Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2229ee03-08c0-4c87-acab-bbf5abf49264.roa
File: 2229ee03-08c0-4c87-acab-bbf5abf49264.roa (raw, json)
Hash identifier: vXS9n/ZO2ab1xvsrKDzAFjDLzkrUBSPsePm1iHn9w7E=
Subject key identifier: D5:F6:60:FC:89:57:0A:77:88:46:BC:BE:82:32:CA:5C:3E:0C:DE:60
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 52F5BE73A1001DE6B5D29A385DF78A8E40B365C2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2229ee03-08c0-4c87-acab-bbf5abf49264.roa
Signing time: Mon 29 Sep 2025 15:40:15 +0000
ROA not before: Mon 29 Sep 2025 15:40:15 +0000
ROA not after: Mon 03 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.86.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f5:be:73:a1:00:1d:e6:b5:d2:9a:38:5d:f7:8a:8e:40:b3:65:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 29 15:40:15 2025 GMT
Not After : Nov 3 23:59:59 2025 GMT
Subject: serialNumber=a4f0f1624868c275d57707fdbce087e8ae749d7979657ebe8116ec4aeeda3698, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:09:5d:92:55:ea:fc:fd:f4:56:b5:f3:b4:
94:17:d4:22:71:54:b7:56:01:c6:21:92:3b:9e:68:
36:80:38:8e:6c:91:88:cf:02:71:d4:d5:a3:c0:a1:
39:80:10:39:86:71:71:36:cc:32:63:be:bd:af:f7:
e2:25:98:f6:1b:20:4e:03:94:5d:51:c8:22:9a:11:
7b:f7:c6:3b:13:30:d1:d0:77:66:dd:f4:c3:95:f8:
d6:6f:7e:e1:25:3a:b5:4b:54:fc:1a:ac:bb:1f:63:
ad:ae:a8:7a:37:92:a2:77:6c:f9:3c:e1:c3:cb:d0:
5a:3e:9f:1a:b0:4f:a1:fe:69:f0:2e:5e:9a:8f:d9:
a7:dc:92:10:9b:9e:7f:88:3d:85:9d:ae:87:7c:93:
67:96:60:be:e0:0c:ce:14:f8:85:21:54:d8:2b:38:
20:59:be:35:ff:4f:02:05:ed:56:eb:34:4b:95:0f:
f4:d3:43:8b:62:3c:7c:62:68:92:0f:86:1b:de:27:
e9:7b:f8:23:98:e8:3e:99:f4:97:50:a7:33:5b:9c:
8a:f1:7d:08:bf:cd:31:14:47:fe:8f:46:2f:be:e3:
f5:ba:a4:fb:e4:68:bf:88:8a:b1:59:e7:6c:e6:12:
b1:55:fb:ac:53:ee:7b:c2:c9:ad:b6:58:62:f3:c7:
ab:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F6:60:FC:89:57:0A:77:88:46:BC:BE:82:32:CA:5C:3E:0C:DE:60
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2229ee03-08c0-4c87-acab-bbf5abf49264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.86.0.0/15
Signature Algorithm: sha256WithRSAEncryption
44:99:87:7b:a1:0e:08:26:b3:51:00:0a:b8:49:b2:87:05:ce:
e6:a0:b9:90:41:af:c2:ff:2a:b0:d6:51:bd:fe:bf:1b:28:76:
e8:ae:33:05:99:05:72:c3:0a:89:4e:d5:99:45:4c:00:49:eb:
cc:6f:44:49:a9:8f:ba:19:8b:5a:cd:f3:b8:2c:d1:6d:7f:ce:
f0:00:a4:9c:1b:2b:20:38:7e:2b:e5:c9:b3:0f:3f:16:e5:8b:
42:96:87:1d:21:7e:ec:ab:eb:67:1c:d8:7e:6e:a8:9e:50:82:
e0:44:72:49:76:ba:17:d9:f1:e8:98:97:ed:6d:cf:06:83:4f:
4b:ed:68:ab:03:ad:4a:e7:bd:9b:d9:d2:52:8c:b7:f9:b2:ef:
33:e0:bf:ba:4b:a0:cc:11:5b:7a:22:0e:a3:1b:ba:5f:69:0d:
e1:9c:d7:32:23:39:64:cc:00:dc:c6:51:6c:6f:4a:bd:e1:bd:
b1:bc:91:ff:31:e4:a2:f4:1f:52:80:99:b9:53:64:9e:b1:fe:
c8:d3:f0:1a:1e:aa:a3:8a:28:84:b0:a4:b7:95:6e:88:63:f6:
ea:7e:d4:0d:98:d4:f0:3f:b1:94:6b:ae:9a:e9:da:fc:f6:84:
23:06:e9:50:b8:a3:d3:73:3d:03:8e:c2:f5:55:50:15:d3:d9:
83:1d:87:fd
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUUvW+c6EAHea10po4XfeKjkCzZcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA5MjkxNTQwMTVaFw0yNTExMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQGE0ZjBmMTYyNDg2OGMyNzVkNTc3MDdmZGJjZTA4N2U4YWU3NDlkNzk3OTY1
N2ViZTgxMTZlYzRhZWVkYTM2OTgxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALZhCV2SVer8/fRWtfO0lBfUInFUt1YBxiGSO55oNoA4jmyRiM8CcdTVo8Ch
OYAQOYZxcTbMMmO+va/34iWY9hsgTgOUXVHIIpoRe/fGOxMw0dB3Zt30w5X41m9+
4SU6tUtU/Bqsux9jra6oejeSonds+Tzhw8vQWj6fGrBPof5p8C5emo/Zp9ySEJue
f4g9hZ2uh3yTZ5ZgvuAMzhT4hSFU2Cs4IFm+Nf9PAgXtVus0S5UP9NNDi2I8fGJo
kg+GG94n6Xv4I5joPpn0l1CnM1ucivF9CL/NMRRH/o9GL77j9bqk++Rov4iKsVnn
bOYSsVX7rFPue8LJrbZYYvPHq/UCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTV9mD8
iVcKd4hGvL6CMspcPgzeYDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MjIyOWVlMDMtMDhjMC00Yzg3LWFjYWItYmJmNWFiZjQ5MjY0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATNWMA0G
CSqGSIb3DQEBCwUAA4IBAQBEmYd7oQ4IJrNRAAq4SbKHBc7moLmQQa/C/yqw1lG9
/r8bKHborjMFmQVywwqJTtWZRUwASevMb0RJqY+6GYtazfO4LNFtf87wAKScGysg
OH4r5cmzDz8W5YtClocdIX7sq+tnHNh+bqieUILgRHJJdroX2fHomJftbc8Gg09L
7WirA61K572b2dJSjLf5su8z4L+6S6DMEVt6Ig6jG7pfaQ3hnNcyIzlkzADcxlFs
b0q94b2xvJH/MeSi9B9SgJm5U2Sesf7I0/AaHqqjiiiEsKS3lW6IY/bqftQNmNTw
P7GUa66a6dr89oQjBulQuKPTcz0DjsL1VVAV09mDHYf9
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:48:38 2025 by rpki-client