Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/09ec97ca-044e-4785-bdd4-fcf9e8d514ca.roa
File: 09ec97ca-044e-4785-bdd4-fcf9e8d514ca.roa (raw, json)
Hash identifier: KxhL8Al7d4yuFrr9sY8uixf1OxMFLelNqcfWo+GQ0h4=
Subject key identifier: 84:F2:29:0F:08:07:95:D3:0B:FA:C1:AA:3C:67:29:B5:E5:B3:E0:CB
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 40FA924EF690395B07F1E040368549034AD821AE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/09ec97ca-044e-4785-bdd4-fcf9e8d514ca.roa
Signing time: Fri 07 Aug 2026 06:00:16 +0000
ROA not before: Fri 07 Aug 2026 06:00:16 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.122.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:fa:92:4e:f6:90:39:5b:07:f1:e0:40:36:85:49:03:4a:d8:21:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 06:00:16 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=1c6406902389f84b859fe092dc982e159bf770a1e64192275f9ab9c14a916e5e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:30:d4:94:5d:6b:8c:c7:87:c7:6c:ce:2b:
60:61:70:f9:47:4a:f1:7d:a0:82:e0:dc:57:8e:34:
d8:7c:a7:a5:37:6f:84:cf:0c:ec:44:40:f8:9e:0f:
df:48:e5:cd:cc:65:e6:21:e7:80:ea:1f:77:49:57:
90:b3:82:d1:66:ce:8f:25:3d:c6:6e:c6:a5:10:a0:
1e:3d:29:4d:a7:87:8c:fb:9d:e7:1a:f8:de:52:3d:
76:b0:fe:a4:05:00:4c:40:21:eb:76:68:ce:a8:97:
e0:9f:9b:35:cc:6c:a7:a7:cb:20:be:7a:c3:1b:d7:
5b:2b:4a:7a:a4:93:83:3d:70:d1:d4:2a:dc:29:44:
70:0d:e7:73:13:27:3c:30:c9:d0:43:70:78:ec:b3:
e3:3c:bb:f3:96:3c:1f:32:24:92:a8:45:5b:08:7a:
7f:b4:12:7c:9f:53:1e:35:e8:9c:9e:0c:0e:73:7e:
1c:48:e6:fc:47:42:38:6c:d4:0a:53:89:db:9b:c3:
f9:cc:7a:07:5a:1c:b7:f8:c1:40:04:32:b0:2b:e4:
6a:ec:58:6e:a3:6d:26:b9:0f:7e:42:e1:04:03:21:
34:8f:98:d7:41:43:75:09:01:9a:56:7e:0e:c4:dc:
be:d2:5d:6d:04:43:2a:82:87:e3:36:b2:2a:b8:66:
7f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F2:29:0F:08:07:95:D3:0B:FA:C1:AA:3C:67:29:B5:E5:B3:E0:CB
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/09ec97ca-044e-4785-bdd4-fcf9e8d514ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.122.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1c:b3:ee:6c:98:cd:2d:ef:ea:2a:e1:c5:2e:74:d6:88:15:ed:
ab:53:72:47:02:b4:6c:18:93:e7:ff:23:91:6c:89:71:79:63:
bd:07:e4:0c:3b:cd:66:70:72:a4:45:a4:a6:d0:bb:92:f5:cc:
e0:68:c4:eb:d4:89:b8:41:57:6a:1d:cc:fe:0f:c4:df:ab:bc:
5d:13:f0:1c:6d:bb:22:4b:09:6c:84:f2:b9:75:59:37:75:f6:
17:25:19:f1:8a:d9:24:de:62:60:ab:55:c8:22:6a:e3:0b:3a:
4a:7e:88:04:a3:bc:71:44:29:17:0f:55:6c:51:9e:c1:1d:ca:
62:f5:f5:ba:75:29:47:cd:26:3d:63:3c:5e:ed:74:e8:84:be:
c1:06:16:40:71:c3:78:e2:68:20:c0:fd:3c:01:fa:6e:be:73:
77:28:4c:9c:af:f3:cc:b6:5c:09:c4:fa:e0:b8:8e:f3:58:1a:
1e:a5:75:d6:97:b0:19:68:67:75:0d:4c:cb:7b:5d:bf:3c:49:
ce:2d:54:af:fd:3c:f3:47:9d:14:0e:2b:60:48:d1:55:71:ac:
28:4e:a7:8e:04:bf:a4:bb:1b:67:0a:1d:e0:a9:20:38:35:26:
9a:30:7b:fd:13:16:81:58:f4:d2:b8:01:c6:87:3e:e3:a1:3f:
5a:22:45:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 07:24:20 2026 by rpki-client