Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2740a5f5-ec55-42ac-b7df-f4c863c83981.roa
File: 2740a5f5-ec55-42ac-b7df-f4c863c83981.roa (raw, json)
Hash identifier: mr8MIWMJMK34G8e7pp0xVcG9xi0MszczZcD8JR7/EpI=
Subject key identifier: 92:0D:29:8B:7C:0E:09:F2:CB:33:5F:99:0E:F4:39:25:98:2F:E9:E8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2111B1979BED76C42F60D3FAF165FCC524D47D07
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2740a5f5-ec55-42ac-b7df-f4c863c83981.roa
Signing time: Fri 07 Aug 2026 05:40:15 +0000
ROA not before: Fri 07 Aug 2026 05:40:15 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.125.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:11:b1:97:9b:ed:76:c4:2f:60:d3:fa:f1:65:fc:c5:24:d4:7d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:40:15 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=554b9f5bbaf036bc78dae28cfb1663ea2dd63efbab9384fe51ed47fffc396679, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:8a:11:54:71:29:62:4e:f3:ed:2a:ce:06:
44:e0:cc:45:a0:88:b7:07:6c:75:50:dd:ae:26:e3:
11:af:ab:f4:ed:89:f4:fc:e5:69:17:60:7a:b0:19:
9b:ed:41:7c:33:74:cd:09:01:af:dc:76:38:ed:2d:
4e:c2:08:34:7f:0e:30:8e:24:02:7f:37:59:ca:43:
b7:97:6f:39:53:85:19:a5:9a:58:81:ca:12:9c:70:
c2:fe:69:3e:aa:20:1f:82:e8:fa:27:9a:ad:c3:00:
f9:1e:d5:37:38:86:9e:a7:e2:ec:9e:49:9c:8d:0a:
fa:72:43:9b:44:a2:8a:fb:67:5d:f4:c8:01:02:a1:
ef:9f:71:27:21:1f:1b:1a:d5:2b:43:ba:60:04:84:
d0:d7:1f:77:e6:d1:4b:e7:ce:3e:66:a3:b2:08:43:
23:7f:4a:97:99:9d:31:51:15:f3:aa:08:b3:c1:9e:
53:30:c7:69:c5:3b:dc:9b:46:c4:ef:13:4b:28:c7:
a5:a6:07:3c:a9:5c:66:15:cb:56:9d:9c:60:ce:c8:
de:cc:e7:3c:b6:e0:e3:36:4b:d6:ad:58:3b:bb:46:
0a:96:e3:03:9d:64:f2:f6:22:36:be:a7:51:f2:9b:
ae:13:85:53:66:65:38:b7:ff:af:31:a9:07:3c:2c:
6f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0D:29:8B:7C:0E:09:F2:CB:33:5F:99:0E:F4:39:25:98:2F:E9:E8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2740a5f5-ec55-42ac-b7df-f4c863c83981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c4:57:10:f2:82:00:8b:d1:cd:f1:76:18:b4:c6:e1:af:f6:4b:
3e:15:37:ac:e1:98:0b:9b:7e:67:87:a4:9c:4f:32:be:1b:97:
d3:e8:f4:00:1e:d8:d3:da:80:cd:b4:88:95:72:6f:60:fe:a8:
9b:cf:bd:e5:5b:1d:fb:f5:08:a0:f9:ff:9c:17:d8:51:c9:fc:
64:a3:ea:50:4e:ae:62:99:6b:5e:ef:ff:bc:a3:4c:7c:3e:53:
d1:b0:81:5b:8b:27:3b:d9:ee:ba:80:a0:7c:89:fc:57:67:e6:
6e:ac:e5:ff:04:8a:17:70:81:01:f3:ec:a6:b8:44:98:b8:93:
bf:d4:e3:d5:ca:35:7a:f7:69:63:5d:de:8a:ae:c0:68:e1:4d:
04:b4:e4:e9:6d:14:42:4f:a0:8d:47:5d:20:3d:f3:bb:4a:48:
fd:2d:f7:24:fa:20:31:c8:ff:49:e8:96:d7:37:7a:4d:b5:79:
98:de:33:f3:32:c5:00:53:5e:c0:b5:49:f7:2c:75:a7:8e:b7:
c2:69:ce:41:70:28:01:a9:70:e8:53:2f:d0:68:ef:72:f1:11:
55:86:a6:f5:fd:c8:89:ab:86:8e:ca:b4:7a:25:93:7b:a8:9b:
d8:89:d2:c1:1f:e2:7f:47:cd:5a:c5:5c:26:71:43:5a:a4:2e:
32:48:66:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:17 2026 by rpki-client