Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/444db014-8d2a-4c59-af9c-399bacab4f3f.roa
File: 444db014-8d2a-4c59-af9c-399bacab4f3f.roa (raw, json)
Hash identifier: IpbeWv0lulSksBYPRxYY9lKhIigJqNilJpUT9P0hTxA=
Subject key identifier: B1:EC:44:2F:54:C3:B1:83:56:06:43:86:C4:B6:F5:FB:1C:1B:98:8B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0F3A27ABC8ED4FE8C47EBBD677DDE1DE378C95DF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/444db014-8d2a-4c59-af9c-399bacab4f3f.roa
Signing time: Mon 26 Oct 2026 05:50:43 +0000
ROA not before: Mon 26 Oct 2026 05:50:43 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.156.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 16:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:3a:27:ab:c8:ed:4f:e8:c4:7e:bb:d6:77:dd:e1:de:37:8c:95:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:43 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=67cc0cd862c3cf61f428fddcf2872301e1be0c6eb81d51cfa4bf3d7b82ada813, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:55:2e:78:5f:ed:da:39:a0:51:ff:2e:f6:
ca:29:85:78:e8:91:e8:0f:55:6b:f1:ed:ca:0f:0f:
23:bf:26:45:db:14:9b:9d:31:dd:dd:77:68:05:36:
49:70:9f:48:71:78:d3:e9:61:c2:08:65:e4:82:93:
c1:34:98:45:c7:33:a4:87:83:d2:b9:00:57:1b:c8:
9a:5b:d8:17:0b:b3:9e:f0:38:6f:c5:e9:12:86:a3:
a5:58:f0:47:7b:0a:d4:34:71:b3:b8:f9:77:14:b9:
2d:6e:3a:a2:c7:45:24:ff:e9:58:94:a5:72:7e:af:
88:67:01:3b:3c:7c:3d:2e:ba:62:c3:6b:99:28:91:
9c:1f:ce:99:13:66:98:37:47:cd:5b:57:b0:af:63:
f8:5d:c9:31:bd:96:bb:26:2c:5b:4e:76:2a:37:77:
33:d3:e0:9c:c6:b7:19:55:32:8b:b2:f6:a2:e7:8b:
d6:2e:f7:7e:8b:0e:63:a5:27:60:20:09:b7:c2:fe:
9d:b8:ca:2a:9e:f6:3e:e5:90:96:f1:4b:f9:71:3b:
62:60:d9:41:da:8a:90:17:2b:0c:ee:92:82:ab:71:
7a:6f:64:da:12:71:df:a4:c0:3b:d0:9a:a2:5e:06:
8c:07:92:82:61:0f:09:69:4f:d6:24:4e:35:85:8c:
41:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EC:44:2F:54:C3:B1:83:56:06:43:86:C4:B6:F5:FB:1C:1B:98:8B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/444db014-8d2a-4c59-af9c-399bacab4f3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.156.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3d:ff:54:c3:39:e4:53:43:09:af:c8:70:88:12:8f:65:bf:ab:
24:e0:1f:e5:18:4b:7a:30:56:ff:2a:32:f2:99:e9:df:23:17:
7c:47:3c:bf:63:c0:d4:b7:06:4b:e9:39:d4:07:10:66:62:90:
5a:6d:45:13:c1:09:d2:43:d4:5a:aa:3d:47:1e:74:b8:6b:16:
21:28:66:60:2c:11:1e:6c:d9:91:02:6b:aa:d8:c4:20:d8:fc:
ac:c0:e1:a9:5c:8a:9d:56:01:4e:4f:33:e9:6f:e6:61:d2:e6:
91:d7:ba:74:07:84:52:27:b4:92:e5:2f:54:b1:b6:41:ca:47:
09:43:36:54:0a:16:a9:d3:84:00:12:a0:8d:33:bb:89:ba:d2:
b6:ce:a4:f6:eb:64:00:dd:bc:50:d7:46:54:73:53:bb:5c:bd:
f8:aa:be:e2:86:b1:55:0b:c4:ff:82:c0:9c:33:12:cb:41:a6:
ef:41:51:86:12:f6:a7:76:8d:f8:3b:9d:60:e1:d3:55:0d:d3:
9e:8d:a1:22:2c:8c:c7:1c:82:5c:05:54:e3:ea:b7:76:f7:1a:
40:0f:bf:fa:42:ea:c4:da:bf:e1:b7:52:9f:3f:2a:18:74:de:
0e:0b:20:5f:7a:34:21:3e:06:d5:f4:ae:82:58:22:81:6d:d6:
de:58:64:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 03:03:03 2026 by rpki-client