Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/913f508a-6669-4aae-b87b-35989f3889f0.roa
File: 913f508a-6669-4aae-b87b-35989f3889f0.roa (raw, json)
Hash identifier: tgwPKDP0kQyfPWrQMVOm9DR+9lZdANepi3+nCAXPJRE=
Subject key identifier: 94:3A:4B:3D:E9:80:E0:0A:9A:27:7E:C3:6C:86:C2:01:CD:02:B8:2D
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1DA0D03FF9ADABFC6266F64A8D8B295F00A20468
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/913f508a-6669-4aae-b87b-35989f3889f0.roa
Signing time: Mon 13 Apr 2026 00:00:06 +0000
ROA not before: Mon 13 Apr 2026 00:00:06 +0000
ROA not after: Sun 12 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a0:d0:3f:f9:ad:ab:fc:62:66:f6:4a:8d:8b:29:5f:00:a2:04:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Apr 13 00:00:06 2026 GMT
Not After : Jul 12 23:59:59 2026 GMT
Subject: serialNumber=9e2d42ca8ccc3c4b4224dfafff50612acbd60291b0bfc111054c33d4e9d808db, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:99:56:04:6d:31:78:e3:b6:54:6b:6e:71:
18:f6:e9:d6:67:93:50:af:1e:b8:1f:48:1b:a1:ea:
48:b3:66:89:fd:aa:82:35:62:2c:46:3b:f0:ab:e5:
e2:2e:f9:a9:3c:c5:19:ae:40:8e:de:85:51:7b:4c:
60:ce:7b:cf:dd:e6:ca:a5:37:94:d2:1c:0f:4e:7c:
b4:eb:79:15:96:d9:07:89:12:26:2b:33:3d:8c:b0:
f2:cf:78:37:98:af:d4:97:98:80:8d:8d:c4:96:dc:
06:2f:26:fc:14:66:94:20:84:dd:7e:0a:4b:89:ff:
7f:ab:5b:d0:f7:f0:67:1e:76:e3:e8:bd:59:a4:4d:
9a:4f:ea:0f:c7:9d:f2:bb:d4:51:53:c7:34:d7:44:
12:35:7c:67:c1:26:02:0a:58:13:02:d7:6b:c9:6f:
21:08:50:cc:ab:9c:a6:dd:a5:71:12:81:28:a4:a3:
a7:85:9e:f7:77:51:89:eb:86:22:3c:f6:61:08:01:
19:39:58:a6:12:cb:7a:d2:2a:df:a4:06:1b:8f:f2:
9e:1f:83:f3:e7:1e:6f:cf:1d:12:51:48:f1:dd:32:
bc:6c:31:04:6b:52:49:94:21:f4:78:01:34:2e:b6:
56:bc:57:0f:89:c2:4c:ed:93:31:c3:8b:0c:21:5b:
ce:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3A:4B:3D:E9:80:E0:0A:9A:27:7E:C3:6C:86:C2:01:CD:02:B8:2D
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/913f508a-6669-4aae-b87b-35989f3889f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:bf:e6:fb:9b:ec:97:65:a2:5c:e3:d2:7f:eb:7a:c2:47:9a:
d8:ef:05:19:b4:d3:8f:8c:e0:34:c4:67:2a:ba:77:80:3a:24:
4f:4e:18:73:6b:61:5b:81:64:b1:cc:5e:00:f3:46:19:0f:d9:
ba:b8:d7:b4:2a:03:3e:e4:5a:47:95:7e:44:ff:a0:0b:3d:64:
c5:94:80:54:ed:cc:8b:23:90:35:21:0a:05:78:b3:7c:32:82:
fb:7f:51:5b:ff:f9:7c:bc:32:66:38:77:62:75:a4:14:6a:9c:
6b:e9:c1:25:50:5d:ec:29:5b:02:6e:09:d9:51:f0:33:cc:62:
15:9b:23:36:94:fd:43:e5:c7:2f:aa:24:3f:d6:ab:4c:12:a5:
ff:9b:c9:22:47:b0:9f:f1:31:dd:f4:7d:56:78:f7:d4:8b:5a:
36:fa:90:18:2b:62:54:21:57:55:d0:3f:0f:c2:97:9b:c3:c8:
0f:d0:4a:aa:de:5f:f1:1c:af:4e:45:43:3a:17:eb:20:65:48:
00:50:8e:cd:fc:31:b1:c3:91:6c:59:57:9f:c3:6d:b7:c3:25:
35:71:bc:66:60:10:80:c1:25:c2:e7:7e:71:9f:7b:29:c9:b4:
ca:a0:04:03:a2:34:65:dc:fd:e1:fc:d2:93:cc:94:44:53:5f:
0a:0a:e7:06
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUHaDQP/mtq/xiZvZKjYspXwCiBGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA0MTMwMDAwMDZaFw0yNjA3MTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDllMmQ0MmNhOGNjYzNjNGI0MjI0ZGZhZmZmNTA2MTJhY2JkNjAyOTFiMGJm
YzExMTA1NGMzM2Q0ZTlkODA4ZGIxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK2NmVYEbTF447ZUa25xGPbp1meTUK8euB9IG6HqSLNmif2qgjViLEY78Kvl
4i75qTzFGa5Ajt6FUXtMYM57z93myqU3lNIcD058tOt5FZbZB4kSJiszPYyw8s94
N5iv1JeYgI2NxJbcBi8m/BRmlCCE3X4KS4n/f6tb0PfwZx524+i9WaRNmk/qD8ed
8rvUUVPHNNdEEjV8Z8EmAgpYEwLXa8lvIQhQzKucpt2lcRKBKKSjp4We93dRieuG
Ijz2YQgBGTlYphLLetIq36QGG4/ynh+D8+ceb88dElFI8d0yvGwxBGtSSZQh9HgB
NC62VrxXD4nCTO2TMcOLDCFbzvcCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSUOks9
6YDgCponfsNshsIBzQK4LTAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
OTEzZjUwOGEtNjY2OS00YWFlLWI4N2ItMzU5ODlmMzg4OWYwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADMA+zAN
BgkqhkiG9w0BAQsFAAOCAQEApr/m+5vsl2WiXOPSf+t6wkea2O8FGbTTj4zgNMRn
Krp3gDokT04Yc2thW4FkscxeAPNGGQ/ZurjXtCoDPuRaR5V+RP+gCz1kxZSAVO3M
iyOQNSEKBXizfDKC+39RW//5fLwyZjh3YnWkFGqca+nBJVBd7ClbAm4J2VHwM8xi
FZsjNpT9Q+XHL6okP9arTBKl/5vJIkewn/Ex3fR9Vnj31ItaNvqQGCtiVCFXVdA/
D8KXm8PID9BKqt5f8RyvTkVDOhfrIGVIAFCOzfwxscORbFlXn8Ntt8MlNXG8ZmAQ
gMElwud+cZ97Kcm0yqAEA6I0Zdz94fzSk8yURFNfCgrnBg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:33:59 2026 by rpki-client