Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a03743d5-cfd6-4197-b45f-ad742e8f2a99.roa
File: a03743d5-cfd6-4197-b45f-ad742e8f2a99.roa (raw, json)
Hash identifier: Ru9WrcH7C01DifUCtdLzKH8ufNil7sOoEJ3srLVXcc4=
Subject key identifier: 9C:1D:D1:1F:5B:E7:04:47:ED:B2:48:D5:22:5F:B3:85:AC:BE:8A:DF
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 054E75587904D5645ED0B5E3DB2690EFA0253C5A
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a03743d5-cfd6-4197-b45f-ad742e8f2a99.roa
Signing time: Wed 05 Aug 2026 02:00:24 +0000
ROA not before: Wed 05 Aug 2026 02:00:24 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.72.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:4e:75:58:79:04:d5:64:5e:d0:b5:e3:db:26:90:ef:a0:25:3c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:24 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=8a96eaf3a8e62bcc8eb0c705245a1d5d82a4a95e1640448ffec5b70fb7a92a84, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0d:66:9f:b1:7e:ad:1b:2a:97:22:01:7c:8a:
0d:a3:37:1e:f7:be:c4:78:1b:81:77:4a:42:df:79:
e2:21:75:5e:01:ba:3f:c5:23:1e:14:16:06:70:4f:
1e:c7:fc:ae:13:ca:4b:93:d6:d2:c2:14:a0:9d:b0:
da:31:be:51:4d:08:c0:3f:f0:f7:0f:78:82:e5:b9:
47:68:f1:89:df:03:66:82:3d:ca:3d:6c:34:ba:a0:
60:3f:9e:f3:bc:cf:50:f9:80:1f:56:c2:66:e0:94:
20:f2:c8:f5:20:f0:27:a6:45:e5:b6:bc:7c:cd:14:
b8:b7:a2:a4:04:0c:07:67:18:a4:de:11:08:2e:01:
b7:3c:98:be:4e:7c:ff:e0:02:cc:c9:bc:d3:50:64:
1f:e6:88:73:7e:07:06:c0:fc:25:fc:6f:5d:98:c8:
4d:12:e4:ca:0c:a2:4f:44:a7:a5:ee:a5:b2:dd:19:
a4:1b:fb:84:69:d3:3c:cf:1b:94:ba:13:7c:69:3f:
e7:24:00:96:d5:0a:01:26:a0:7c:30:43:b0:4e:51:
98:f2:88:2c:00:aa:a7:9f:0b:3d:66:2c:27:7e:77:
61:4c:95:9f:98:96:6f:5f:ae:e2:7a:ed:eb:5f:70:
75:31:3e:2b:3e:c5:3b:3d:b3:62:96:de:4f:b6:6f:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1D:D1:1F:5B:E7:04:47:ED:B2:48:D5:22:5F:B3:85:AC:BE:8A:DF
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a03743d5-cfd6-4197-b45f-ad742e8f2a99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.72.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7f:6f:81:54:68:8b:c5:95:54:48:29:5b:e8:8f:88:35:9f:4c:
e2:a9:15:b9:62:8f:73:80:98:a9:9c:4f:32:8d:aa:fc:95:4e:
4c:28:33:c4:3b:8b:a2:0b:56:7a:79:a7:fa:29:73:a9:d9:cf:
f9:d0:c0:4f:80:25:ad:6a:c0:2f:80:ab:29:bb:ae:71:af:8e:
17:67:11:ad:70:fe:f1:8e:da:bd:50:66:c2:f1:41:ca:89:9e:
18:b2:d9:e7:55:a3:04:ef:fb:3b:2e:55:d9:af:b9:b0:2b:1a:
2d:7d:6a:50:ae:45:47:16:96:78:1a:54:97:c5:fa:ad:48:6d:
d7:67:ed:66:78:3e:7b:d2:6d:c4:c8:3b:fd:54:05:6b:97:d3:
50:8b:f0:3b:7d:c9:26:b7:6f:d6:d0:94:56:eb:72:44:7a:27:
19:50:d1:3e:2a:7e:54:03:b7:09:a1:09:94:75:c3:ab:f5:0d:
13:a4:70:39:9c:49:49:1f:31:74:67:02:83:96:a9:82:75:77:
da:a3:c7:b2:17:60:4f:b8:de:4c:8b:d2:8e:e7:a5:45:e6:cc:
34:b5:02:cb:a4:fb:30:a4:93:fe:8f:71:91:ae:5d:64:d5:a2:
db:1c:9a:b7:a1:9c:58:21:54:25:00:d5:f1:fc:09:38:cc:3a:
50:fa:d1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:33 2026 by rpki-client