Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2bdbaa29-cc56-4293-9c64-b4245c939f65.roa
File: 2bdbaa29-cc56-4293-9c64-b4245c939f65.roa (raw, json)
Hash identifier: rzpYOgJIqsX2NITz47cP9czo1C4D2h2S5Coujs7sz2Y=
Subject key identifier: 4A:1D:C4:4C:66:44:41:FA:03:80:DC:DF:92:BE:FE:B2:6D:05:0B:10
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6BD6DCB9E057E13F9B82D611EBA33DE54528266E
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2bdbaa29-cc56-4293-9c64-b4245c939f65.roa
Signing time: Fri 17 Jul 2026 00:10:04 +0000
ROA not before: Fri 17 Jul 2026 00:10:04 +0000
ROA not after: Thu 15 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.74.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d6:dc:b9:e0:57:e1:3f:9b:82:d6:11:eb:a3:3d:e5:45:28:26:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 17 00:10:04 2026 GMT
Not After : Oct 15 23:59:59 2026 GMT
Subject: serialNumber=881907f30f35ca2c508c961f64bfd3288c46c95ebb78fe6f63b6b8317233dafb, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ad:fa:c4:92:5b:c1:7d:6a:3e:a4:02:9b:44:
83:65:c9:44:cf:33:e8:55:91:db:20:46:17:ec:29:
58:20:a7:59:af:8b:b4:bb:c2:e6:cf:dc:6b:b9:79:
71:1b:3d:12:4a:a6:ba:bd:20:55:84:68:49:35:60:
b7:88:f7:a5:fc:7a:81:34:b1:c4:48:2b:e2:dd:5b:
5a:a6:20:b4:85:18:11:4f:ca:7f:3f:40:4c:bd:d6:
48:02:77:df:5e:f1:35:42:04:ad:60:7e:c0:86:7b:
fd:ac:fc:a6:59:6c:2f:ed:b2:29:c7:e4:26:62:b4:
8a:57:94:2a:ae:99:c2:d6:55:27:cb:dd:48:30:ee:
c4:a9:55:4d:04:35:fd:2b:77:e7:ce:c8:34:f5:21:
ef:6c:eb:57:27:ed:dd:7c:1f:f9:52:46:dc:81:e4:
d0:07:50:11:18:97:ec:7d:6d:4c:e7:11:47:85:33:
52:ff:51:e4:d5:12:ca:91:19:8d:d1:fd:ad:aa:22:
1e:36:6b:b9:b7:21:cb:8e:ba:6f:eb:6a:5f:c6:0a:
97:5b:b9:16:87:1f:90:76:e3:2f:a6:4e:df:0a:ff:
f9:b9:9b:8a:39:93:68:60:8b:2d:44:fb:c3:9b:e8:
d1:a2:b5:db:49:41:3c:e4:b3:91:ff:47:31:5c:ef:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1D:C4:4C:66:44:41:FA:03:80:DC:DF:92:BE:FE:B2:6D:05:0B:10
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2bdbaa29-cc56-4293-9c64-b4245c939f65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.16.0/24
Signature Algorithm: sha256WithRSAEncryption
67:46:52:fb:0c:6c:17:df:8f:62:97:1e:1a:0d:2f:6e:04:ea:
40:b8:d9:45:81:5a:fd:5c:33:6a:28:d6:b8:d2:7a:fa:d2:3e:
5e:a4:40:a2:56:31:06:c8:27:bc:2a:b0:36:5c:d5:94:97:e0:
6c:5a:c7:5e:c3:a3:24:fe:d1:31:36:22:a8:c5:0c:79:b4:b5:
16:14:e7:59:c9:90:cc:2c:24:6b:20:5d:d9:40:ce:12:3c:c6:
cf:d1:d9:f2:09:0c:6c:92:a7:34:84:44:83:3f:8b:8f:13:37:
af:fa:f1:28:4f:b2:73:0f:41:c7:b6:1b:28:39:07:c1:dd:58:
5b:0c:ea:f6:ad:7d:83:b1:3e:93:fa:24:eb:73:f8:64:e3:cf:
dc:5b:81:54:8d:e6:86:9c:0c:b7:87:22:84:42:57:60:81:db:
a0:b9:8e:7e:fa:76:d0:6d:1c:61:c5:a3:1a:77:b2:dc:0d:58:
32:bd:30:c2:e8:f8:6a:f3:a8:02:9d:0b:a4:c3:4b:1f:7c:e9:
4c:89:31:ed:10:1c:95:1f:c5:eb:0d:84:9c:c7:b7:70:ca:df:
74:6f:53:0d:aa:a2:be:da:cd:dc:36:53:ff:37:c4:25:6e:cf:
61:a6:af:cb:e8:f0:2b:30:9d:04:d0:66:98:55:47:d3:25:79:
e8:f2:be:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:43:07 2026 by rpki-client