Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b303df24-e102-4609-8681-5bd929f7bcac.roa
File: b303df24-e102-4609-8681-5bd929f7bcac.roa (raw, json)
Hash identifier: U8C++ThSOpedcfaVWPmNXSqhybAAWSNVJ1dORJm74mw=
Subject key identifier: 13:0E:A5:EB:62:07:6B:1D:54:01:F3:3F:7D:2D:5F:DA:80:73:00:63
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 19C8EBBED68A5A483A863A303977F850C8584361
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b303df24-e102-4609-8681-5bd929f7bcac.roa
Signing time: Wed 12 Aug 2026 20:03:29 +0000
ROA not before: Wed 12 Aug 2026 20:03:29 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c8:eb:be:d6:8a:5a:48:3a:86:3a:30:39:77:f8:50:c8:58:43:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:03:29 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=07c32c1c1c1f3cb411ba3d7910854e3b31bd92822e73176d86975190e69b6167, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:7f:07:3d:60:6a:20:63:15:0c:d9:37:8e:
51:5b:0c:f4:40:32:17:d1:13:2e:53:cd:0e:95:05:
ae:98:fa:98:99:d8:0a:78:2e:ac:57:f7:ba:f8:e4:
0e:03:78:c2:50:c4:5e:54:1b:82:33:40:83:58:7f:
27:e6:51:ef:a0:39:16:0e:63:3d:20:93:ed:9a:1d:
c5:ad:19:ba:3a:db:2b:21:79:d5:d8:08:ed:29:c2:
e3:3e:4f:4e:68:38:36:42:3c:3c:38:76:80:88:45:
57:01:1a:3f:c9:70:da:ba:c0:f5:9e:b5:fa:e2:0a:
b8:2a:bc:8b:3f:36:00:62:9a:51:7e:2f:14:68:46:
a9:fc:72:cc:bf:d5:74:fe:74:63:7a:a7:c9:40:aa:
00:b1:6e:16:75:80:90:76:22:a3:62:79:55:8e:af:
00:59:09:f6:5b:51:c8:b6:be:6d:ee:24:91:1f:18:
27:20:29:c3:32:b6:27:62:d0:35:6d:35:f9:52:4f:
a1:89:9d:d6:5f:8c:6d:29:a6:24:96:be:2a:08:7d:
87:65:15:e8:39:b9:40:a8:f0:ec:d1:3a:0f:af:87:
ce:aa:1b:84:38:4b:77:8d:4f:f9:77:80:5c:ca:48:
4a:63:fe:87:37:fc:09:a5:75:16:29:7e:c9:24:bb:
5b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0E:A5:EB:62:07:6B:1D:54:01:F3:3F:7D:2D:5F:DA:80:73:00:63
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b303df24-e102-4609-8681-5bd929f7bcac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.28.0/24
Signature Algorithm: sha256WithRSAEncryption
01:9a:c8:6c:b9:2f:54:c1:c7:36:01:9e:78:e8:8b:1c:d2:e1:
89:cf:41:06:0c:99:96:5e:67:67:db:6e:32:e5:eb:ea:8f:d1:
8c:75:df:00:e0:e1:54:99:85:fd:04:7a:fc:65:6c:2d:15:2b:
26:19:40:23:7c:8d:90:ab:f4:58:c7:f9:93:e9:3b:5a:06:df:
88:6f:1d:7a:26:74:bf:97:9f:d2:e3:53:99:43:a2:7a:89:3c:
6e:b5:84:68:8c:eb:86:b2:20:16:4d:a7:fc:64:0a:88:bb:ca:
98:95:1f:31:35:fe:aa:22:d6:c5:e1:f2:37:f1:30:3f:8f:d2:
21:d2:9f:52:ef:04:b7:25:18:7b:8f:89:76:9d:7d:17:6b:b9:
9a:b1:7e:88:2d:c9:7b:4f:31:58:34:e8:88:16:3a:a0:cf:df:
e3:9f:8c:f6:f4:4c:11:f1:e1:55:eb:00:b9:c1:6c:ae:c8:ab:
90:3a:60:c5:29:79:95:ce:38:c7:b3:4b:1c:c5:ef:b2:52:95:
cc:06:2c:bb:d1:3f:b5:25:f2:d5:39:6c:c0:05:5e:63:62:29:
59:d2:17:02:66:c4:83:ef:9e:2f:4d:d7:e9:70:e3:f4:fe:55:
33:f5:8c:62:21:0e:2b:b8:74:d7:c0:c5:7b:58:be:af:a8:ca:
e4:29:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:54 2026 by rpki-client