Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/51195615-aa01-4b44-ab00-63024ac9ba29.roa
File: 51195615-aa01-4b44-ab00-63024ac9ba29.roa (raw, json)
Hash identifier: 3SB039PO6XnNk8HWytwO5RaNe58PYqi2YnOI6sDelLI=
Subject key identifier: 58:A6:4E:54:1A:37:ED:A1:2E:F8:5A:4B:CF:D2:6F:47:50:0E:56:8B
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2DEF873556D79BCAF68D7C2763A85431C97EECC8
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/51195615-aa01-4b44-ab00-63024ac9ba29.roa
Signing time: Thu 26 Feb 2026 02:00:37 +0000
ROA not before: Thu 26 Feb 2026 02:00:37 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.224.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:ef:87:35:56:d7:9b:ca:f6:8d:7c:27:63:a8:54:31:c9:7e:ec:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 26 02:00:37 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=6c2ab1e37fba418d84d9eebb04fada7da5d15dc465b23609277f239c1ac4c33e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:a6:cf:43:af:50:af:cc:6b:91:ab:44:76:
e4:0a:bb:1d:c6:92:0f:d9:7f:d2:27:aa:03:43:67:
67:11:71:43:69:d2:a8:7c:85:c6:bc:4d:70:20:3c:
6c:9b:a6:44:07:b4:d7:c3:4f:76:b1:c6:fb:50:49:
a6:06:92:be:44:8c:34:7b:f8:32:8e:79:2f:4e:6b:
7c:8e:94:aa:d2:9f:7a:4f:b3:1a:04:4d:53:3a:29:
a4:f4:5f:c7:9f:77:c4:e8:65:a6:e4:97:ce:11:49:
d5:22:ec:7c:fc:28:ed:15:ea:d7:75:68:97:49:4a:
9a:7d:5e:6e:6f:2f:cc:66:c7:29:51:19:14:45:29:
0e:c0:71:45:e1:ca:97:7d:34:17:f2:57:36:99:ba:
cd:01:5e:b5:eb:01:f9:e2:72:e2:8e:a5:d0:c4:2c:
f3:e1:72:02:19:de:57:07:83:0c:36:b4:e5:db:69:
bf:9a:d5:85:c6:9f:44:e7:bf:97:d7:bc:d7:e3:a3:
a3:bf:a3:ef:3e:36:fe:53:88:5c:80:c3:9a:04:fb:
d7:8b:79:40:38:ee:8b:f3:8e:15:ab:e1:88:6a:3d:
ec:26:ed:04:c1:62:9d:49:23:84:af:9a:1b:04:5f:
fa:91:51:ca:81:3a:ac:82:b0:3f:9b:ac:3c:0d:6a:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A6:4E:54:1A:37:ED:A1:2E:F8:5A:4B:CF:D2:6F:47:50:0E:56:8B
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/51195615-aa01-4b44-ab00-63024ac9ba29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.196.0/23
Signature Algorithm: sha256WithRSAEncryption
52:e6:93:51:81:89:75:7a:69:9e:73:30:67:e0:68:0d:a2:c0:
6f:98:fc:cc:da:bd:f7:3d:69:10:3e:8d:10:41:b1:ab:79:78:
76:3a:3c:80:91:b8:81:fc:b1:f1:3a:10:63:a9:ba:5a:f3:ec:
82:a2:74:ac:7c:ba:75:29:27:5c:98:a7:87:de:34:73:b8:d9:
e1:32:03:59:bd:ca:4d:03:4a:61:be:d4:2f:1d:c1:76:c6:ec:
2c:e9:d2:c3:61:74:5e:58:d1:c6:f3:d6:93:f7:76:2c:5b:b2:
0a:9a:eb:b5:24:0b:05:cd:db:ed:c6:c6:d9:a9:e5:85:b5:cc:
5d:e3:45:ec:fa:e8:f5:63:38:30:57:b2:5a:4c:fb:24:58:dc:
d8:ed:5a:fc:e2:fe:b4:d4:22:41:60:0a:04:2a:79:35:ae:0c:
24:32:86:2e:55:23:65:5a:93:da:45:5e:86:81:2e:3f:a9:22:
3e:ce:ed:f5:39:bc:9e:bb:d4:49:a5:84:2f:73:85:c9:27:be:
8b:d5:83:5f:ad:4d:56:de:6d:56:c2:31:97:f2:7a:f3:0e:58:
4d:40:68:8a:0e:cf:9d:1e:2d:93:ef:10:01:c9:4a:18:0d:47:
75:41:e0:a7:8d:a1:41:ef:d6:5c:ce:98:d9:30:2f:ce:7d:af:
fa:a7:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:22 2026 by rpki-client