Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa
File: 8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa (raw, json)
Hash identifier: GR/vho9AAqaXCafB0eDVN8OgER3VB4SVcP0VaSoVdSs=
Subject key identifier: C1:24:9A:8E:40:E1:ED:0B:75:3F:B9:CE:67:F6:1C:AE:1F:E8:D4:BD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 634EF052ABCEFF36CFF8C50F733BEE4206D967BD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa
Signing time: Mon 26 Oct 2026 05:50:42 +0000
ROA not before: Mon 26 Oct 2026 05:50:42 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.226.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 16:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:4e:f0:52:ab:ce:ff:36:cf:f8:c5:0f:73:3b:ee:42:06:d9:67:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:42 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1879bb0299921d9dd7754fb666faec96377ae86f2a1dc117f654f685a041d95b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:df:af:cf:77:fc:6f:bc:27:b2:d9:de:0d:b2:
19:2b:c9:f5:4b:3e:9c:09:df:46:3d:2e:61:77:fb:
6a:28:84:4a:43:02:29:dc:7b:d0:cb:2a:48:77:2f:
89:aa:fb:7b:11:44:df:23:c4:b8:27:ac:e5:d2:19:
14:46:37:46:d6:47:4d:35:57:66:d4:ed:0d:e3:b4:
fa:52:26:93:c8:10:f7:9f:41:a2:b0:84:64:ca:1c:
1b:83:c1:4a:1d:b9:d6:26:13:ca:34:d5:d8:f7:1b:
95:52:f5:82:49:5d:6c:a3:9a:a5:c3:63:69:78:e7:
03:3d:52:45:7d:37:f7:ce:72:74:d4:4a:4a:57:0f:
c7:52:e8:38:bf:35:75:39:4d:b1:4a:1c:f6:cf:67:
81:2f:b9:2c:f9:ff:d7:22:41:a8:34:c8:76:e9:6d:
14:8b:95:47:5f:21:79:72:f1:4f:3a:f7:46:c2:5e:
cd:e3:4a:92:1c:88:e0:c5:a3:6a:10:a5:05:ba:d3:
42:3f:84:4b:35:07:a0:98:e2:e1:d7:8f:28:0b:d9:
d2:c2:81:39:ba:b9:a7:88:62:d1:d9:d3:29:16:f8:
ab:e7:46:50:d3:76:02:8e:51:77:fb:40:2e:71:a1:
64:63:a3:ff:d2:6b:53:ff:ba:32:5e:45:bf:09:ec:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:24:9A:8E:40:E1:ED:0B:75:3F:B9:CE:67:F6:1C:AE:1F:E8:D4:BD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.226.0.0/15
Signature Algorithm: sha256WithRSAEncryption
67:e5:6c:0d:53:76:2c:50:e5:de:0c:e0:9d:a9:b5:35:36:f1:
b8:7b:86:0e:25:c1:d9:7d:a1:a7:a9:2e:23:92:c7:b0:4b:00:
44:c4:c3:de:8a:27:68:f9:27:54:12:b1:08:30:33:21:b0:b3:
f1:d4:44:4c:20:b4:76:3b:93:c2:a9:a8:0c:57:18:c0:a3:a4:
33:af:1e:36:7b:83:ae:40:8b:15:20:3d:59:8b:5f:4e:00:fb:
0c:0f:50:a5:cd:ab:a4:7d:9a:56:e4:d0:a0:57:6d:60:13:59:
2e:16:34:5b:3f:cc:67:ed:57:19:43:16:99:14:a3:2b:01:8c:
87:6f:2e:c3:ad:4a:62:09:bd:75:2e:f7:8d:b7:59:a6:fe:52:
a7:dc:41:d3:f9:b4:89:bf:f2:a0:28:97:f2:77:13:a9:82:30:
88:dd:69:29:a6:d2:cb:e8:45:be:ec:e3:2f:bf:8b:ea:14:16:
fd:75:16:53:c4:4e:3e:36:f2:e6:9a:f2:6e:f3:e0:59:c5:81:
1a:45:b5:cd:de:19:c7:60:83:fe:6f:38:27:0a:7e:22:86:a0:
7e:e9:5e:3a:66:53:8d:0c:f6:a5:3b:b5:48:67:49:76:d6:06:
35:3c:39:3a:49:62:eb:56:93:b0:1c:bd:2f:c5:6f:73:c2:5c:
0c:64:99:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 03:02:52 2026 by rpki-client