Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/94c2a36e-245b-439a-bf61-04132c5df5a4.roa
File: 94c2a36e-245b-439a-bf61-04132c5df5a4.roa (raw, json)
Hash identifier: 45s5CPgnDlt5m7ISrHf8OCBw1CA17NKHcV7qSpECT9E=
Subject key identifier: 97:73:28:45:29:CF:7F:90:11:64:6F:E6:DA:06:F8:F9:71:DD:91:7F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7AE8D82C871F67329E2E46880730C24BFBB881F7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/94c2a36e-245b-439a-bf61-04132c5df5a4.roa
Signing time: Fri 07 Aug 2026 05:00:08 +0000
ROA not before: Fri 07 Aug 2026 05:00:08 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.35.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:e8:d8:2c:87:1f:67:32:9e:2e:46:88:07:30:c2:4b:fb:b8:81:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:00:08 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=2fa16efd1cc91e116bf6508e3e6a528f3d00f02ed2ecf5c6efaacd8a082c2a4b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:ea:53:79:89:5e:de:ca:a4:a1:d6:04:02:
b7:5f:1c:93:88:3f:f7:37:9e:54:95:ed:00:34:2d:
ba:f4:c9:42:cc:ee:04:56:e5:12:be:ed:4a:0e:5f:
7b:85:e8:84:08:ce:8f:6f:c2:34:80:3a:7c:22:f7:
6c:22:01:b8:58:f3:9b:63:e2:d5:f8:82:f4:f7:5c:
bc:99:c9:8d:c1:ff:53:5d:46:46:fb:05:fd:6d:29:
1a:da:a0:f8:8b:19:8a:df:f0:04:03:df:65:30:4f:
d5:f8:89:05:f9:59:36:5f:d2:19:5e:c6:b8:3a:ca:
ba:92:6c:74:47:95:56:22:69:f1:c1:aa:53:ff:d3:
1e:72:f0:aa:38:71:5f:a3:60:06:2e:99:8e:78:fc:
e5:8d:4b:18:0b:62:fa:71:46:9a:a9:3e:fe:01:98:
f4:b7:54:b7:a4:52:1a:33:5d:cd:12:58:e5:ab:91:
a7:66:85:ca:d4:ee:72:a2:f9:dc:15:44:c0:e5:78:
a0:d6:4a:06:d6:89:eb:f9:1c:41:61:55:2e:06:47:
0b:61:79:21:70:47:ce:73:50:01:26:b1:c2:0e:64:
c6:9f:21:e2:42:35:11:41:86:42:2b:e4:da:a6:f3:
88:0e:d2:af:bf:47:77:32:8f:b9:61:c7:af:a7:a6:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:73:28:45:29:CF:7F:90:11:64:6F:E6:DA:06:F8:F9:71:DD:91:7F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/94c2a36e-245b-439a-bf61-04132c5df5a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:93:77:b2:37:4d:25:1a:28:ad:56:5b:10:34:20:d8:7b:81:
de:21:e0:2c:75:d0:71:8e:8a:f0:67:2f:69:b3:e3:de:6d:7f:
59:75:ca:25:00:30:df:2b:dd:4d:d5:bd:19:9b:9e:9a:95:c3:
48:25:f4:c6:15:52:86:96:aa:63:b3:9a:e8:e6:ee:58:6f:16:
77:6d:c1:e6:7d:6c:c4:82:9b:73:d0:70:53:5a:59:ba:f5:60:
47:ed:9e:f1:f8:f9:0a:ff:c3:55:53:51:8d:51:92:4e:a6:91:
33:82:5f:eb:11:91:0b:71:14:80:e3:ba:88:34:be:42:a2:7e:
00:4a:6b:89:b8:91:e7:63:8d:28:04:09:56:f7:30:1c:4d:f4:
03:5d:18:b9:13:89:7d:f3:7d:c3:10:16:fd:c3:58:5d:d8:0b:
f2:fb:a9:be:16:2e:a3:f8:a4:33:42:9c:bd:b7:7c:ff:92:8a:
c7:41:47:32:1b:c5:43:33:17:ee:22:0f:be:5f:86:b7:c7:45:
8f:fc:1c:43:c5:49:66:39:19:53:a2:41:a9:c0:0e:69:c9:cf:
ac:49:7f:d5:c1:93:38:0b:0d:30:d8:1e:35:8a:0b:17:02:a6:
3d:00:54:e2:9c:91:dc:36:b0:c7:12:e7:95:d5:13:28:fa:68:
33:51:95:26
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUeujYLIcfZzKeLkaIBzDCS/u4gfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDcwNTAwMDhaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDJmYTE2ZWZkMWNjOTFlMTE2YmY2NTA4ZTNlNmE1MjhmM2QwMGYwMmVkMmVj
ZjVjNmVmYWFjZDhhMDgyYzJhNGIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKu26lN5iV7eyqSh1gQCt18ck4g/9zeeVJXtADQtuvTJQszuBFblEr7tSg5f
e4XohAjOj2/CNIA6fCL3bCIBuFjzm2Pi1fiC9PdcvJnJjcH/U11GRvsF/W0pGtqg
+IsZit/wBAPfZTBP1fiJBflZNl/SGV7GuDrKupJsdEeVViJp8cGqU//THnLwqjhx
X6NgBi6Zjnj85Y1LGAti+nFGmqk+/gGY9LdUt6RSGjNdzRJY5auRp2aFytTucqL5
3BVEwOV4oNZKBtaJ6/kcQWFVLgZHC2F5IXBHznNQASaxwg5kxp8h4kI1EUGGQivk
2qbziA7Sr79HdzKPuWHHr6emb1UCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSXcyhF
Kc9/kBFkb+baBvj5cd2RfzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OTRjMmEzNmUtMjQ1Yi00MzlhLWJmNjEtMDQxMzJjNWRmNWE0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADMjMA0G
CSqGSIb3DQEBCwUAA4IBAQA0k3eyN00lGiitVlsQNCDYe4HeIeAsddBxjorwZy9p
s+PebX9ZdcolADDfK91N1b0Zm56alcNIJfTGFVKGlqpjs5ro5u5YbxZ3bcHmfWzE
gptz0HBTWlm69WBH7Z7x+PkK/8NVU1GNUZJOppEzgl/rEZELcRSA47qINL5Con4A
SmuJuJHnY40oBAlW9zAcTfQDXRi5E4l9833DEBb9w1hd2Avy+6m+Fi6j+KQzQpy9
t3z/korHQUcyG8VDMxfuIg++X4a3x0WP/BxDxUlmORlTokGpwA5pyc+sSX/VwZM4
Cw0w2B41igsXAqY9AFTinJHcNrDHEueV1RMo+mgzUZUm
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:42:59 2026 by rpki-client