Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4a35eec8-470f-4ad0-852b-9006065bbbb0.roa
File: 4a35eec8-470f-4ad0-852b-9006065bbbb0.roa (raw, json)
Hash identifier: pyvQ2QSkhULgRYwmZIbjjw3mvcP2N/uSHDxET9apdnE=
Subject key identifier: 3D:85:2A:E5:89:DD:05:1F:C2:86:C5:40:00:1F:34:A6:53:31:01:95
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5E46F86FEA7C3EDA5ACEC6FEA88DB22FD5305952
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4a35eec8-470f-4ad0-852b-9006065bbbb0.roa
Signing time: Fri 07 Aug 2026 05:50:45 +0000
ROA not before: Fri 07 Aug 2026 05:50:45 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.166.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:46:f8:6f:ea:7c:3e:da:5a:ce:c6:fe:a8:8d:b2:2f:d5:30:59:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:45 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=1abc6384167ea739369d98e7bfa5595e04522236ef0934bf4673c73d54647c4c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:f2:d8:1e:b7:0b:23:b2:15:76:22:3e:16:
e7:64:5c:5d:8c:6d:62:4c:a5:e1:b5:b4:ce:13:af:
f8:3c:b4:9b:f8:34:b6:2b:1d:e4:e5:f3:05:ea:7f:
15:57:f2:39:59:b1:87:46:58:e3:69:92:10:c4:45:
a1:9a:db:22:50:c0:83:da:bc:87:74:90:a4:85:5a:
fe:0c:55:3f:70:4b:07:5c:be:f8:91:4a:8d:8e:45:
87:33:f4:c8:4d:ef:e7:50:cd:60:b0:de:b9:18:76:
f4:ae:5f:95:1f:81:5f:16:88:a9:67:7c:44:e9:62:
3e:2a:0c:56:22:e4:a4:0a:32:fb:e6:ce:31:1c:58:
02:4b:3a:0c:3b:c0:b7:c5:eb:e8:08:86:d8:dd:74:
58:95:11:a2:7e:b6:d2:1a:45:31:a3:c2:1c:86:86:
2a:c7:e1:9c:d9:e4:56:1b:8f:2a:71:b4:38:e1:b5:
4f:ca:3d:51:86:91:8b:0e:e8:93:55:8b:0c:ae:4b:
6c:1a:d1:6a:57:4a:a2:5f:d7:0c:fb:97:99:79:e0:
b1:66:0d:47:e5:af:0e:75:92:93:c6:b0:55:67:c8:
a5:c0:2c:1f:47:be:73:8f:84:be:da:e4:ec:aa:54:
0c:c0:29:89:9a:c3:9b:7a:38:4a:d4:04:82:a1:cd:
ff:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:85:2A:E5:89:DD:05:1F:C2:86:C5:40:00:1F:34:A6:53:31:01:95
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4a35eec8-470f-4ad0-852b-9006065bbbb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.166.0.0/15
Signature Algorithm: sha256WithRSAEncryption
94:2d:22:21:df:64:19:1f:6e:cd:73:ff:1d:2d:8f:87:5a:76:
94:5a:96:db:63:0c:22:76:68:b3:d6:1e:01:e4:09:dd:58:e7:
9e:81:b6:dc:b2:88:5f:b2:49:92:1a:65:26:ba:ae:fa:1d:89:
35:20:58:7d:bc:66:0b:57:8b:70:a7:bd:33:f3:bc:60:2b:45:
4a:2d:9b:54:bd:01:64:e1:b8:bb:4b:5b:f7:e3:b5:05:40:31:
00:12:31:c8:2a:45:28:5a:0f:8c:3f:10:86:ad:53:eb:c7:85:
32:f7:b2:c2:a0:95:7a:41:9b:9d:15:82:f2:6e:bc:fd:d3:9a:
cb:32:7f:eb:61:b4:41:ef:41:9c:86:c2:80:a4:63:59:31:dd:
9d:5d:94:8b:4c:25:88:31:b6:08:8f:d1:80:11:d1:86:35:fa:
1f:9a:5d:04:b5:b3:26:ad:46:68:7c:0a:d7:d7:ee:42:8c:d9:
9c:1d:ff:2e:58:3b:b7:dc:e7:ca:1e:a9:8c:f8:4e:30:7b:2d:
19:98:04:65:50:f0:e6:17:93:27:f4:13:c4:af:8d:70:5e:a7:
dd:14:9d:c6:03:e0:f1:26:03:fe:5c:69:f3:21:70:97:e2:e9:
03:b3:23:28:3b:d0:56:d4:f8:23:30:d6:77:9a:23:b2:65:62:
c9:45:7b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:37 2026 by rpki-client