed 05 Aug 2026 02:00:11 +0000
ROA not before: Wed 05 Aug 2026 02:00:11 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:58:ed:2b:f2:fa:87:da:89:47:e4:8c:84:a0:db:4a:d4:40:74:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:11 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=89a44d2458a04eeff085b5ad9a9034aa8110bccd1bc1e8d741cb0842c6732fed, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:09:bf:97:12:8b:1a:80:3e:43:2c:2a:a9:
96:cf:03:af:f6:13:36:9e:60:9e:11:d3:99:13:e4:
ae:f8:31:df:50:25:c1:2e:e7:c0:58:b2:11:35:7a:
cc:f5:0f:b1:5d:f0:2f:b4:c2:68:ff:3c:8c:71:4d:
db:89:d9:4f:c8:b4:68:b9:b6:73:06:a5:af:de:92:
62:09:da:d4:c9:13:ee:b6:1e:99:09:7c:f8:17:30:
7c:a6:40:aa:ef:d3:1e:0d:71:88:ff:0e:55:f1:21:
10:b8:8d:aa:c3:6a:45:ff:2d:d6:9b:42:bf:43:f1:
e0:d4:44:e7:36:02:e3:b3:ba:b3:e9:63:3f:fa:ea:
03:88:2b:57:7a:9f:af:5e:b3:d1:1d:71:a8:35:34:
6d:9d:ae:80:46:26:1c:0b:80:59:ea:e2:48:c2:21:
c7:e1:f9:04:15:eb:16:23:53:e6:a0:83:24:44:08:
c1:5d:2d:5a:17:c9:63:98:47:75:2e:e6:74:17:a7:
70:e4:73:c9:0b:8c:06:1b:20:74:df:fe:25:08:ce:
50:d7:d2:82:a8:9e:50:6e:be:c3:94:87:e3:1d:cc:
6a:19:58:20:02:07:7b:f2:fb:e7:51:35:36:63:fb:
99:4d:8f:81:7e:0d:13:6a:62:07:89:0f:53:c9:09:
d5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A9:60:33:63:3C:4D:4B:14:E1:00:E6:6D:CE:5D:4D:54:E4:12:3C
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/970baa53-c4dc-4c2a-96d5-cb4107d1d8ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.16.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:36:a2:a4:6c:64:3e:cc:f6:5d:de:c7:d3:3d:4f:54:5a:98:
4b:0a:b1:26:eb:30:e3:2c:b6:50:bc:c5:47:06:1f:d3:c4:56:
9b:76:03:9a:78:30:c2:85:63:37:51:cd:d4:23:df:a2:ee:c1:
01:27:08:53:fe:04:10:25:44:5d:2f:8d:1c:80:be:76:25:ac:
55:d8:c1:90:1e:d5:03:3e:24:56:21:0e:a4:11:87:50:e9:df:
a2:a6:6b:e2:c2:36:7d:0e:f3:f9:92:ef:3e:d3:47:c6:04:25:
9a:8c:3c:6c:f2:49:ba:b9:54:c8:03:ff:43:47:17:dd:25:66:
18:74:73:61:bb:63:6d:c9:1c:5d:6f:9d:4d:dd:23:58:be:22:
ea:01:8c:96:15:b2:2a:6a:0e:94:b0:ac:3d:95:92:80:84:86:
a6:47:da:ed:ae:ff:4d:ff:9b:8f:3d:1e:f8:7f:72:a1:c0:ac:
2d:0f:03:d3:9b:ca:11:3c:62:fc:3d:d4:88:25:c4:81:97:de:
88:37:47:c9:6a:26:33:8d:d3:0c:42:2f:32:14:69:73:6f:1a:
a1:03:b3:de:03:0e:65:04:01:a6:7b:8c:c9:f1:ea:b5:2f:3b:
47:0d:40:8c:87:1f:ae:dc:6e:7a:bc:7a:e6:d6:18:c4:22:8a:
7d:0e:f8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:29 2026 by rpki-client