Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5480e32c-3a23-4243-82e3-c7eea059d814.roa
File: 5480e32c-3a23-4243-82e3-c7eea059d814.roa (raw, json)
Hash identifier: q0G1EGad7Zb586J1op1iXZ+B8StibIekHvjADa0bRwo=
Subject key identifier: 5E:9A:9C:80:46:5E:2E:33:B3:93:47:08:6E:66:A5:1E:92:BC:09:42
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 716B94244EA2783B0D80F901DDDF61DC9512694D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5480e32c-3a23-4243-82e3-c7eea059d814.roa
Signing time: Sun 04 Oct 2026 00:40:08 +0000
ROA not before: Sun 04 Oct 2026 00:40:08 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.92.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:6b:94:24:4e:a2:78:3b:0d:80:f9:01:dd:df:61:dc:95:12:69:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:08 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=863145ccb460b89094ef4b7aa6e49ab0796fa69d6811c0e7c766090ea299b350, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:9e:b9:f5:15:7d:49:f0:fd:b9:01:57:5c:
8e:25:ba:7b:15:c8:95:a8:82:91:4a:a6:36:f5:e0:
dc:22:10:39:01:72:49:7a:f5:14:62:ea:65:d5:8c:
35:1b:4d:32:e7:7e:be:bc:15:62:5b:c8:47:b6:4c:
3c:a7:34:ad:7a:ae:89:43:34:43:88:32:a5:53:f0:
17:ab:28:b2:47:d2:93:d0:96:7e:19:c7:4d:41:8d:
f6:3e:40:8e:ab:8c:5e:ce:87:dd:d1:24:fe:57:fd:
01:1a:d0:bd:d3:c7:ef:16:4a:cf:21:66:72:58:59:
ba:0a:b1:54:0e:d9:8e:83:83:3d:c8:f8:cb:65:48:
fd:98:68:c8:df:5c:6e:6b:6f:15:ed:1f:14:cf:19:
33:a6:5f:b1:2a:b9:ae:54:25:7d:48:27:24:c8:1b:
27:4e:45:0a:88:8c:9c:eb:a7:38:b5:9f:02:2e:49:
eb:93:1c:a5:88:ef:ea:a5:a7:00:d8:41:7e:68:17:
64:0f:5a:5f:d2:1c:a4:a2:3d:e4:96:fd:bd:a7:68:
5e:b0:12:d7:6a:5f:f6:39:19:b0:68:03:93:c9:79:
f0:a3:bd:be:75:07:38:e3:4a:03:cd:31:71:49:15:
9b:05:6c:bd:a5:0d:7e:37:df:f6:71:09:32:c3:61:
e3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9A:9C:80:46:5E:2E:33:B3:93:47:08:6E:66:A5:1E:92:BC:09:42
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5480e32c-3a23-4243-82e3-c7eea059d814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:12:3a:ae:77:ff:54:b1:a9:b8:45:b8:67:8a:9e:63:a3:8c:
38:09:7b:d4:c3:a9:9c:bd:77:e2:95:1c:89:4c:87:c7:fe:3b:
2c:62:89:36:c9:fb:88:38:e7:be:ef:13:f8:4a:21:80:ef:4a:
84:1c:fe:56:5a:56:03:8a:bb:6b:22:cb:a8:2e:f8:57:b2:e0:
8b:11:3f:02:fd:d9:d2:70:ba:3c:f7:3a:b8:23:8d:61:d6:96:
58:e7:46:b9:6d:32:23:03:69:28:fe:9c:53:5f:25:00:2a:ed:
86:76:a2:2f:e1:de:07:a3:bb:cc:f0:c1:f2:67:e4:ec:18:91:
86:dc:94:b1:af:43:41:34:52:aa:8a:62:82:53:d9:f7:3a:a1:
9d:29:96:90:53:a7:c1:84:1e:e0:9a:9e:64:da:fe:bd:62:a2:
3b:5a:dc:a6:6e:93:a4:4f:e3:dc:f6:93:1d:d1:1a:32:4f:5f:
f7:64:45:6d:64:7d:64:32:87:38:2c:23:c3:6f:d5:46:be:69:
78:76:dc:37:5d:c2:b9:ac:a4:99:76:06:ce:51:e8:81:de:5a:
c9:0b:9f:4e:1a:e3:93:0f:71:e1:1d:3e:4f:cd:7d:de:27:6a:
92:f7:5b:17:eb:f3:b5:c9:02:55:71:e9:4a:a1:28:b2:48:c9:
7d:44:b0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:35:50 2026 by rpki-client