Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
File: 83d64fad-2f6b-441a-9079-e9e60d149aec.roa (raw, json)
Hash identifier: jTgAF5uJg7Zwg65sYVjY0dv0wP0ByvM2WfpBzqvxYaA=
Subject key identifier: 6A:08:2A:53:DA:E7:E4:4D:3D:67:61:90:E6:AE:98:FD:96:18:71:93
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7B9FAAE9EB8CFFAF0142448D348BFC25F0030A72
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
Signing time: Sat 08 Aug 2026 01:00:09 +0000
ROA not before: Sat 08 Aug 2026 01:00:09 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.17.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:9f:aa:e9:eb:8c:ff:af:01:42:44:8d:34:8b:fc:25:f0:03:0a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 01:00:09 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=6e8898e7f06dc8bcc3b9990b6beef39805ddfbaaa065ef5d3284433641cbc09b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:40:5b:f7:14:9a:81:b9:d2:cd:15:4b:0b:
f0:be:26:0b:18:a2:68:51:0c:8e:00:72:9d:10:17:
d3:7e:aa:56:e4:7d:60:e4:6a:40:65:63:ae:db:df:
a8:6c:e9:1e:eb:aa:05:c4:ee:b4:2f:a5:70:be:18:
36:50:b2:d0:05:99:de:65:7d:1a:9e:f1:91:5c:51:
62:bd:1c:a8:0b:40:6a:a2:38:47:d8:88:f1:c2:a7:
c2:d2:73:40:dd:d3:17:01:d2:f8:86:ac:71:6f:37:
72:a6:82:d8:dd:08:97:02:8f:52:43:3a:2e:51:64:
fd:b4:86:a1:96:41:c3:2e:a1:4c:9c:57:b0:1b:3c:
90:6a:f5:c3:5c:6e:2b:05:91:c0:c3:87:73:d4:44:
97:12:07:ae:89:c9:08:ff:83:bd:2b:ce:6e:2c:c0:
e5:c3:ba:d3:61:8a:4f:a2:70:ac:e6:80:cc:e0:ae:
2d:ac:ec:56:22:f9:9d:14:d0:95:fc:e7:82:c1:00:
87:f1:a7:6e:ee:28:79:a6:df:80:c8:bb:6b:f1:a2:
cb:2c:c9:1d:47:b1:c3:3a:84:25:56:ac:65:72:17:
81:0a:93:4c:b2:52:d1:6a:72:b4:39:c1:91:ba:46:
8b:a0:ce:a8:02:aa:bd:c3:68:b1:d0:f2:b6:09:cd:
bb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:08:2A:53:DA:E7:E4:4D:3D:67:61:90:E6:AE:98:FD:96:18:71:93
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.17.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:36:31:ad:96:4b:3a:38:70:88:6c:e0:48:7b:95:07:a1:79:
a5:6a:64:49:da:9b:49:f6:21:b9:7a:98:14:4e:5b:1d:b4:72:
6e:6c:8b:2e:36:ee:76:27:28:f6:3c:82:99:2b:02:85:66:c5:
3a:05:b3:95:0e:2c:4a:ae:61:ae:f3:00:b9:a3:c6:ae:85:5e:
4c:56:4a:3d:7b:3f:6f:45:9f:21:d2:50:91:7e:ca:26:8f:af:
c7:10:31:9a:2f:b3:ee:c1:a2:9e:68:39:3b:67:af:f5:4d:f2:
59:2c:26:98:98:e6:0c:58:19:55:df:13:10:ce:58:31:9c:7f:
c9:00:e0:8e:1d:e7:ff:f7:22:db:9c:1e:8d:0d:64:69:de:9c:
a2:95:fb:d6:3f:fd:c1:2d:76:71:e8:0a:c9:01:ff:ef:e1:ee:
77:26:db:a8:eb:eb:f0:b0:c9:e3:dd:94:e1:7b:35:71:c2:6a:
82:e2:03:7f:3a:d2:0a:16:c3:37:df:c1:9a:17:3b:4c:66:29:
7f:32:36:62:43:31:ec:a4:24:a2:76:cd:8d:f2:71:f8:6a:bb:
91:ec:c9:7e:ef:85:bf:39:0f:cd:3f:34:77:fb:12:02:9e:db:
80:2a:fc:80:83:4f:fa:ea:24:cb:35:bb:21:9c:e2:6f:bf:e1:
45:09:ed:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:27:29 2026 by rpki-client