Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa
File: 4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa (raw, json)
Hash identifier: yywYCeuz4voi9NAnp4FivA3p8ML3xTNu1WQCser2/fo=
Subject key identifier: 8B:E2:40:E8:A9:5F:C8:CA:04:49:FD:5B:86:BB:5B:7B:9D:C3:D7:38
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 44EF81343CEF566BBBB8A96875A06543767017D5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa
Signing time: Fri 07 Aug 2026 06:00:10 +0000
ROA not before: Fri 07 Aug 2026 06:00:10 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.164.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ef:81:34:3c:ef:56:6b:bb:b8:a9:68:75:a0:65:43:76:70:17:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 06:00:10 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=9cbbe176e8906c8379d8ca38ee426c2c5d359e010b366aab714da217885d4453, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:b5:46:dc:84:f6:52:33:ba:81:21:8d:e7:
50:1c:1b:39:af:11:35:9b:18:35:97:bb:87:b6:d2:
a3:bf:4a:6d:ab:39:c1:55:da:ae:39:e3:f4:65:82:
0a:6f:45:cb:d1:a6:4e:64:ee:38:34:51:5b:e8:14:
b7:58:7e:05:dc:99:44:54:1a:a0:0e:9c:47:6f:ac:
a5:67:9a:fe:e2:2b:d6:80:9e:3e:77:e7:40:48:42:
62:ef:5c:f3:3a:2b:e7:80:6b:c8:20:18:34:01:ad:
ff:2b:2d:3f:90:4f:84:04:69:ca:e5:98:7a:ee:26:
df:23:bc:f1:18:f2:f3:c7:cb:64:10:fd:a2:1d:5d:
1a:be:9e:e7:2e:8a:09:2a:94:bb:da:5c:5e:e3:a5:
a7:2b:61:50:5f:72:3a:61:f4:6e:8a:32:7b:81:49:
ad:2e:25:bf:0a:57:0f:b7:06:85:1b:6c:8c:08:65:
d0:2c:0b:b0:19:fa:3e:77:2f:e4:30:87:ad:f0:40:
2c:bf:f1:d9:c5:1c:0c:f0:12:5e:7e:7d:05:f6:3f:
19:10:bf:e0:b9:76:b4:49:f3:f0:7a:5a:6b:25:74:
ca:d0:0e:38:7f:59:79:30:50:79:7b:b4:f4:7e:c7:
85:5b:47:32:53:3a:28:d2:d2:30:87:7c:6d:a8:98:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E2:40:E8:A9:5F:C8:CA:04:49:FD:5B:86:BB:5B:7B:9D:C3:D7:38
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.164.0.0/15
Signature Algorithm: sha256WithRSAEncryption
07:c0:43:3f:a1:a1:a2:8c:cd:2b:57:62:44:8a:1f:03:a0:ec:
2b:07:f7:ae:d0:7b:e8:ff:74:32:09:c6:8f:82:c6:70:9a:bc:
fd:01:1d:df:88:a8:8c:62:15:6d:a3:ef:bb:aa:af:07:ea:f6:
57:50:09:51:7d:b4:4e:57:ba:7a:41:0f:b6:ce:84:2e:53:f8:
a6:04:05:c4:24:99:74:96:64:8f:64:7a:cc:53:07:ef:0b:b2:
e2:5e:c2:a0:0a:89:12:7b:70:d1:59:bd:ee:ff:1c:71:31:a0:
9b:91:ff:9f:9c:6c:11:68:1e:e7:54:49:bb:79:00:bc:4c:d0:
96:e2:e7:93:d2:6c:84:a8:6d:e1:4f:ee:af:39:65:5a:55:71:
c3:8a:bf:8b:8e:55:26:6b:77:ee:3f:67:53:fc:49:bd:7b:e2:
68:a7:f7:82:af:9a:f5:c1:39:d2:fd:47:02:e2:1a:bf:28:46:
75:1a:c0:79:08:2f:f8:2a:62:12:3c:e3:43:29:79:d5:cc:5a:
b9:b7:c2:3a:96:86:9c:4d:a4:8f:ef:20:77:c3:a4:0a:9f:23:
a4:3a:57:8a:6f:ae:66:db:c9:8f:f9:97:ac:31:21:86:ba:de:
3e:a8:86:1b:bb:84:6f:e7:f2:8c:24:bd:1d:d1:1a:e6:d8:25:
89:88:17:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:31:57 2026 by rpki-client