Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/aa9c4ef5-16fb-4222-a99f-9dc3e40c6973.roa
File: aa9c4ef5-16fb-4222-a99f-9dc3e40c6973.roa (raw, json)
Hash identifier: UdxK6sfPhTq1sY5bXf1AvaadHwzljL27moek756Ce54=
Subject key identifier: 28:F5:D0:11:D6:05:61:7A:3C:40:47:12:62:99:04:EE:B7:B6:E6:58
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 20D11B14C73AF3ABE935951D840EDC7204D80F2D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/aa9c4ef5-16fb-4222-a99f-9dc3e40c6973.roa
Signing time: Wed 05 Aug 2026 02:00:25 +0000
ROA not before: Wed 05 Aug 2026 02:00:25 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.224.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d1:1b:14:c7:3a:f3:ab:e9:35:95:1d:84:0e:dc:72:04:d8:0f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:25 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=c2e2ad9535750ad913ca44ca5c1b465fbb12e7d9cf23ac5ee89501135618f830, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2e:26:fc:b1:de:99:57:bb:08:33:a2:8d:1c:
6e:55:4f:f4:8a:40:0a:6e:05:d2:fe:b0:d2:ed:36:
65:15:1d:7d:6a:d7:c2:68:ee:c4:79:25:bb:d5:d7:
ad:bd:b0:10:d2:16:76:9f:d0:f6:13:16:d4:24:d6:
70:53:ec:e6:88:93:6f:6e:36:cb:50:48:d1:f1:ef:
5a:ef:08:0a:a0:8f:77:47:e4:77:b9:c4:67:dd:d2:
0f:c7:6a:f4:0f:92:bc:63:82:7e:40:56:ea:40:f1:
46:01:50:97:24:38:c8:bb:e0:6d:f2:c5:28:69:40:
48:b0:20:b0:87:d4:69:57:48:28:94:59:b9:dd:d8:
5f:ab:d0:86:a9:62:a7:55:00:04:de:5a:39:af:cf:
e1:e2:29:85:c7:6c:30:41:62:f1:b2:a9:4e:17:8a:
46:d5:be:96:c7:99:d1:19:eb:8c:33:18:52:ff:9e:
1f:27:89:c0:3c:84:38:09:35:3c:b1:b3:46:06:aa:
02:aa:99:5f:67:92:4c:d6:32:9a:15:89:fa:33:d8:
35:b8:35:b3:5c:70:c4:47:d3:e4:ba:38:a3:66:e2:
56:9b:83:00:d0:00:79:95:1f:ca:71:18:15:72:c7:
5a:7f:37:55:9f:19:7a:3e:2e:d8:95:90:bd:23:2a:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F5:D0:11:D6:05:61:7A:3C:40:47:12:62:99:04:EE:B7:B6:E6:58
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/aa9c4ef5-16fb-4222-a99f-9dc3e40c6973.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.188.0/23
Signature Algorithm: sha256WithRSAEncryption
54:b5:58:71:f1:4c:1b:50:ba:43:32:9c:8f:96:da:63:51:23:
db:cf:d8:45:55:c4:7b:9a:39:69:c3:88:3a:52:f3:d7:15:d5:
a3:37:68:de:21:b4:5e:36:47:dc:b6:14:78:38:50:66:28:2a:
30:2c:f8:14:5b:c2:45:15:b4:df:52:f3:b1:b6:97:2d:a5:e8:
49:00:5d:d4:93:ea:33:6e:33:53:c1:02:37:24:60:8f:5c:c1:
67:94:2f:ab:14:d6:20:49:44:dd:31:41:71:04:86:a5:cb:b8:
9a:b1:64:70:dc:40:3a:d0:2e:8f:27:dc:81:c2:21:5f:10:f3:
f3:cd:c5:cb:f8:39:0e:3b:be:d1:8d:0e:d8:63:58:32:c1:a2:
43:77:0c:e1:cb:cf:c9:4b:f8:5c:60:9d:70:bf:ba:01:82:18:
18:b8:3b:b7:d5:2d:43:be:eb:da:c4:ed:bd:cf:f6:1a:fd:5a:
63:dc:b7:22:4a:12:39:04:70:d7:c2:f5:36:7c:50:db:7a:ef:
d5:6b:47:6f:d5:5f:52:10:2a:7b:91:66:d8:2e:1e:e4:d7:47:
5c:b4:47:33:0b:79:b3:f8:04:11:a0:8d:9b:a3:81:a5:5b:a8:
1e:e3:bb:83:ee:19:23:87:b6:7c:1e:3d:a5:e4:e1:17:7b:33:
9c:f6:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:25 2026 by rpki-client