Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2d24b638-b951-4333-ac88-4886c7af230f.roa
File: 2d24b638-b951-4333-ac88-4886c7af230f.roa (raw, json)
Hash identifier: g6Zo8Jgl/Po4YootCTASsv4dVHethRQhBtXkmmbz0Qg=
Subject key identifier: 35:51:CA:CE:AB:C8:F0:A4:F3:5D:7E:3E:8F:DB:5B:55:B2:E7:55:AD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1C263D2B2AF93E5B57496F311E624B026A0C436D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2d24b638-b951-4333-ac88-4886c7af230f.roa
Signing time: Mon 26 Oct 2026 05:50:27 +0000
ROA not before: Mon 26 Oct 2026 05:50:27 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.82.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:26:3d:2b:2a:f9:3e:5b:57:49:6f:31:1e:62:4b:02:6a:0c:43:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:27 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=490b2e44947a6add21f2d78942924f4f78f3ad21d938dbf98d4a11649e491347, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:eb:9b:05:8e:39:3f:99:d1:e1:5c:5b:e0:
34:e3:5b:72:2f:e0:e0:5f:85:4e:28:6b:0b:c1:a8:
9c:d4:91:f4:2a:65:38:e4:5a:bf:52:fb:eb:89:7c:
16:2b:d1:f2:3c:58:67:d7:b3:b9:df:4b:cc:21:2b:
f8:94:47:e2:85:ac:58:d5:b0:c3:5c:a6:79:87:e4:
0c:1d:b8:04:47:9a:b8:19:23:89:6a:f9:d4:e9:98:
92:4f:ff:b2:d1:6f:7e:22:6a:e7:09:ce:5b:ce:c4:
57:1e:aa:31:c7:81:de:fd:be:83:3c:62:64:de:a1:
74:07:a0:ad:a0:a2:c0:9a:7d:db:b9:8b:bf:54:f8:
5b:6d:f6:59:e7:b6:6a:81:bf:f0:68:4e:19:fb:7c:
ed:3d:91:44:5c:38:a3:fe:b7:50:d0:48:8c:ca:59:
b2:00:fb:a3:2a:10:90:2d:3c:dc:c4:5f:e1:a4:97:
8b:21:d5:d2:61:c4:db:0d:9a:77:68:de:5a:da:8b:
e1:2d:23:00:b8:bc:bb:fd:e0:93:15:d2:58:ad:15:
b1:a8:23:9f:0f:8a:0b:a0:ec:f6:96:b4:c4:e2:9d:
2d:0b:51:7b:e7:e0:0a:43:e0:cf:c5:d7:84:7e:6e:
a3:76:fd:18:62:a9:fc:64:74:09:e7:d6:21:49:08:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:51:CA:CE:AB:C8:F0:A4:F3:5D:7E:3E:8F:DB:5B:55:B2:E7:55:AD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2d24b638-b951-4333-ac88-4886c7af230f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:b4:5f:ae:00:31:ed:8f:99:8e:ac:4d:c2:a5:cb:ff:f8:35:
4d:47:88:6a:02:f7:e1:26:75:fe:f6:67:cd:55:b5:29:45:30:
73:8a:5c:9e:dc:12:0b:8d:95:d7:63:af:b1:8a:11:4d:a7:01:
29:75:66:c5:c6:1f:06:46:16:ad:2d:0e:69:18:8f:4e:bf:0c:
9a:bc:f3:62:73:c5:84:e3:82:df:22:05:18:97:01:25:1d:45:
12:55:74:81:86:5e:05:79:db:90:8f:ed:10:f1:03:54:67:67:
87:6c:93:ce:b5:f2:0a:c4:bd:87:ae:e1:17:77:d8:a9:e0:28:
83:2a:11:32:8b:f2:d3:2b:4a:93:5d:b8:3d:55:96:27:e8:9a:
cb:f4:4a:32:07:bc:d4:5b:63:99:63:58:e9:77:c8:e4:53:c8:
f9:f6:0e:e0:60:de:63:7b:ca:19:9d:a0:bb:b0:eb:01:e1:0e:
d7:07:46:ba:69:bf:cc:29:14:a3:7b:30:dd:fd:21:7e:a2:43:
ce:85:41:56:b7:03:7e:80:7e:d2:60:1b:a6:b0:1c:f8:37:83:
e9:44:a8:26:e1:cc:f9:e9:16:d6:b9:54:2b:55:97:b2:d9:b3:
45:ef:80:96:94:d5:f7:ac:97:ee:9e:23:e7:54:f9:7e:ee:58:
47:ed:06:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:15:35 2026 by rpki-client