Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/de6a2853-3803-405e-9bac-2b96eb87582d.roa
File: de6a2853-3803-405e-9bac-2b96eb87582d.roa (raw, json)
Hash identifier: 6TD0MY1u2SNR6x/OPMgBfTGk6bqzDJZ2vpRl9kYw1xg=
Subject key identifier: 77:74:B2:BC:BA:8C:E5:70:0F:D2:73:7D:FA:A1:B5:55:B8:A2:A9:8D
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7890FABCF0B9FBCFDE69C9673B4220AB554FED2C
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/de6a2853-3803-405e-9bac-2b96eb87582d.roa
Signing time: Wed 05 Aug 2026 02:00:10 +0000
ROA not before: Wed 05 Aug 2026 02:00:10 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:90:fa:bc:f0:b9:fb:cf:de:69:c9:67:3b:42:20:ab:55:4f:ed:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 5 02:00:10 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=b31d92a3b92f29f29a74c83be63e504162fb0f4e9aae2806f39d12ea16d313b2, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:0a:eb:a0:73:d4:4e:0a:0d:00:9f:da:58:
61:3e:d3:f8:a9:81:57:55:48:88:33:6e:11:45:d2:
91:fe:56:6b:73:8e:48:c9:7e:aa:c1:39:1d:2c:67:
7c:fa:89:29:13:23:b3:9a:b3:b7:c6:ac:61:f7:2c:
56:b9:93:b9:39:93:ee:a0:23:26:a2:da:96:52:9d:
12:25:48:06:8a:e1:cc:55:60:49:d9:18:a6:b3:aa:
be:44:d1:45:32:ea:73:34:c9:ca:c4:80:c6:37:77:
04:7b:24:33:38:f8:fb:d1:72:cd:10:ec:e7:d8:23:
27:80:41:ec:85:8a:a0:f6:86:5e:48:21:c2:08:fd:
d2:d0:2f:5b:b1:32:3c:99:95:a2:b2:12:1a:19:e4:
43:9a:35:27:8a:9d:a3:f5:0f:81:c6:13:1d:7e:dd:
f7:96:9d:94:fc:43:a5:72:3f:d2:83:37:75:c5:49:
22:e5:57:b7:7a:a2:2d:e9:39:2f:a4:fa:eb:98:eb:
8c:e5:61:65:e4:53:0a:69:e4:63:dc:5c:90:00:ea:
7f:bb:dd:1e:14:cc:02:0a:91:26:47:60:96:91:a9:
d3:cc:32:2c:f7:33:f9:ec:15:24:79:66:80:c0:16:
97:3e:14:96:05:35:4b:2a:13:0a:07:19:16:30:a1:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:74:B2:BC:BA:8C:E5:70:0F:D2:73:7D:FA:A1:B5:55:B8:A2:A9:8D
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/de6a2853-3803-405e-9bac-2b96eb87582d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.30.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:0d:77:5f:09:80:c3:14:eb:e1:22:ca:17:43:da:1e:49:db:
b6:ec:8b:69:56:91:86:ce:d6:3b:c2:3d:db:c8:7f:7e:54:0f:
e9:c9:6d:f1:aa:dc:03:4d:80:c9:67:fe:db:43:d3:7e:db:84:
a9:de:cf:85:2e:ce:fb:75:58:97:35:43:28:4a:97:7f:85:0a:
38:7b:33:80:a1:52:98:79:d6:59:5e:12:f2:c4:1f:47:3a:ed:
8d:42:55:93:d2:67:fc:6f:c6:b5:d8:d0:09:f4:72:ab:c8:be:
5a:67:56:a3:c6:3e:9b:bc:d4:b2:ab:fb:99:a0:b1:2a:9a:61:
b8:19:2f:d8:c8:bc:be:03:83:89:b8:4a:55:8e:6f:61:a9:d6:
64:30:a1:18:86:de:93:01:99:cb:11:51:e7:1e:59:fa:cc:01:
4e:44:5f:c4:13:da:44:81:3b:28:a5:5d:43:c1:31:81:98:5c:
38:6d:64:48:4e:a4:65:ea:6f:a2:c8:57:24:85:e8:a0:e4:ea:
bd:7a:cb:80:3e:b2:4d:a6:e2:7c:d0:0e:ff:fd:5d:e0:a5:b7:
f9:a1:c2:de:8e:d2:d8:c3:d9:c0:7e:ed:e4:76:2f:1a:bb:40:
50:6b:12:1b:e6:be:f9:05:f3:9b:73:18:4b:ef:ed:2b:2c:ad:
16:fd:d1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:22 2026 by rpki-client