Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/04768017-a832-4864-a959-b821959eafb8.roa
File: 04768017-a832-4864-a959-b821959eafb8.roa (raw, json)
Hash identifier: 0Jyz+i32AAJySxuPZI12D5irF6N2BEKDCBx0QdwUKtQ=
Subject key identifier: 1D:9D:85:E2:50:1E:A5:F0:B6:4C:EA:E8:E8:26:C9:DC:0D:FC:83:DF
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 770B7787C938181C989DB0794336CF36A38F2841
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/04768017-a832-4864-a959-b821959eafb8.roa
Signing time: Mon 11 May 2026 21:17:12 +0000
ROA not before: Mon 11 May 2026 21:17:12 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:0b:77:87:c9:38:18:1c:98:9d:b0:79:43:36:cf:36:a3:8f:28:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 21:17:12 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=dae0a94c0f9c1844244e159692a8e2fe77994396dac3dc602682dddec1b69e6a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:97:2e:bb:ad:dd:c5:bf:a4:fa:fd:2f:56:94:
5d:55:ef:c3:81:5a:ec:8b:4a:f8:bb:1c:88:c7:72:
80:d7:c2:8a:38:46:2e:d3:c0:12:78:9b:d9:90:14:
d0:27:ac:2d:1f:b8:ab:d2:aa:f8:8c:13:48:b5:3a:
e8:d7:8c:a3:b4:bd:0c:a6:41:a4:f0:73:4f:3c:c7:
c0:d3:ad:0b:d1:ba:c5:4a:38:7e:3b:f2:0d:10:15:
95:8f:4e:7a:3c:4a:74:a8:90:16:87:46:b6:79:93:
bd:59:64:87:e7:99:85:7b:c9:3e:b2:be:7f:0e:3f:
93:83:f2:b5:11:7d:08:51:e0:6a:8e:0b:f4:cf:c2:
4b:d7:c2:78:9e:40:54:ea:03:b3:a5:04:73:7f:0d:
1c:28:50:6a:cc:7a:9c:7e:01:17:6a:26:f6:c8:ec:
47:ec:79:51:a4:6e:39:33:2c:4b:61:4b:f7:00:40:
e3:22:91:1f:04:17:fb:03:60:5f:27:49:2b:10:18:
2e:a5:b3:a7:05:ea:4b:95:f8:f7:de:7d:d7:bf:54:
db:ca:e4:49:e7:a0:e9:ba:84:61:7b:ca:f1:1f:c0:
e4:ab:ba:3c:6d:e1:62:b6:21:7f:b2:47:31:43:b2:
1b:7a:86:ee:1f:58:41:64:3b:8e:fc:78:74:11:bd:
77:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9D:85:E2:50:1E:A5:F0:B6:4C:EA:E8:E8:26:C9:DC:0D:FC:83:DF
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/04768017-a832-4864-a959-b821959eafb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.133.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:29:61:a3:5c:87:1c:68:c3:9f:53:2d:10:95:fd:00:bf:2d:
1d:da:f5:3e:7b:61:a0:33:bd:e8:09:9c:50:71:e8:39:04:2c:
08:a3:25:a1:e1:e0:52:5e:54:a8:bc:a6:c8:c3:a6:2f:73:42:
db:9d:36:d3:c9:77:0b:c4:f6:a4:50:65:c1:a2:a8:65:39:23:
80:7f:a2:b2:ed:4c:9f:3b:99:33:86:3c:1a:b7:e8:5f:01:86:
a9:be:5b:80:1b:d9:c0:bf:e9:79:9a:17:76:c1:28:11:44:c8:
f9:d1:c0:6a:de:16:72:5f:6f:08:58:60:2b:d4:ee:ac:a6:76:
f6:d4:dc:35:87:bf:d7:0c:2f:9b:07:32:a0:be:0c:68:3e:2f:
cb:df:8f:fa:ca:fc:65:20:31:ce:b3:4b:fc:ab:d8:3f:7f:80:
37:08:30:05:09:0f:b2:ce:1f:43:7e:fa:a4:fb:fe:39:d8:c7:
f6:cd:5f:48:33:a5:d5:34:72:bb:d6:d6:1d:19:f9:5e:6c:e5:
74:03:cd:80:f2:b9:59:7f:93:56:c4:66:75:74:a4:d8:fb:17:
9e:80:38:86:8e:0b:99:4e:bc:ee:ce:a0:04:6f:ee:4b:4c:ab:
55:e7:3e:74:2e:c7:09:da:fc:af:97:05:f9:0e:2f:4a:93:40:
5b:08:18:da
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUdwt3h8k4GByYnbB5QzbPNqOPKEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA1MTEyMTE3MTJaFw0yNjA4MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGRhZTBhOTRjMGY5YzE4NDQyNDRlMTU5NjkyYThlMmZlNzc5OTQzOTZkYWMz
ZGM2MDI2ODJkZGRlYzFiNjllNmExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI6XLrut3cW/pPr9L1aUXVXvw4Fa7ItK+LsciMdygNfCijhGLtPAEnib2ZAU
0CesLR+4q9Kq+IwTSLU66NeMo7S9DKZBpPBzTzzHwNOtC9G6xUo4fjvyDRAVlY9O
ejxKdKiQFodGtnmTvVlkh+eZhXvJPrK+fw4/k4PytRF9CFHgao4L9M/CS9fCeJ5A
VOoDs6UEc38NHChQasx6nH4BF2om9sjsR+x5UaRuOTMsS2FL9wBA4yKRHwQX+wNg
XydJKxAYLqWzpwXqS5X49959179U28rkSeeg6bqEYXvK8R/A5Ku6PG3hYrYhf7JH
MUOyG3qG7h9YQWQ7jvx4dBG9d6ECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQdnYXi
UB6l8LZM6ujoJsncDfyD3zAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
MDQ3NjgwMTctYTgzMi00ODY0LWE5NTktYjgyMTk1OWVhZmI4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADMAhTAN
BgkqhkiG9w0BAQsFAAOCAQEALSlho1yHHGjDn1MtEJX9AL8tHdr1PnthoDO96Amc
UHHoOQQsCKMloeHgUl5UqLymyMOmL3NC250208l3C8T2pFBlwaKoZTkjgH+isu1M
nzuZM4Y8GrfoXwGGqb5bgBvZwL/peZoXdsEoEUTI+dHAat4Wcl9vCFhgK9TurKZ2
9tTcNYe/1wwvmwcyoL4MaD4vy9+P+sr8ZSAxzrNL/KvYP3+ANwgwBQkPss4fQ376
pPv+OdjH9s1fSDOl1TRyu9bWHRn5XmzldAPNgPK5WX+TVsRmdXSk2PsXnoA4ho4L
mU687s6gBG/uS0yrVec+dC7HCdr8r5cF+Q4vSpNAWwgY2g==
-----END CERTIFICATE-----
Generated at Tue May 12 21:53:37 2026 by rpki-client