Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/aa9c4ef5-16fb-4222-a99f-9dc3e40c6973.roa
File: aa9c4ef5-16fb-4222-a99f-9dc3e40c6973.roa (raw, json)
Hash identifier: Y/O2ZM2IKD7oJP3BTwl2cJi5tRqjERKPUgJRDExaLwg=
Subject key identifier: DF:57:A5:65:95:57:52:90:D3:10:0B:51:39:01:ED:6F:B0:90:9F:5D
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6B2C633127D490AA0AF7CB4DD441ADCEF153DD18
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/aa9c4ef5-16fb-4222-a99f-9dc3e40c6973.roa
Signing time: Thu 26 Feb 2026 02:00:09 +0000
ROA not before: Thu 26 Feb 2026 02:00:09 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.224.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2c:63:31:27:d4:90:aa:0a:f7:cb:4d:d4:41:ad:ce:f1:53:dd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 26 02:00:09 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=645d71229209b7b164a1a6bfd8df88a3330cffeb43718b2a52f9f7b62b09c077, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:cd:3c:d9:8b:0d:64:2c:51:3c:a5:d2:6f:
30:e8:f6:25:ab:7f:31:95:5d:f0:d8:79:03:cc:61:
a8:62:3c:09:85:fa:e1:73:09:06:27:49:0f:b8:96:
0b:da:6a:18:cf:68:c4:0a:f0:e1:63:72:f9:58:b0:
b6:3a:e5:a5:27:06:24:7c:b9:dc:0b:fd:7b:68:0e:
ab:a1:9d:08:19:a0:dd:56:ca:49:c2:38:d4:1d:ae:
1c:69:71:1e:1d:f9:98:41:99:df:08:c6:91:21:51:
5a:88:07:36:78:44:cb:aa:05:85:8a:41:d1:e4:30:
4f:41:b9:39:5a:e9:3b:5f:eb:15:b5:16:dc:37:32:
5d:8c:bd:54:ac:bd:4e:bf:8e:51:e7:61:9c:2f:5f:
a2:a6:2a:f4:3b:a7:b3:83:8a:33:71:66:bd:b3:85:
0f:6d:bc:96:5c:81:99:97:f9:4b:82:4e:22:c9:03:
90:e6:dd:ec:95:d9:b3:fe:d8:03:23:ef:da:05:39:
24:4e:96:1d:e8:70:ee:1c:33:d2:59:35:fd:54:16:
3e:c6:98:45:d1:17:a3:da:4f:49:00:d0:15:cc:a1:
01:8a:58:e7:5e:ad:8e:1e:84:31:fb:9f:6b:71:e8:
89:90:45:ab:d1:16:15:bc:72:b0:7d:ce:69:18:e1:
d9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:57:A5:65:95:57:52:90:D3:10:0B:51:39:01:ED:6F:B0:90:9F:5D
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/aa9c4ef5-16fb-4222-a99f-9dc3e40c6973.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.188.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:8d:cf:fd:ae:c1:1a:5d:e2:33:c4:da:07:07:9f:d2:84:a8:
e7:97:ff:d0:c2:1d:7f:ec:5b:19:b8:86:c6:28:bb:7e:f3:15:
20:c7:70:e2:47:a4:1d:70:3e:50:35:67:8e:48:bf:c4:5c:e4:
85:24:5e:8d:3b:83:c8:9a:99:8c:ea:d1:90:17:c0:0f:39:7c:
70:f2:9c:e8:22:d6:40:eb:68:de:ff:40:6e:2d:cd:7d:d4:cc:
f3:2f:06:89:57:47:bd:12:c5:a6:e7:5f:a4:0a:59:49:7f:49:
04:ef:cc:01:69:28:b6:20:17:0f:d1:08:1f:1a:df:d2:19:f5:
65:d2:99:ee:db:f6:33:4c:5e:ed:67:d9:e3:22:50:a6:97:5b:
96:54:02:7a:ed:e1:35:ef:b7:51:17:5d:66:3b:7f:34:4f:64:
8a:bd:d1:6a:b6:89:81:7e:3e:11:7b:a0:c2:ab:b8:80:a9:b9:
56:25:8c:89:90:74:eb:70:17:a3:0c:1b:54:9b:c6:e2:5b:23:
1f:d9:01:1b:64:1d:c3:ef:42:c9:56:ab:ee:07:92:b9:b5:9a:
e3:73:98:e4:6b:54:4d:a9:5e:e2:49:55:80:d1:20:26:ff:ca:
1e:44:01:12:b0:0d:b8:52:34:da:4a:d2:b6:dc:88:21:a9:10:
2c:45:49:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:09:28 2026 by rpki-client