Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0a36b38b-9bd1-4014-823d-9204a303350e.roa
File: 0a36b38b-9bd1-4014-823d-9204a303350e.roa (raw, json)
Hash identifier: CENy/PGngxWwQbhabsh4muvMXP04iEIbXp9J0mpbIHg=
Subject key identifier: A3:E9:C9:00:FD:72:AD:CA:E9:B9:5C:E2:B5:43:0D:45:F7:F9:DD:2A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 47B51944577C7FFD246F08C03A5A5DE7BB3A0956
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0a36b38b-9bd1-4014-823d-9204a303350e.roa
Signing time: Sun 04 Oct 2026 00:40:26 +0000
ROA not before: Sun 04 Oct 2026 00:40:26 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.21.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b5:19:44:57:7c:7f:fd:24:6f:08:c0:3a:5a:5d:e7:bb:3a:09:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:26 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=7183487338bb9fc335603f58c03cbe78e531e143fe8452bab7851a1417a77986, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:28:06:ae:7c:a2:e7:65:e4:63:87:cd:a3:
6c:4b:1b:4f:d2:04:75:78:2f:ee:2b:a6:fb:8f:c3:
e4:fd:d7:a7:98:7e:12:20:11:70:4b:43:62:b1:4e:
61:e0:16:f6:62:c5:58:16:72:70:67:7a:85:db:36:
16:35:a2:73:b1:17:d0:12:a1:c6:14:4b:11:f5:8c:
8b:99:f1:1a:75:f7:2c:b0:19:7d:a5:e7:79:31:f1:
f2:65:68:51:ab:88:09:92:f8:c4:4d:d5:45:75:aa:
83:06:e7:d3:3a:e3:b4:31:d2:eb:34:bf:d2:54:18:
84:65:6d:cc:39:80:62:2b:dc:8d:e9:dc:19:d8:ca:
45:24:6d:a9:95:36:91:44:59:71:13:57:25:47:ad:
2c:42:0e:a1:ce:a2:d8:9a:05:d1:8a:60:2b:14:12:
65:13:54:a4:0c:21:06:9f:d5:6a:b9:94:6c:f9:4c:
09:6c:fd:51:2d:e3:13:06:7e:18:57:a2:e9:c3:3a:
7d:7a:df:1a:6f:9c:33:37:3b:8c:1c:5a:58:e9:15:
2f:41:de:2b:cf:3a:d4:44:dc:5f:83:a5:77:c5:1b:
9d:a3:57:7e:36:6d:12:e2:ec:1c:66:3a:45:b4:a2:
b9:d6:cc:f9:79:16:13:a0:9c:86:99:57:57:d9:49:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E9:C9:00:FD:72:AD:CA:E9:B9:5C:E2:B5:43:0D:45:F7:F9:DD:2A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0a36b38b-9bd1-4014-823d-9204a303350e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.21.183.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:3e:ad:b3:7a:d8:78:3f:9b:ba:de:29:8c:93:f4:da:5e:9b:
71:9e:20:9a:10:f1:77:ea:b6:0c:0a:c7:e4:3c:20:22:ad:d2:
b7:cb:33:a6:ab:82:32:34:f6:94:bf:50:13:67:9b:bc:cc:30:
48:0e:96:50:9a:01:df:29:58:bc:55:92:32:62:7e:be:24:f7:
8c:3d:d9:f6:f1:82:57:83:83:ad:2a:26:ce:95:65:b0:b9:17:
6b:c9:e5:3e:b1:9f:29:66:0f:1e:de:57:c1:ed:46:8a:0e:f7:
8b:3d:51:10:a3:ab:3e:78:cc:2e:63:02:68:c6:a9:0d:c3:7a:
57:2b:00:d1:19:ba:c8:fe:c7:c9:3c:3c:fe:b0:c7:f9:32:fb:
80:0c:47:83:66:46:2d:1a:54:ea:21:55:57:1f:6b:3c:f6:92:
d9:c3:02:ed:ff:f7:54:e3:46:96:28:04:f6:88:59:2a:8c:25:
3d:3d:57:62:e5:be:76:3d:49:90:d6:a9:ca:4f:26:eb:fc:32:
3c:f9:2d:2a:4f:69:31:11:1c:4e:69:a2:8f:71:25:c1:af:37:
fc:6e:67:c5:51:13:81:12:14:78:b0:58:a7:fb:93:03:3d:66:
07:4c:e1:e4:b1:d0:65:1b:7a:d3:39:1b:7d:99:a7:cb:fc:2b:
eb:09:0b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:34:32 2026 by rpki-client