Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/123b20eb-4142-4c18-96e0-d1871de66fd3.roa
File: 123b20eb-4142-4c18-96e0-d1871de66fd3.roa (raw, json)
Hash identifier: KcBqu62USgZ290ZXVjQSQ/NVHqCf1Kzbgx3V53TaMEk=
Subject key identifier: D9:03:4E:E1:42:83:70:82:10:EA:1B:36:6D:05:22:70:DF:84:04:9D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1E7180B558BF077739FF59128BD91A2BB31BE091
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/123b20eb-4142-4c18-96e0-d1871de66fd3.roa
Signing time: Fri 07 Aug 2026 05:50:47 +0000
ROA not before: Fri 07 Aug 2026 05:50:47 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.214.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:71:80:b5:58:bf:07:77:39:ff:59:12:8b:d9:1a:2b:b3:1b:e0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:47 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=3015ccc20c12e7e630d2b37ca5f2b929ce94228906b06c0186e2d6e6499a2793, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:03:3d:2c:5c:1e:78:58:d6:c7:5c:28:8c:c0:
53:70:c5:41:a6:9c:c4:26:02:d5:34:b9:d1:94:c4:
93:cd:e7:2b:4c:44:d4:3a:a5:05:64:9f:12:84:94:
90:fe:5a:a8:2c:0c:3c:7c:9f:1d:c1:2a:92:93:4f:
53:e0:8f:85:9d:94:99:3d:82:4e:33:d3:57:78:61:
b3:76:14:a4:54:59:90:8f:0d:84:72:6a:35:6e:a0:
7c:08:7b:32:ee:0e:fa:08:7c:44:52:d1:4b:ca:fb:
3f:47:b3:d0:04:c6:b0:49:14:d1:bc:46:4d:ac:da:
15:24:b7:ed:e3:e8:0c:32:d6:73:96:ce:ea:c8:66:
d5:44:55:ab:0c:01:cc:1f:6f:4f:13:24:be:e4:ee:
a2:d6:fc:a3:3c:a7:71:67:85:fe:6c:fb:58:27:1b:
a4:ef:1a:54:e7:18:a0:2d:51:fa:8b:ca:64:79:87:
bf:50:10:ec:e8:2c:25:64:83:48:35:a5:4c:36:52:
3f:0d:21:27:2c:b8:cb:e0:97:8a:32:37:75:25:14:
44:7c:40:8e:34:f4:09:c2:96:d1:3d:62:05:59:95:
e4:a0:4a:fa:00:13:25:24:19:be:d4:f7:02:4b:dd:
cc:fa:f4:36:ac:10:35:e8:61:17:b6:22:63:90:51:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:03:4E:E1:42:83:70:82:10:EA:1B:36:6D:05:22:70:DF:84:04:9D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/123b20eb-4142-4c18-96e0-d1871de66fd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.214.0.0/15
Signature Algorithm: sha256WithRSAEncryption
76:4a:26:de:aa:73:2e:d8:fb:84:d2:ae:14:97:20:9f:82:b3:
96:be:70:4f:99:a3:fa:e9:d3:a9:74:4a:de:ed:86:da:58:06:
f4:db:04:18:26:55:ea:25:dc:2e:52:dd:87:b2:2f:df:72:0a:
d6:e8:bf:ee:9d:2e:1d:28:fd:2e:cb:66:2b:22:53:12:a2:77:
fd:f4:e0:1e:c3:45:8e:e4:bd:f5:59:c6:d9:d1:6d:c0:8d:36:
da:48:47:02:da:7f:09:0a:13:47:05:83:29:6b:db:17:99:35:
eb:4e:d2:35:c0:cd:2a:1e:f5:e6:f8:bd:bb:3b:ad:c2:be:dd:
ed:b2:4f:f3:26:c7:06:38:2c:d0:5b:05:25:f6:50:15:2f:87:
0b:52:fc:b5:96:ed:2f:51:67:8c:18:80:c0:b6:92:39:f2:51:
74:41:31:cc:7a:12:37:8d:d2:79:cb:36:ce:9c:97:99:5c:3e:
ab:6d:cc:df:fe:5c:b1:c0:e9:9f:4c:92:09:d9:92:f9:07:19:
b8:2b:b0:06:6d:af:95:69:3e:e7:10:ee:6e:5b:3f:2b:b6:cd:
55:5d:1e:23:49:05:63:61:46:d6:c8:d7:6d:80:b4:58:e3:1a:
e1:6e:bc:bd:93:62:80:18:de:dc:7c:bd:bb:3c:38:78:96:b9:
c6:44:18:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 06:52:24 2026 by rpki-client