Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4911793e-4031-4d2f-be54-a38fc617b3c5.roa
File: 4911793e-4031-4d2f-be54-a38fc617b3c5.roa (raw, json)
Hash identifier: 1IreJsT/kR6K4/6+3CrQnfjja22sXrYZXl6m5Puo7Oo=
Subject key identifier: A2:AE:42:A2:70:A8:B3:D4:52:AC:16:9A:BB:FC:60:CD:9B:71:00:DB
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4DBC29423DA26DDF6C91C3211036D7DD1031C079
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4911793e-4031-4d2f-be54-a38fc617b3c5.roa
Signing time: Mon 26 Oct 2026 05:40:22 +0000
ROA not before: Mon 26 Oct 2026 05:40:22 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.114.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:bc:29:42:3d:a2:6d:df:6c:91:c3:21:10:36:d7:dd:10:31:c0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:22 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1af65d049e98ee9b505f87c116d1b406a9697f3bc6e4d8f902edb82d7bf30d76, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:ab:da:ce:47:32:10:67:31:e6:e1:e7:b4:
47:54:a6:0a:3e:32:ed:87:39:9f:68:15:0a:7c:e0:
a4:49:2e:ec:b0:e5:e9:43:68:f8:74:b7:a0:24:f9:
bf:0e:ed:9f:c4:03:16:ae:f3:1e:81:ea:6c:2f:8c:
af:61:f8:ed:71:44:ea:0f:91:25:af:62:e9:30:ff:
ee:ec:6e:aa:3c:db:44:73:44:05:30:82:b1:df:72:
5c:cd:fd:89:b2:26:1d:cd:6b:ab:40:db:2f:e3:10:
c9:37:3c:ef:bc:e9:77:66:c3:ae:d1:3a:18:c5:81:
27:e7:9f:2f:3a:dd:48:e9:62:d1:b3:79:08:e0:e4:
dd:95:68:a3:e3:5a:29:59:f5:36:40:bd:6a:ee:6f:
ea:a7:72:07:6a:d5:b4:6d:1c:c9:0a:d4:71:e8:52:
a0:ae:12:64:ef:41:3f:94:9a:b6:27:53:89:23:c4:
31:4e:2d:78:43:74:82:ad:42:45:90:c0:ce:a5:32:
0e:dd:4c:a1:5c:22:b4:b3:51:c3:de:bc:4e:20:ea:
8f:17:b2:f2:de:d9:b1:13:77:b7:4c:9d:25:72:2f:
ba:1b:da:73:af:aa:b3:ca:ac:6b:35:ba:93:65:83:
9b:06:e0:89:9e:d8:f1:97:de:e9:63:f3:00:29:5e:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AE:42:A2:70:A8:B3:D4:52:AC:16:9A:BB:FC:60:CD:9B:71:00:DB
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4911793e-4031-4d2f-be54-a38fc617b3c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.114.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:29:93:6d:a0:4a:9c:71:35:ee:73:56:c4:54:f1:df:88:63:
77:71:3a:1c:c7:78:b8:d4:cd:9d:55:e8:39:d9:01:7d:b6:74:
93:bb:1a:b9:be:cf:b5:81:9f:d3:86:d7:c0:da:b2:d9:dc:d9:
08:76:1d:8d:44:8a:26:11:3d:1a:8e:0c:a0:8e:df:93:96:34:
01:5c:10:d5:75:99:26:75:63:6e:d4:db:0a:cc:61:71:c4:35:
dc:9f:e6:08:24:69:3f:80:6d:ee:37:b2:06:c5:67:4c:91:6a:
5f:37:0e:9c:86:ff:57:30:bc:82:a2:3b:d8:a8:bf:7d:2c:75:
49:78:48:38:6c:ee:ba:42:0f:3d:c9:3f:38:dc:fb:2b:7a:b1:
7c:30:c5:19:4c:41:46:0b:8e:af:32:98:df:92:eb:37:61:5f:
fb:7d:8c:88:7f:45:2d:ff:60:ee:2c:2d:66:13:eb:6f:c7:f5:
be:16:97:c5:e6:70:2f:08:32:b0:e5:7b:f5:08:c1:b6:94:49:
96:fc:9f:48:d9:fb:ed:96:8c:3a:7b:2e:16:b3:50:82:2b:22:
4d:bd:3f:c4:d9:5d:e7:ed:a3:09:58:bc:a8:bf:e2:ac:ed:ed:
16:f8:1f:f5:2e:86:4d:8f:fe:53:df:4c:07:2d:44:1e:23:5d:
49:ff:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:22:45 2026 by rpki-client