Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/186c4a20-4025-4599-90c9-1eeb15cf6730.roa
File: 186c4a20-4025-4599-90c9-1eeb15cf6730.roa (raw, json)
Hash identifier: uPp7k7LsaBZwy/OwFp/TgKrmg9sibrS4HvO8E+C4pUQ=
Subject key identifier: 90:AF:FA:30:0E:18:47:A3:F7:C3:DD:95:F5:B6:FE:91:D9:EC:9D:E5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 274EAEF8F6F6434832E612FC216D9BD30AE8B090
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/186c4a20-4025-4599-90c9-1eeb15cf6730.roa
Signing time: Sat 08 Aug 2026 01:00:08 +0000
ROA not before: Sat 08 Aug 2026 01:00:08 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:4e:ae:f8:f6:f6:43:48:32:e6:12:fc:21:6d:9b:d3:0a:e8:b0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 01:00:08 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=9a3d5ad2232f81e976280d32f5693bf3428291fa2a4da59e8b11aca48550396c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:d8:84:53:b8:96:85:54:23:c0:67:e4:a2:
15:5a:c0:97:5f:7b:0c:f1:9a:4f:ad:01:b6:9a:bf:
88:7a:9e:75:25:68:9a:48:a7:20:b3:07:04:70:c3:
bd:e0:2d:9d:1a:55:73:78:62:a8:78:3f:0e:50:7f:
c5:15:74:fe:8d:60:d8:ee:e4:9c:98:92:b2:59:d7:
07:bd:d9:b1:ec:4a:58:91:1c:bc:3f:da:de:78:1e:
99:d8:f6:dd:4f:d5:ee:f5:03:21:52:93:66:5d:5b:
1a:61:78:c7:f0:c9:96:98:7b:9f:95:ec:6c:9c:3e:
d3:a9:f8:15:c5:d2:73:c6:06:0b:e7:a8:0f:68:a6:
a0:4e:0a:94:4e:13:54:3a:f5:27:44:45:a0:99:83:
33:a9:f4:91:04:26:dc:d6:33:b3:38:53:2b:38:a6:
c0:5f:55:0d:e1:88:15:40:7c:07:2e:e8:53:c0:fb:
cd:d6:24:3c:4a:84:49:8e:cf:3b:3c:72:c1:b1:b8:
0c:bc:dc:fa:88:0e:c2:8e:38:22:c1:33:22:2f:21:
78:49:e5:e9:f1:d1:bd:1a:a0:d2:ff:14:1d:43:ca:
61:7e:3b:19:27:bc:e4:98:ba:cd:f4:16:9c:65:a2:
b2:43:2f:73:56:46:69:13:3a:cd:ac:77:0f:7e:15:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AF:FA:30:0E:18:47:A3:F7:C3:DD:95:F5:B6:FE:91:D9:EC:9D:E5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/186c4a20-4025-4599-90c9-1eeb15cf6730.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.205.0/24
Signature Algorithm: sha256WithRSAEncryption
09:bc:09:48:51:3d:d0:60:8e:3a:31:74:b4:39:0d:b3:0c:df:
7f:e4:b0:a0:73:70:c1:9e:ff:9b:35:90:ca:12:2c:27:80:11:
a0:a0:6b:1b:12:29:0f:f2:f0:e8:0b:5d:75:b5:9b:e5:80:29:
b0:2c:d3:12:dd:fa:11:db:72:e9:d8:26:8b:d2:03:74:97:03:
c2:8d:7b:55:c2:ea:f8:32:5c:ec:b6:be:db:c5:65:fc:80:ae:
a0:fe:0f:62:0e:c3:7c:67:98:cf:10:8d:6a:40:e9:00:fc:d4:
80:34:b8:ed:75:03:71:05:41:5f:1d:be:53:30:6c:f2:9f:e8:
9d:dd:9b:40:0e:d5:3d:20:bc:fb:d7:71:27:03:70:3b:22:83:
c1:f7:c8:a0:b6:50:20:de:70:24:6b:a2:5a:12:b0:24:31:22:
09:f1:9d:04:39:5a:67:37:f0:87:33:70:ad:d8:3e:f0:b5:f6:
ab:72:c7:87:33:12:87:16:2c:66:a6:d5:29:a9:8e:95:e4:0b:
96:e3:38:74:07:99:41:82:31:c7:d6:36:de:3c:d9:7a:c8:ba:
e9:6b:33:90:d6:f4:6d:2b:e7:e2:a5:bf:ef:27:d0:fc:fe:d0:
b8:df:82:f1:9d:71:a1:24:16:b6:55:8b:60:44:7b:a2:b6:9c:
4c:73:49:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:18 2026 by rpki-client