Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a1fa391-4377-44ba-a6c7-c785fc9a7733.roa
File: 9a1fa391-4377-44ba-a6c7-c785fc9a7733.roa (raw, json)
Hash identifier: oHVBrGKIO8dkbNZyJxZ4fn2raTdESqMJfizTW3Gm340=
Subject key identifier: 04:72:25:4D:AF:A1:27:44:C8:51:AF:25:DE:B8:CC:44:A1:D8:15:C5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1E197917ABBAF5283A0AC6051D0B59E5D46BD185
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a1fa391-4377-44ba-a6c7-c785fc9a7733.roa
Signing time: Sun 04 Oct 2026 00:40:05 +0000
ROA not before: Sun 04 Oct 2026 00:40:05 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.84.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:19:79:17:ab:ba:f5:28:3a:0a:c6:05:1d:0b:59:e5:d4:6b:d1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:05 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=16d43698bce2140c489a18fec9e96e4eaf0c7574c521511b5539968b2868f344, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:f2:54:d0:56:20:6a:ee:66:85:7d:39:35:
14:ca:42:f3:da:75:21:fd:e1:d0:fd:78:42:6f:04:
16:01:94:71:a2:2d:7b:51:6c:34:34:b7:5d:50:d9:
9a:cd:bd:4b:65:7e:41:0a:8e:fd:b8:17:cd:e3:93:
e6:03:ff:2c:d5:55:c1:f0:87:23:cb:c0:79:7d:d0:
94:7c:66:53:45:60:49:7f:be:6f:76:c2:0d:a4:48:
a4:ed:55:12:23:e4:a0:49:06:58:50:3d:99:84:16:
70:66:83:98:c4:f2:9e:e7:93:66:b5:aa:84:c7:d5:
cc:f5:41:50:2f:41:aa:6c:47:c5:a3:cd:c8:06:d1:
57:fa:f6:2d:7c:a2:4a:b5:03:e9:e3:71:8a:93:cc:
75:a2:92:64:70:ae:91:9f:a5:50:83:5e:56:1f:b9:
36:54:c8:3c:02:ec:54:1c:be:77:59:43:3d:4a:52:
71:cd:74:ea:b4:7e:81:cb:4c:66:38:9b:7a:8c:d2:
af:f1:75:68:85:b3:eb:e6:4d:88:48:d0:ed:92:c0:
6c:df:d5:20:1b:b1:da:6a:5f:3f:01:68:ab:18:ca:
d9:6a:1f:d4:f9:17:75:9e:32:8b:f6:73:c3:a0:83:
bf:0e:cc:18:8b:63:39:d2:88:a2:dc:c1:f8:ee:9e:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:72:25:4D:AF:A1:27:44:C8:51:AF:25:DE:B8:CC:44:A1:D8:15:C5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a1fa391-4377-44ba-a6c7-c785fc9a7733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.84.0.0/14
Signature Algorithm: sha256WithRSAEncryption
79:a2:41:a6:e2:6e:39:d3:2c:41:2e:65:60:9f:a8:13:25:9f:
35:77:33:5d:4f:4e:f7:6f:1b:d6:b2:b3:0e:ad:20:77:a3:a6:
40:47:fe:06:15:f4:b7:08:c9:01:23:4d:3a:1a:b7:56:c0:0a:
42:c7:38:5e:ef:a1:da:ef:99:87:89:65:61:a0:e1:bb:1f:1c:
c5:d6:71:e8:ef:95:58:1a:40:e0:7f:fe:19:c8:70:7f:47:23:
10:a8:11:a2:40:ca:ea:a0:13:25:4f:2d:45:89:3b:de:29:a5:
65:57:d4:25:7e:b5:a4:b4:c6:44:3b:49:ef:5c:91:39:6e:80:
21:85:81:ef:1f:bc:18:cc:01:1c:fd:18:f1:b4:6f:b8:38:a2:
61:eb:5b:9f:4f:49:3d:a4:23:fc:dd:27:2d:57:5f:9e:00:b9:
6b:e3:02:12:51:69:21:ad:35:a6:69:84:32:23:92:95:c4:dd:
7d:e4:10:2d:94:43:8b:e2:7d:eb:35:07:cb:ce:5a:41:1c:d5:
1d:25:24:c7:0b:7d:e7:82:61:72:6b:d7:69:51:fa:08:88:44:
f5:90:dd:23:96:b3:05:61:b0:ef:53:db:39:72:e2:5a:55:73:
cb:8a:29:6e:72:4f:93:99:ad:10:9d:fc:a1:ba:3e:6e:32:39:
ea:75:4b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:34:36 2026 by rpki-client