Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46b220b9-837f-4174-97e6-c711958273ea.roa
File: 46b220b9-837f-4174-97e6-c711958273ea.roa (raw, json)
Hash identifier: 3b+5teFyEIlvNamNb2SiM0jcLgVDlJefXkQOU7Cn0HI=
Subject key identifier: 7C:C2:D9:A2:8E:75:79:2C:F9:58:13:10:A4:A8:26:28:C6:6A:B9:98
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1FE8AA8E939B93F2B48D335272DA08C9445C43C3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46b220b9-837f-4174-97e6-c711958273ea.roa
Signing time: Fri 07 Aug 2026 05:50:12 +0000
ROA not before: Fri 07 Aug 2026 05:50:12 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.78.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e8:aa:8e:93:9b:93:f2:b4:8d:33:52:72:da:08:c9:44:5c:43:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:12 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=4579f733f3fe1ec11fc3fb1e5e2d50538649d311897e4eee33298fa313356ec3, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:b7:49:f0:f0:b5:7a:5e:d5:e8:06:9f:d8:
f3:b5:a9:e1:c1:3c:3a:62:3f:83:e9:8f:9d:51:e3:
fe:27:c9:3d:b9:66:d0:1f:dc:8b:61:1e:5a:b7:da:
61:17:45:ed:4a:15:5b:a1:dc:c9:de:21:18:ae:05:
38:41:61:d8:56:77:d1:49:52:39:df:53:de:97:22:
ef:51:2b:ab:fb:a5:4b:8c:96:73:e5:90:86:e6:7a:
a8:e7:72:35:db:08:22:0f:c5:53:2c:71:e6:67:54:
1c:a4:ea:fe:3a:d1:5b:33:91:d4:91:8c:c6:aa:d0:
4f:01:5b:2c:04:f1:71:4a:b1:ab:f5:f9:fe:a8:2a:
6e:6a:00:b5:27:68:56:ff:b9:a8:e4:6e:f5:ef:76:
58:00:c8:77:97:dc:14:f7:0e:9a:14:3b:7f:7b:42:
32:e6:77:ec:83:d5:2a:a0:22:90:5d:3d:8a:79:29:
35:e0:ba:cd:48:16:92:fa:43:99:c9:6f:06:17:96:
68:d2:14:11:66:03:10:0e:4e:72:81:d9:13:23:e6:
d7:0b:64:a3:12:4c:53:db:2a:fa:af:2e:88:7b:fc:
27:ac:bb:57:09:30:c7:f4:a3:e3:f5:22:65:59:fc:
68:5a:10:d9:ff:a3:b2:59:50:d2:c0:00:f4:f6:b0:
52:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C2:D9:A2:8E:75:79:2C:F9:58:13:10:A4:A8:26:28:C6:6A:B9:98
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46b220b9-837f-4174-97e6-c711958273ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.78.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:1a:91:e5:2b:e3:8a:6f:51:fc:51:2e:3d:54:18:bc:cb:ca:
bc:c8:99:3b:89:c7:f2:69:52:69:7e:7c:64:41:56:ba:52:c3:
de:a6:d7:a5:51:5c:27:67:da:fd:24:0c:bd:ff:20:c3:d1:db:
4b:96:20:ff:4e:ac:a3:f8:e5:f4:dd:2e:4b:a0:46:91:b1:86:
8e:58:c7:8c:09:d9:eb:ff:59:a5:c3:c2:b6:d6:0e:bd:47:9d:
a7:c6:0e:42:bf:f2:ad:00:16:09:7a:28:c2:d5:5e:ec:a6:4a:
97:96:ce:61:31:4a:54:51:68:54:94:a6:c2:04:d6:df:5c:74:
3a:d9:fa:3d:e7:62:29:72:56:c0:29:9f:0a:84:27:67:a0:06:
6d:38:cc:80:45:3e:52:21:0e:60:50:a5:c5:b5:30:51:4d:6a:
d9:8c:d6:e9:90:55:27:c8:5f:d4:b3:d6:4e:b9:bc:b7:96:f7:
76:23:00:8b:08:28:44:a6:3f:de:76:73:3a:6e:62:6b:43:66:
8e:fe:a5:5a:e6:ff:88:b1:fc:18:60:0d:c0:22:3c:19:9c:73:
e9:b9:ec:4e:f0:5c:95:c4:bb:0e:d1:18:4f:f7:97:f8:3f:d3:
4d:0f:b1:d6:fc:34:e4:7e:47:0b:f1:00:66:9a:ff:8b:43:2b:
de:bb:f1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:24 2026 by rpki-client