Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b8474977-7382-4e0b-a6f8-88664b4d2fce.roa
File: b8474977-7382-4e0b-a6f8-88664b4d2fce.roa (raw, json)
Hash identifier: EVGCg3ejV1H38Lkv3vkCLqZoGvVPrKCzqCWEcBXxB5k=
Subject key identifier: C7:0E:2E:C2:C8:CA:68:25:02:CB:47:00:A7:6A:9A:62:71:BB:80:04
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 07273810396D29241BAA4F635CC646307AD2B86D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b8474977-7382-4e0b-a6f8-88664b4d2fce.roa
Signing time: Wed 12 Aug 2026 20:48:00 +0000
ROA not before: Wed 12 Aug 2026 20:48:00 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.224.186.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:27:38:10:39:6d:29:24:1b:aa:4f:63:5c:c6:46:30:7a:d2:b8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:48:00 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=55ec9c7659b9b279fba7aa2aa4ea1f11f1fb006ccb356500b49e4d30c4a6857d, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:f2:52:69:c2:7b:ea:d4:3c:a1:82:2c:26:
07:92:7c:e7:de:c3:2f:6e:d8:a0:2f:e5:bb:05:bc:
9f:0e:1f:7a:49:1b:e0:44:d6:6d:fb:a0:09:03:75:
b4:b6:e7:ca:09:7c:2f:db:53:98:3d:2d:f0:7d:a1:
aa:92:6e:33:9b:fc:db:b3:1f:40:04:8a:fb:9d:c9:
7e:7b:8a:92:5b:58:42:cb:6b:11:19:84:b4:9f:97:
5f:02:13:75:92:2b:27:c2:2f:68:c0:af:55:52:cb:
90:e1:31:fb:10:66:29:a3:5b:ae:54:7b:c9:fa:08:
98:65:c2:2f:56:dd:d2:42:5c:55:06:25:eb:06:39:
4d:a4:db:87:f5:a3:89:2a:2d:99:3f:f7:d6:83:00:
10:d5:57:3a:d9:4d:52:8e:03:44:be:87:3d:a5:0f:
e9:f8:ea:c9:b8:b6:37:10:ac:36:dd:ec:70:6c:5b:
80:2e:14:a7:76:13:a6:ea:77:f3:01:ba:a5:c7:76:
cc:bb:a5:4c:1d:5d:84:ba:ad:e9:dd:14:a2:dc:26:
f6:05:52:09:25:4d:8b:3c:d2:eb:7c:d1:75:8c:c1:
7a:b3:32:96:b1:d6:59:c9:c6:44:88:e4:3d:b4:81:
04:49:2a:9b:c1:49:ca:3d:86:c9:98:04:51:38:52:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0E:2E:C2:C8:CA:68:25:02:CB:47:00:A7:6A:9A:62:71:BB:80:04
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b8474977-7382-4e0b-a6f8-88664b4d2fce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.186.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:37:81:74:80:bc:fe:37:c5:0f:98:3f:35:fa:fb:68:ce:ae:
f0:84:c6:ce:b6:ef:f9:ae:b6:1b:13:7a:de:38:e3:b1:5e:52:
43:47:f5:40:00:c1:bc:4a:19:62:26:3c:0d:fd:6f:a1:1c:16:
72:45:96:b5:25:3b:b5:c5:84:73:42:88:16:e6:bd:93:4a:e7:
5c:f1:79:17:7b:76:bc:d2:dc:89:d1:a4:f5:de:fe:7a:74:b0:
b9:de:b6:16:f6:fb:a6:0e:ed:50:d9:e1:9f:91:0d:9d:4e:7b:
53:a1:02:d3:e5:6d:bc:59:31:8a:de:aa:0f:aa:bd:d5:5e:43:
f6:0c:d5:d4:39:d2:62:87:26:1f:41:a1:95:e3:9a:41:2b:ee:
b7:ee:eb:25:27:d2:23:38:76:c2:01:9f:e4:15:d2:01:8b:0a:
bf:5d:1d:1d:8d:64:cb:86:ab:56:48:11:03:86:28:c8:31:2e:
e8:de:d2:21:93:8e:40:57:fe:14:93:45:b7:71:27:30:16:7f:
61:e5:a1:d7:9d:26:34:24:82:27:ba:1a:0e:b8:7e:c9:1e:fa:
ff:79:9d:38:e9:e7:1d:6d:d2:e6:4e:d1:4e:0e:8e:d6:d7:05:
c3:b2:b7:45:46:aa:f9:5e:19:2f:8e:ae:04:c0:db:ff:24:3f:
fa:42:5d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:42 2026 by rpki-client