Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/eb3c8461-ea00-417e-b659-9bb93aefdb19.roa
File: eb3c8461-ea00-417e-b659-9bb93aefdb19.roa (raw, json)
Hash identifier: 7r4HxJ6MDwrMvac2eoGEG65/yhaYuBEIDKZBjCuGeN0=
Subject key identifier: 9F:36:86:46:52:25:8A:B5:56:A2:F3:5C:38:4F:9A:04:C7:04:B6:FC
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7624CC91A6C58DC149E01FE0FC54603E30BA721E
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/eb3c8461-ea00-417e-b659-9bb93aefdb19.roa
Signing time: Wed 12 Aug 2026 20:18:08 +0000
ROA not before: Wed 12 Aug 2026 20:18:08 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 51.0.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:24:cc:91:a6:c5:8d:c1:49:e0:1f:e0:fc:54:60:3e:30:ba:72:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:18:08 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=fc8c83dadbd48f3fba5fa9d304e516539e88fe22a4845b11afa0400235a7949f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:eb:b7:30:0f:38:3d:09:9e:f9:3e:c4:ba:f4:
eb:7d:29:f9:10:1d:ec:51:1f:15:73:93:32:91:bb:
51:a3:05:9d:89:ba:72:27:ac:68:e7:3c:d0:ac:d5:
29:fc:0e:7c:7a:4d:cc:e1:36:1e:88:99:66:2e:b6:
c5:a3:62:4a:f7:44:64:59:ea:c1:d1:f7:3a:46:29:
48:03:ca:61:3e:21:30:4a:ad:b1:c8:1c:62:83:82:
f4:36:b9:ff:06:8d:40:d6:41:ac:67:8f:2c:40:c2:
80:09:93:ec:f9:4a:70:22:ba:82:ce:10:fd:32:42:
21:09:9a:08:45:1f:ca:8c:2b:f3:3a:37:9b:2b:c2:
fe:22:5a:22:b1:71:7c:c8:ef:e7:54:9a:22:e4:dd:
f5:ae:c5:b5:a4:af:1e:a1:c0:52:45:f8:a6:b0:04:
56:6c:1f:60:01:02:30:fd:77:cc:10:d3:04:90:62:
ca:e3:e4:88:66:d6:43:fb:81:f8:39:cc:ae:c9:83:
99:72:73:07:ce:1c:90:e6:32:b6:95:48:ad:07:8d:
fb:12:9c:63:05:2b:8c:36:a3:fe:03:a4:cd:e3:d3:
c2:02:53:5d:e0:2d:95:0f:3f:70:47:f1:70:e9:7e:
ee:3b:42:e4:96:43:7e:57:97:7f:27:60:ef:d4:e2:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:36:86:46:52:25:8A:B5:56:A2:F3:5C:38:4F:9A:04:C7:04:B6:FC
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/eb3c8461-ea00-417e-b659-9bb93aefdb19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.128.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:62:e4:58:6c:82:89:05:ad:eb:5a:3e:de:0e:71:15:86:98:
48:37:c8:b4:64:d6:b9:76:fd:d7:7f:0b:6c:83:f6:51:0a:f8:
a2:4d:a8:5b:06:a3:47:68:24:9a:d0:b2:86:63:3c:a7:f3:18:
98:79:18:c7:26:7a:17:25:2a:a7:7e:3d:bb:65:cb:77:a8:63:
d0:16:e2:ef:37:12:65:d6:6c:0b:1d:54:14:93:a2:0e:91:d1:
b5:30:ab:f1:a8:d6:50:d8:de:e9:cc:2d:73:13:91:e3:53:89:
dc:44:6a:e4:02:74:24:1f:a3:8b:4d:7b:83:5e:5a:26:5a:e5:
e6:d0:26:63:ee:14:0c:15:bc:6a:e8:12:1c:e3:11:ca:f7:e5:
0e:05:ee:1e:6b:66:60:8f:3a:12:10:e5:7e:72:b3:fc:26:42:
5a:1c:2a:03:59:51:0a:00:c8:15:59:93:8e:61:b3:56:f5:8b:
fd:87:06:65:42:8f:d5:64:57:83:b0:6e:b4:10:16:bb:74:83:
a4:76:0e:20:28:2c:35:3d:75:dc:bf:01:e2:74:05:49:71:55:
ca:86:af:b9:91:ff:de:2f:1e:b0:88:7a:8d:5f:1b:4b:63:12:
7c:62:b1:8e:4f:e5:87:25:1f:e9:06:c7:60:8c:21:4b:5f:be:
e5:f7:62:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:30:34 2026 by rpki-client