Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a03743d5-cfd6-4197-b45f-ad742e8f2a99.roa
File: a03743d5-cfd6-4197-b45f-ad742e8f2a99.roa (raw, json)
Hash identifier: ATPnw0YnMz09EmeS/shtnpNs0acczQ7l0cj5VoVFAcU=
Subject key identifier: C2:10:DC:CD:75:A1:43:C4:53:85:51:85:69:79:54:4D:3C:A8:76:5C
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 20CBC501C93CFEDD5B7D4B7FB43A50E512B70E80
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a03743d5-cfd6-4197-b45f-ad742e8f2a99.roa
Signing time: Sun 17 May 2026 02:00:03 +0000
ROA not before: Sun 17 May 2026 02:00:03 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.72.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:cb:c5:01:c9:3c:fe:dd:5b:7d:4b:7f:b4:3a:50:e5:12:b7:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 17 02:00:03 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=e061d4362368d8509c2741aa14aa407e02a5845fe6d1c754e6df68d7348a5a2f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:84:5a:bd:d3:83:9c:48:38:9b:f9:f4:b4:
63:96:fb:1e:a7:e9:10:83:df:28:4c:b6:62:b7:b7:
4a:8c:1c:4e:84:3f:13:30:98:62:a5:68:42:61:23:
48:13:8f:b1:d8:7e:8e:2b:ba:ad:d5:6e:10:eb:8f:
fd:ba:50:d1:4f:09:d6:8c:3f:12:85:8a:e7:31:53:
d7:a8:32:9a:da:93:d0:09:1e:c7:50:1d:0b:1f:23:
10:d5:34:06:ea:a5:d6:f9:a9:1a:57:bc:5e:62:e9:
25:7e:19:42:f2:f0:e3:f0:81:e9:0a:29:27:e7:54:
c0:b3:1d:3a:c5:4a:f2:d4:d9:0d:cd:99:39:d5:e9:
e4:b5:8a:aa:33:ff:c1:e9:98:52:d7:f8:2f:ad:3e:
f0:83:5c:30:45:4f:94:e4:4b:d5:24:fc:2b:31:99:
8f:68:06:a6:05:80:83:b6:f1:50:6e:c5:60:66:c1:
c4:a0:a0:d1:a2:90:62:43:1b:a3:4a:07:40:b0:34:
da:bc:68:51:0e:ff:a2:85:17:0d:37:9d:37:03:59:
7b:c8:24:7f:a6:d9:37:3c:9a:cc:04:ae:ad:85:09:
bc:f9:33:87:65:d6:85:fa:ae:4c:74:35:6b:95:35:
dc:4f:9d:80:5e:a3:67:51:a1:40:52:ee:89:69:56:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:10:DC:CD:75:A1:43:C4:53:85:51:85:69:79:54:4D:3C:A8:76:5C
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a03743d5-cfd6-4197-b45f-ad742e8f2a99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.72.0.0/15
Signature Algorithm: sha256WithRSAEncryption
46:0d:62:4d:09:55:23:dc:5b:3e:ef:79:00:69:ae:08:84:46:
c7:f3:76:69:af:63:74:88:ed:cc:61:b6:43:69:c7:dd:b7:3d:
e6:de:b9:be:dd:18:fe:df:68:a4:ed:86:cb:02:cd:06:17:ae:
cc:a9:fc:c8:3b:6e:50:72:af:ae:ac:2b:e6:ac:3d:9c:21:31:
a5:78:ca:73:63:1e:6a:2f:f0:74:4d:d5:19:e3:f6:d8:fe:9a:
4e:6a:e2:cf:45:53:8c:db:d5:6c:45:f4:10:45:7b:f3:e5:77:
98:13:e8:63:60:88:76:be:07:3c:45:69:bf:c1:99:39:9e:6e:
89:79:dc:56:93:16:c8:6b:00:2d:61:3e:53:65:a0:6f:ac:5f:
f7:4c:8d:45:cd:18:79:37:98:1b:b7:f5:a4:98:12:c0:50:76:
08:3b:87:2a:d1:5d:a4:18:bf:8f:79:91:9c:09:1b:78:de:b8:
65:04:91:d5:54:b9:0d:ef:6e:14:5b:d8:2e:a2:15:c6:9a:e7:
66:21:32:b1:1a:88:5d:42:1d:b6:40:46:44:9e:95:80:b8:65:
7a:e3:02:8d:e1:e6:b6:f3:65:2b:62:84:f9:f5:b0:1b:f9:3a:
78:ab:3b:f6:f6:42:13:dd:86:78:22:74:1e:fd:41:ad:a2:11:
71:1a:f4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:04:28 2026 by rpki-client