Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/465ffdf3-82ea-46dd-b114-e21ffa69798b.roa
File: 465ffdf3-82ea-46dd-b114-e21ffa69798b.roa (raw, json)
Hash identifier: OvMTzt0m/t+0Hh3cNzTuIYn8hRqahxARi0dTV2lOqF0=
Subject key identifier: CF:06:F0:AE:2D:AB:B2:32:B3:7D:2F:11:76:61:CF:30:79:49:9F:20
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 16F0245ECE5F631F5D97C6154B7B6D6B2D172CFC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/465ffdf3-82ea-46dd-b114-e21ffa69798b.roa
Signing time: Thu 06 Aug 2026 00:00:09 +0000
ROA not before: Thu 06 Aug 2026 00:00:09 +0000
ROA not after: Wed 04 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.118.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f0:24:5e:ce:5f:63:1f:5d:97:c6:15:4b:7b:6d:6b:2d:17:2c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 6 00:00:09 2026 GMT
Not After : Nov 4 23:59:59 2026 GMT
Subject: serialNumber=0603447bc1317882e335915a3d0d199f0429780661c16c5978460759895e1180, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e9:d7:50:97:03:c5:5f:16:19:53:22:03:f9:
49:f9:78:58:54:ef:e6:4c:d5:5e:e7:c6:b1:d4:81:
e8:9c:3b:46:ff:9f:82:0b:7e:09:64:52:90:78:36:
a0:b8:03:78:8f:ae:43:41:1b:e5:62:89:5f:7f:bb:
0c:fe:2e:30:4b:e4:0a:83:3a:de:38:27:cc:d5:ee:
0b:bc:41:a4:0e:47:7f:52:98:16:55:2e:cd:12:18:
b8:f8:20:ae:6f:02:20:03:e9:2d:3e:2c:36:a6:3e:
c5:3a:66:85:91:a5:1d:8a:f3:77:65:17:e0:57:e0:
10:85:5e:9d:9e:02:8c:ec:f9:f0:b9:51:9e:6b:7e:
cc:f5:cd:40:09:98:6e:b0:2d:ae:da:6c:43:d5:64:
d2:77:10:61:e0:05:3e:8f:63:85:85:f2:1f:ec:25:
d5:2d:45:fa:19:5e:c6:7d:9e:bd:63:74:ab:01:3f:
ff:d9:ea:ec:2f:63:13:dc:2c:fa:73:41:fc:7d:d6:
ec:3d:9d:ea:a8:18:8f:65:8b:1e:93:f4:37:33:84:
23:ec:15:63:23:da:22:28:f2:2a:ad:86:a8:01:f4:
e8:17:3e:d2:20:80:87:58:20:dc:59:72:06:d8:d9:
32:ca:a5:de:d8:fb:cd:87:0a:7d:38:95:54:e0:9a:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:06:F0:AE:2D:AB:B2:32:B3:7D:2F:11:76:61:CF:30:79:49:9F:20
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/465ffdf3-82ea-46dd-b114-e21ffa69798b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.118.98.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:86:f3:5b:9a:e6:21:1a:5f:79:b0:c1:b7:91:d8:2d:14:84:
b0:ba:8b:1c:7a:70:3b:e6:67:57:34:df:41:be:0e:b4:57:ca:
d3:99:8f:54:72:04:5b:8b:15:09:46:c8:89:50:1b:54:d1:9e:
80:ee:53:7a:0b:ca:2a:7b:d3:e9:52:0b:0c:5d:25:14:b3:d9:
43:74:ad:5b:da:33:66:65:bd:20:b9:b1:78:5e:9e:c6:4e:e3:
ca:ba:ed:e9:2a:15:d8:7f:a0:a3:b6:db:f9:b2:86:40:06:18:
8f:34:3d:2d:7f:a5:48:9d:06:86:b5:fc:4b:af:82:04:4f:fa:
42:40:fc:08:92:b0:f3:3f:16:94:e1:da:96:2c:ac:6c:77:c6:
7c:3e:a0:b1:81:f1:80:71:7d:42:c4:1b:98:1f:f2:20:e5:73:
48:8b:2e:57:05:75:44:98:7e:ee:f2:c5:be:20:81:f8:c1:ae:
ca:a9:4e:80:4a:5d:4b:2b:73:e0:d6:bc:0e:a4:15:de:6c:1d:
8d:5c:36:ae:ad:b4:da:50:75:91:05:49:73:99:ae:50:e4:21:
5c:4e:0e:e3:10:d0:39:01:d2:2e:95:db:cf:28:12:85:0c:d3:
33:04:cc:4e:13:4e:fc:37:73:ef:94:d5:35:fb:61:27:84:d5:
92:eb:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:27:35 2026 by rpki-client