Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/98c39c27-f261-4d67-a85e-ec7479538084.roa
File: 98c39c27-f261-4d67-a85e-ec7479538084.roa (raw, json)
Hash identifier: WZzvRJnQH0ozr0rn7UmrTRUrX6Bdey2SI0QLzNjLYGg=
Subject key identifier: D3:96:E5:7A:0B:6E:7C:F3:A6:57:CA:DE:04:F2:40:D3:D0:CE:04:CA
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 0533EC75F9856F2EA479D25248F480026DA5C848
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/98c39c27-f261-4d67-a85e-ec7479538084.roa
Signing time: Wed 05 Aug 2026 02:00:26 +0000
ROA not before: Wed 05 Aug 2026 02:00:26 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:33:ec:75:f9:85:6f:2e:a4:79:d2:52:48:f4:80:02:6d:a5:c8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:26 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=8431f60bf15aa715906862c901817b744fcd48450fc43f744797cef08fefda4f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:f3:14:23:d4:51:5b:c8:05:a8:8c:73:cc:
22:b3:11:b5:64:9c:df:95:af:38:4e:54:68:76:24:
d8:fa:fe:c8:aa:d7:50:9c:9b:2f:03:13:04:9c:19:
08:a3:03:1b:89:45:24:8a:3f:ba:e4:cd:a7:79:58:
e1:34:f8:10:bf:75:09:ff:dd:32:f3:9e:b9:a7:3c:
c4:86:f0:68:42:ca:83:e3:cc:77:12:01:f1:50:ac:
47:0b:7e:28:8e:bd:e7:e6:89:53:a6:d8:08:1f:47:
3a:2e:7e:d2:83:4f:43:ff:f4:0f:e0:e6:c9:5a:ff:
77:e6:c5:14:52:35:d0:dc:d2:8e:b0:6b:1e:19:42:
83:58:0f:21:78:60:a9:0e:4f:c3:59:61:b3:94:3c:
97:ef:05:c3:53:cc:0f:8a:46:dd:95:8c:4e:98:12:
d8:d1:25:78:44:97:8d:b8:b3:63:f3:a4:7d:ea:b8:
ed:4a:fd:c7:a5:7e:c0:a0:6d:80:fc:b2:eb:d0:6f:
e9:b1:db:65:e8:d6:73:6c:18:24:df:e6:f5:57:00:
36:7f:75:3c:ab:31:cd:45:8c:2a:94:e1:86:26:fc:
d4:6b:2e:31:00:9b:5b:dc:e6:d5:ce:f0:15:1c:ff:
aa:d6:8d:d4:bf:b6:51:6a:84:74:00:9d:ae:34:45:
a2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:96:E5:7A:0B:6E:7C:F3:A6:57:CA:DE:04:F2:40:D3:D0:CE:04:CA
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/98c39c27-f261-4d67-a85e-ec7479538084.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.132.0/24
Signature Algorithm: sha256WithRSAEncryption
24:de:8e:a4:af:2c:63:c7:0b:07:e7:02:a5:2b:bd:98:f5:e8:
bf:b8:26:a4:4c:bf:f0:60:de:29:61:5e:9b:37:1b:e4:f4:58:
f2:16:bf:92:8e:87:da:f3:53:26:a7:8e:22:2b:17:68:50:83:
01:16:1b:56:dc:cc:48:6f:e0:c7:0a:d4:a2:ed:08:11:27:46:
2f:ad:e5:d2:e4:3f:d1:22:25:b0:1d:1d:ab:fb:98:ca:6c:0c:
e4:f1:ab:69:a2:62:bb:ac:83:cb:fb:7c:e2:f7:17:83:34:8b:
66:ad:d7:80:1c:c0:19:d1:ad:22:ab:00:d9:df:00:9d:a9:34:
fc:1c:24:e9:11:03:41:10:69:7f:ac:f0:3f:dd:79:92:41:a9:
78:38:6c:d1:00:32:e2:9a:1b:34:87:33:5e:02:0a:18:c5:e8:
cd:3d:59:38:d3:0d:27:45:43:4a:80:78:4f:2b:86:2f:7e:bc:
61:46:4a:8b:bc:3b:bf:c8:93:64:ae:ff:6b:c1:a9:1f:3a:03:
2b:a3:51:cb:27:bc:dc:e5:29:dc:30:8d:20:26:73:d8:c6:23:
1e:58:12:dc:f6:74:9f:f7:0d:b5:03:72:1d:7a:6c:8e:88:2b:
9d:3f:32:8d:f5:d6:9a:94:98:f8:7f:14:4f:94:20:cc:07:40:
a0:f5:35:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:16:52 2026 by rpki-client