Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/84c43b95-85d3-4c1d-a6be-cf17906f11c4.roa
File: 84c43b95-85d3-4c1d-a6be-cf17906f11c4.roa (raw, json)
Hash identifier: UCmNejHVbM0tjKm1I4OL51GmT/eM8TuX2CYttkLr7aU=
Subject key identifier: B9:64:77:EC:78:FD:23:C1:F0:39:89:22:C9:FA:58:17:18:4C:43:07
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 09E0F0806C0D4BB24EEF426052D049222BBB0A3D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/84c43b95-85d3-4c1d-a6be-cf17906f11c4.roa
Signing time: Mon 26 Oct 2026 05:50:40 +0000
ROA not before: Mon 26 Oct 2026 05:50:40 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.236.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e0:f0:80:6c:0d:4b:b2:4e:ef:42:60:52:d0:49:22:2b:bb:0a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:40 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=5cce0645ea9201bb00afb98238fc5e823cbd18a3656aa9d498ec71d33ad12248, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:28:55:1e:9b:af:53:86:30:6d:17:a3:5e:
58:33:db:3f:3c:f6:b5:e3:5c:25:6f:9c:e5:eb:42:
9c:d0:47:79:fd:63:41:7f:0f:92:eb:7b:a9:44:a9:
4a:f2:0d:cc:d1:21:ce:94:6e:02:97:41:b5:26:be:
0f:60:ab:bc:f6:17:75:88:1d:cd:8b:5b:47:60:d0:
43:66:d6:94:ca:4d:9e:eb:68:92:a8:c3:bd:be:f0:
cd:d6:6c:b1:cc:1c:59:d8:99:ef:32:41:fb:14:af:
68:e3:b4:ea:fc:56:53:e6:b8:f0:6e:a3:29:0b:d7:
cb:fc:f7:21:d5:08:11:44:8b:a6:bf:95:4f:7a:7b:
55:5b:47:56:2c:91:78:a6:4f:cf:41:fe:c0:2b:41:
d9:32:44:9a:8d:3e:2c:cc:e4:36:b7:79:09:37:a5:
c5:6a:e4:67:42:a2:90:ca:67:2b:16:a1:8d:06:42:
f9:3d:00:aa:7c:79:88:76:48:04:1f:9c:49:27:0f:
7f:ce:01:68:72:63:62:6d:9e:be:f3:c1:3a:e0:00:
6b:ab:4b:80:08:30:99:5d:1d:c4:cd:d3:02:53:61:
d3:2f:8b:28:f6:b7:6d:74:62:ab:19:a6:6d:e5:fa:
0f:ed:f1:db:67:8a:05:4f:26:30:54:14:d2:9c:79:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:64:77:EC:78:FD:23:C1:F0:39:89:22:C9:FA:58:17:18:4C:43:07
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/84c43b95-85d3-4c1d-a6be-cf17906f11c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.236.0.0/15
Signature Algorithm: sha256WithRSAEncryption
29:82:99:47:0a:2d:ff:e0:a8:51:ff:81:fb:54:ab:f4:ad:04:
a1:d5:71:99:bf:4a:a7:b4:4d:03:91:bc:6b:00:b5:e8:29:5d:
4f:73:3e:78:a8:30:ff:18:64:a6:5e:4c:eb:af:2a:bf:08:7b:
f8:67:c7:99:0c:41:a6:5e:a8:d5:d1:60:e2:f3:76:ea:e7:75:
73:d1:66:d2:ad:16:d9:4d:af:5b:0f:f4:f7:2e:21:50:c8:8b:
0d:68:8c:be:b5:89:fe:d4:eb:00:0e:6f:ae:7a:25:01:f6:31:
74:ba:fc:35:d8:8e:49:5b:05:b6:df:c3:a8:5c:dd:5c:10:e5:
91:2e:6e:99:3d:4d:04:cc:80:70:bf:13:4a:fd:1b:a3:eb:4a:
bc:c2:f3:4d:75:22:b3:f7:56:0a:02:0b:7f:eb:4f:c5:52:e7:
42:82:53:05:31:2d:f0:74:4b:02:f8:3f:87:b0:d2:b7:60:85:
56:e3:56:df:d0:4c:27:f5:22:4c:99:a1:93:4d:88:7d:9d:b9:
53:c1:45:26:3e:68:8d:60:d1:a5:94:c0:6f:3b:d8:0b:6a:6a:
e1:e2:83:44:ae:b2:88:9f:c8:ff:9e:fc:65:66:a1:18:ee:20:
3e:11:59:c3:f8:14:42:cd:98:84:18:d0:60:8f:7f:d8:84:a7:
c6:8c:21:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:05 2026 by rpki-client