Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d5f28959-e053-4dd5-9cd7-d519d57c2a0e.roa
File: d5f28959-e053-4dd5-9cd7-d519d57c2a0e.roa (raw, json)
Hash identifier: WDoQhdreIFU+SgHIh28rUU9SwiLUDfSkpJZBX9490Zg=
Subject key identifier: D7:F2:3F:E3:5E:22:97:FE:C9:1D:8E:E7:F1:FE:3F:F4:6A:53:13:6B
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 219B7D158A88A235D1858D45489319B654C320D5
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d5f28959-e053-4dd5-9cd7-d519d57c2a0e.roa
Signing time: Wed 05 Aug 2026 02:00:09 +0000
ROA not before: Wed 05 Aug 2026 02:00:09 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:9b:7d:15:8a:88:a2:35:d1:85:8d:45:48:93:19:b6:54:c3:20:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:09 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=33ddaf7e3d6ebac373424ade991321278726947c8db7c8ac0f4427789c793031, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:44:5d:db:ec:84:bc:1f:dd:36:95:6a:c4:
ea:d8:15:81:79:c7:c3:d0:8d:f3:87:20:14:9b:80:
21:1e:33:5f:04:8d:bd:b4:b3:4d:1c:53:e0:c9:c4:
91:71:97:1b:3a:0c:0c:bc:65:c7:99:f9:75:51:88:
87:c4:40:e8:b8:c9:60:ec:64:b6:47:59:3d:05:d1:
fa:b3:b0:77:7e:c6:48:b8:cd:d2:c5:82:b6:47:91:
33:f0:dc:e9:db:ff:ad:a3:1c:5e:60:cf:f8:82:11:
ac:40:76:a1:6d:9c:17:ea:ba:ac:c2:8d:f5:7c:e2:
14:b1:4d:4e:6a:a8:4f:ee:a1:bc:fd:22:de:ff:9d:
11:43:6f:6b:4c:e5:54:79:4a:7e:36:ca:f7:11:36:
df:0e:8a:cb:c8:62:6f:26:4f:43:5c:7a:61:fb:3f:
dd:74:54:d7:23:34:9e:37:9a:30:e5:cc:ac:c1:d2:
67:4d:69:80:dc:d8:cd:bf:f8:5c:d3:a6:21:cf:d6:
d0:8d:c9:aa:b8:9b:49:e2:07:2b:c2:f7:3f:37:3d:
84:2f:8d:30:47:d4:91:0e:b0:27:59:4e:f9:c6:ab:
66:c4:ae:d7:ad:9a:41:bf:ec:f2:d4:ad:0c:1b:e5:
e5:33:bb:cc:da:fc:4c:dc:d7:af:fb:35:f9:14:6a:
be:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F2:3F:E3:5E:22:97:FE:C9:1D:8E:E7:F1:FE:3F:F4:6A:53:13:6B
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d5f28959-e053-4dd5-9cd7-d519d57c2a0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.136.0/21
Signature Algorithm: sha256WithRSAEncryption
07:74:f3:8d:96:ef:f6:43:87:1d:2f:6d:e9:62:5f:c9:2a:a0:
9c:19:c4:93:b8:ef:03:b0:aa:ec:a6:af:fd:19:ac:74:08:5b:
f7:b4:43:fe:df:32:21:03:44:3b:85:17:69:f9:3d:d5:b9:29:
d9:02:f1:0c:be:dc:4f:72:6e:8b:42:39:b9:45:0b:8d:94:24:
74:b7:3d:c2:dd:48:4b:bf:f0:be:42:c3:b9:8a:ce:28:82:68:
6b:89:b6:95:d8:b5:34:3d:65:f6:ac:e5:4f:1d:8e:bc:83:3d:
75:de:93:50:c2:6f:53:a1:a4:d6:a2:93:e1:21:38:86:fa:4b:
9f:be:bd:50:ed:99:7f:bf:2e:f5:91:95:70:fe:3d:12:41:86:
b0:51:0b:fc:cc:fb:14:87:f8:1a:a1:c5:f7:72:29:0f:67:33:
df:9a:4b:ea:6b:03:aa:db:3b:38:6a:0e:f2:4c:42:2a:9b:86:
d0:94:03:67:ad:15:a7:4a:44:47:a6:ce:8d:79:7b:ef:5a:ef:
f0:e0:e8:af:00:f0:ad:81:ed:8a:d4:23:66:be:bc:0d:8b:99:
03:cd:4d:ab:4f:f1:d7:b8:19:81:99:04:eb:4c:10:f1:10:f7:
f9:6a:5c:49:42:a8:cc:a2:06:e6:e4:c1:89:bc:7b:bd:f2:43:
bb:74:d9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:34 2026 by rpki-client