Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2bdbaa29-cc56-4293-9c64-b4245c939f65.roa
File: 2bdbaa29-cc56-4293-9c64-b4245c939f65.roa (raw, json)
Hash identifier: QFoHJWMQ9NLWvD4WtKDHCPWmEGU8mYkCOlfRNH7sv3E=
Subject key identifier: 83:31:67:BE:2D:11:81:62:24:FA:43:DD:EA:66:6B:3C:20:87:F4:8E
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 36DB5E9F60C90E167E37D27E52AF031E14FFA4C7
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2bdbaa29-cc56-4293-9c64-b4245c939f65.roa
Signing time: Sat 07 Feb 2026 00:10:05 +0000
ROA not before: Sat 07 Feb 2026 00:10:05 +0000
ROA not after: Fri 08 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.74.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:db:5e:9f:60:c9:0e:16:7e:37:d2:7e:52:af:03:1e:14:ff:a4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 7 00:10:05 2026 GMT
Not After : May 8 23:59:59 2026 GMT
Subject: serialNumber=4f4adf77f2d75227cdcbbec0c014b0dba34d9557c3289f952957ea65bb02cd82, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0d:62:e7:ca:52:ae:1c:8b:7d:b1:f5:19:e0:
f7:6d:4e:da:04:87:7f:8b:26:5e:e8:3a:0c:ca:ad:
69:d9:65:0d:94:5a:c5:70:b1:13:f5:b1:0e:79:5c:
00:ae:1d:be:66:50:94:77:34:de:c3:ef:f7:05:22:
2f:1b:82:d2:8f:d2:a2:fe:1b:40:4d:b7:6f:fb:df:
a6:71:d5:3b:74:e2:e2:1d:d1:68:88:4f:f7:34:54:
3b:de:67:8e:80:04:d4:cd:8c:ef:6e:6c:2f:a7:98:
7d:26:dd:90:7b:f0:a4:8f:ef:b7:4a:23:25:9a:59:
cb:06:9b:30:f9:e5:11:3b:6a:dc:8e:da:d6:26:22:
80:b9:74:c1:3d:bc:d2:f8:48:8f:cc:3f:4b:0b:36:
6e:ce:44:06:33:27:0a:6a:9a:e6:3a:c8:18:ee:68:
70:ef:00:b0:d4:9f:b2:1c:2d:c8:af:0d:69:10:8e:
2d:23:6d:4b:40:4a:e7:9b:83:01:01:b8:81:d5:04:
f2:60:b9:38:6c:49:fb:96:8f:8e:23:38:ad:aa:68:
ff:b7:95:9c:e2:02:f5:c3:b1:91:11:ee:6b:7f:24:
8c:18:d7:3f:de:a4:30:6d:ca:74:b5:15:6b:a8:30:
59:c1:10:32:dc:aa:fc:ba:47:88:c0:cb:90:11:1b:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:31:67:BE:2D:11:81:62:24:FA:43:DD:EA:66:6B:3C:20:87:F4:8E
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2bdbaa29-cc56-4293-9c64-b4245c939f65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.16.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:c4:6e:70:67:77:73:49:bb:70:e6:5a:aa:5d:b2:b6:8f:ef:
5b:01:9d:23:4d:44:5d:d3:7f:d0:98:9b:c9:21:8b:c0:5a:b5:
ee:8c:c8:d6:e6:e1:ec:f7:41:40:55:76:10:46:20:a3:9a:6c:
38:c9:4d:3a:a7:b9:60:87:1c:b3:31:b9:2e:72:f7:a6:0c:67:
22:12:d3:82:07:38:43:17:7f:93:1c:3b:37:db:05:7a:9e:c2:
2e:8d:40:39:19:19:7d:3f:fd:38:ca:82:ad:e6:21:7b:23:30:
33:70:c9:56:2b:99:30:10:75:a8:0b:50:98:c4:9c:e5:25:85:
50:40:bb:55:64:df:f5:71:08:ea:25:c3:ca:95:53:9b:41:84:
1c:26:96:db:4d:58:bc:fc:e9:2d:f0:73:10:27:c0:59:18:7e:
3e:27:5a:51:79:34:90:8a:59:b1:25:3d:19:29:28:0b:65:f9:
f0:49:cb:14:3c:64:a8:d2:0e:92:6e:34:27:77:f7:d6:de:81:
9b:69:c3:53:89:ba:a9:88:a2:dc:b2:b3:2e:95:0e:55:d0:3a:
81:a2:d9:62:40:f1:d0:d4:9d:bb:f5:35:ab:f1:fd:35:ea:56:
97:f4:39:b4:f7:69:25:93:91:75:04:e0:b1:a8:f6:3b:68:c5:
aa:90:6e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:22:36 2026 by rpki-client