Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/913f508a-6669-4aae-b87b-35989f3889f0.roa
File: 913f508a-6669-4aae-b87b-35989f3889f0.roa (raw, json)
Hash identifier: 0xAp1wCVfFK9il7R4ojlvgm5uLCOD0LarGKRgbbLGA4=
Subject key identifier: 57:98:10:25:48:E6:40:57:7C:AF:E2:B0:01:A2:EE:AC:12:E1:0D:74
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 497ED75FC9572E2AB0A1B209A4BFDE00A9F26BCB
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/913f508a-6669-4aae-b87b-35989f3889f0.roa
Signing time: Sun 20 Sep 2026 00:00:11 +0000
ROA not before: Sun 20 Sep 2026 00:00:11 +0000
ROA not after: Sat 19 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:7e:d7:5f:c9:57:2e:2a:b0:a1:b2:09:a4:bf:de:00:a9:f2:6b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Sep 20 00:00:11 2026 GMT
Not After : Dec 19 23:59:59 2026 GMT
Subject: serialNumber=a4df36c9a3f377114068f349fb28db59d9a5e88bd3c7f1062860b2feb13f8e76, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:da:4e:d2:8e:bb:26:d1:21:34:46:33:66:
54:df:a0:51:1a:8d:ba:f3:ef:97:96:55:40:88:ea:
87:ef:a0:d6:2b:54:63:37:c8:67:38:cf:7f:43:eb:
32:e8:13:12:c2:60:71:bd:bf:b2:00:e6:52:e5:03:
bd:f6:5b:ee:be:ac:eb:2b:e3:0d:96:18:8a:36:bf:
e0:77:ba:f7:79:a9:32:9d:64:9b:43:66:ae:30:49:
bf:e6:0d:24:a1:f9:62:e0:eb:fb:cd:18:82:5e:13:
84:ab:b8:24:f3:29:f9:e9:bb:69:b9:16:ac:29:80:
23:18:ae:4e:1d:1a:00:48:af:8b:7e:61:1d:3a:ec:
78:b0:69:80:ec:eb:ea:9c:fe:b4:8d:08:d4:3b:3f:
71:cf:0e:82:9e:3a:04:54:6c:7c:8c:ca:05:56:93:
b7:ef:83:cd:d6:bf:c5:51:ab:38:c6:ba:16:da:c7:
77:5a:3c:8f:1c:c4:4c:7e:37:ba:66:1e:92:5e:22:
ba:2c:9f:b1:9f:b6:5b:98:a7:a2:d3:80:97:c2:e6:
51:7d:ba:9c:b2:1c:2a:3f:87:0e:83:f3:1a:44:bf:
a9:70:8c:0b:38:c2:7f:3c:77:74:50:ab:38:40:c7:
ff:ca:05:18:a8:67:41:80:d2:c4:96:05:54:3d:0c:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:98:10:25:48:E6:40:57:7C:AF:E2:B0:01:A2:EE:AC:12:E1:0D:74
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/913f508a-6669-4aae-b87b-35989f3889f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.251.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:ce:a1:e3:19:08:a2:52:85:85:d2:04:6f:db:78:c2:ba:a4:
06:be:e1:aa:ab:73:0d:cf:df:04:55:74:d2:bd:65:65:c0:b9:
42:03:5b:9c:cf:99:a5:98:21:1d:5b:3b:a9:c8:1e:1b:f9:af:
56:84:3c:43:86:df:84:7e:42:23:43:47:8a:b5:c0:3d:1e:35:
21:2e:ec:86:4b:4a:f3:48:09:68:6f:be:c4:93:62:d1:94:29:
59:30:d9:b6:04:79:03:f6:21:38:55:0c:43:7d:46:af:57:41:
b6:65:1c:f2:d9:92:de:e0:b4:cd:2c:1d:33:a8:e9:54:f5:88:
da:46:0b:42:94:59:75:6c:3f:70:55:c9:65:e8:19:21:42:81:
f0:0c:8e:d1:be:e8:1c:25:72:0e:08:d3:5d:7c:ef:e6:07:1f:
3c:8f:a8:75:53:2e:6f:48:ea:8f:3f:f8:17:1d:7a:5b:3a:ae:
60:cc:0d:fa:14:5c:f9:70:c5:99:86:bc:b8:43:d0:01:95:20:
d1:66:59:c8:83:7c:43:f5:f1:02:21:77:14:cf:ab:84:83:49:
d6:2e:11:78:96:ef:6b:d3:6e:49:4d:61:21:27:bf:cc:c9:a4:
2d:fd:a0:f5:86:39:2e:60:90:49:8f:19:af:ec:2e:46:c2:ab:
91:77:29:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:16:35 2026 by rpki-client