Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e31b4829-a8a6-4dd2-ba5c-985e6234c3f7.roa
File: e31b4829-a8a6-4dd2-ba5c-985e6234c3f7.roa (raw, json)
Hash identifier: n5p4OGIOM7LaOwgsLv/NERR3CFm8sOB4Sw0qENnbceI=
Subject key identifier: B6:58:E1:26:9C:FB:94:B9:D3:99:88:39:C9:BA:68:02:A2:7F:1D:C9
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 50D2C0EABD9D0DAB7361B47FA792D58186CC0C19
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e31b4829-a8a6-4dd2-ba5c-985e6234c3f7.roa
Signing time: Thu 26 Feb 2026 02:00:36 +0000
ROA not before: Thu 26 Feb 2026 02:00:36 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.224.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d2:c0:ea:bd:9d:0d:ab:73:61:b4:7f:a7:92:d5:81:86:cc:0c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 26 02:00:36 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=f07e049e4e75698cc3ad1ed486c7528f9b20f090a0d43db5d325261c1e0d6c10, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:5c:68:77:46:74:48:57:95:8f:a0:63:79:
c3:68:03:83:ba:b7:9e:1d:4c:a8:67:42:ce:44:95:
b7:2b:ac:ff:6a:eb:bb:31:c5:7d:64:2f:95:19:9e:
12:4d:25:ef:77:65:f8:14:1b:d7:e0:ef:19:6c:d6:
fb:d9:90:5e:a4:7c:db:9f:c3:27:ea:ad:a9:ff:9c:
34:c1:d0:ad:55:43:54:93:9a:ed:35:ea:29:e0:34:
c3:1e:2d:81:96:ad:1c:b1:ee:b5:79:03:15:2e:79:
6b:6d:e6:5f:eb:da:82:aa:51:bf:1b:8b:41:40:c5:
c2:7d:43:51:73:f0:48:d1:8b:f2:57:06:62:b3:b9:
21:4e:f2:7e:0a:8f:50:fc:43:da:06:4c:c8:04:7d:
fb:c6:5f:1c:56:fd:48:c8:a7:d4:1a:c8:75:cc:99:
78:3f:d6:cb:59:73:59:33:fa:2f:70:91:ec:1c:24:
7d:8e:19:75:37:c2:71:2e:10:57:65:b3:11:60:81:
dd:82:ea:9c:6b:90:4d:e7:25:15:c5:fd:2f:bb:c3:
47:98:08:35:6d:8c:4e:52:c8:fc:4c:db:b7:6f:4e:
da:d8:c1:90:f7:7c:51:d7:1b:03:4d:ab:e8:0b:10:
5f:7c:13:85:77:0a:f1:63:20:c7:d1:81:72:59:7f:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:58:E1:26:9C:FB:94:B9:D3:99:88:39:C9:BA:68:02:A2:7F:1D:C9
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e31b4829-a8a6-4dd2-ba5c-985e6234c3f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.194.0/23
Signature Algorithm: sha256WithRSAEncryption
60:e0:9b:d1:62:ff:d9:4e:3f:b5:e7:60:0a:f7:d4:45:77:50:
ad:b3:82:97:6a:7c:23:0e:0f:32:54:d8:f9:53:94:3b:4f:c9:
38:b2:6b:45:e4:bb:e0:83:2b:c8:7f:d0:8b:63:7c:dc:48:54:
84:ba:49:7c:9c:4f:8f:99:b2:a0:81:88:be:ea:dc:d0:a8:e3:
05:3c:55:d2:8c:6c:9a:49:3a:9e:21:8b:7f:7a:b5:7d:9d:5c:
43:14:39:0d:a8:c1:89:f2:3c:8c:3c:b7:4e:c9:6e:d2:d0:6d:
df:6c:98:dc:d1:20:04:bc:a8:fd:fd:a4:c5:75:2b:20:4b:21:
82:b2:4e:34:c0:dc:cc:92:30:78:be:2f:b8:d1:e2:1a:15:03:
76:bd:d1:50:c3:40:a4:81:00:5c:e4:59:1e:c2:78:63:1b:93:
e0:a1:38:41:4c:5f:63:4e:ff:c8:b5:d2:a1:de:f4:ea:80:68:
74:89:9b:1e:a6:3d:c5:f3:10:8c:a2:cd:39:05:b8:1f:f0:c8:
66:ee:62:7f:a0:5e:95:2e:4f:65:28:2a:9f:4a:15:28:de:1e:
2f:31:86:2d:90:67:30:36:59:f1:35:0d:6e:6d:ef:ef:7e:07:
99:d3:e3:7f:47:42:4f:a2:5c:8d:66:46:5c:be:28:f9:ae:02:
e0:76:5c:95
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUUNLA6r2dDatzYbR/p5LVgYbMDBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjAyMjYwMjAwMzZaFw0yNjA1MjcyMzU5NTlaMHoxSTBHBgNV
BAUTQGYwN2UwNDllNGU3NTY5OGNjM2FkMWVkNDg2Yzc1MjhmOWIyMGYwOTBhMGQ0
M2RiNWQzMjUyNjFjMWUwZDZjMTAxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALf/XGh3RnRIV5WPoGN5w2gDg7q3nh1MqGdCzkSVtyus/2rruzHFfWQvlRme
Ek0l73dl+BQb1+DvGWzW+9mQXqR825/DJ+qtqf+cNMHQrVVDVJOa7TXqKeA0wx4t
gZatHLHutXkDFS55a23mX+vagqpRvxuLQUDFwn1DUXPwSNGL8lcGYrO5IU7yfgqP
UPxD2gZMyAR9+8ZfHFb9SMin1BrIdcyZeD/Wy1lzWTP6L3CR7BwkfY4ZdTfCcS4Q
V2WzEWCB3YLqnGuQTeclFcX9L7vDR5gINW2MTlLI/Ezbt29O2tjBkPd8UdcbA02r
6AsQX3wThXcK8WMgx9GBcll/MRMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBS2WOEm
nPuUudOZiDnJumgCon8dyTAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
ZTMxYjQ4MjktYThhNi00ZGQyLWJhNWMtOTg1ZTYyMzRjM2Y3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATPgwjAN
BgkqhkiG9w0BAQsFAAOCAQEAYOCb0WL/2U4/tedgCvfURXdQrbOCl2p8Iw4PMlTY
+VOUO0/JOLJrReS74IMryH/Qi2N83EhUhLpJfJxPj5myoIGIvurc0KjjBTxV0oxs
mkk6niGLf3q1fZ1cQxQ5DajBifI8jDy3Tslu0tBt32yY3NEgBLyo/f2kxXUrIEsh
grJONMDczJIweL4vuNHiGhUDdr3RUMNApIEAXORZHsJ4YxuT4KE4QUxfY07/yLXS
od706oBodImbHqY9xfMQjKLNOQW4H/DIZu5if6BelS5PZSgqn0oVKN4eLzGGLZBn
MDZZ8TUNbm3v734HmdPjf0dCT6JcjWZGXL4o+a4C4HZclQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:53:50 2026 by rpki-client