Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1b27e87-801f-4c9e-98a2-f81b54e8b8d9.roa
File: a1b27e87-801f-4c9e-98a2-f81b54e8b8d9.roa (raw, json)
Hash identifier: 1hpUivcoFF8ExfxZTIGXbQTzgSduG//m0zAE8sNY9cw=
Subject key identifier: 0D:0C:BF:3B:9D:DC:84:5A:B2:99:C7:EA:79:4D:48:14:A8:3F:3D:F5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 17C5A28C4C4E21501913ECEFF58CAD3B76B2C143
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1b27e87-801f-4c9e-98a2-f81b54e8b8d9.roa
Signing time: Sat 08 Aug 2026 01:00:13 +0000
ROA not before: Sat 08 Aug 2026 01:00:13 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.112.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c5:a2:8c:4c:4e:21:50:19:13:ec:ef:f5:8c:ad:3b:76:b2:c1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 01:00:13 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=7154b25e685dd2d8758342b39ef9b5934a9cae5d0b2d003fb42b6ce723749a59, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:03:aa:7d:2e:f2:1e:2f:c2:55:93:19:43:
25:5d:25:14:ca:41:98:f4:f7:27:90:96:bc:0b:1e:
2d:58:e9:09:6b:e2:81:1a:97:10:06:ec:b1:a2:82:
68:3b:d9:0d:27:81:09:c1:33:cc:ec:69:c5:26:d0:
4f:de:d8:c0:fb:f1:7a:6f:98:1c:34:e8:83:10:84:
b4:75:7a:99:82:ee:09:d0:9d:2b:60:26:6f:38:6e:
30:32:c4:c5:c6:6e:c1:af:34:3e:d1:24:ee:a1:49:
8f:a6:14:52:18:83:69:03:33:4f:b3:e4:98:01:71:
30:a8:8f:45:e3:03:3d:29:0b:64:8b:14:74:69:96:
2d:6c:30:46:9a:e6:ba:95:a1:c6:f3:58:33:22:f2:
f8:d6:0d:92:f8:ab:18:f0:e9:9f:ff:64:65:b5:80:
1c:08:dc:af:41:bd:3a:85:9d:12:b5:7b:bd:0b:a8:
c3:02:d3:0e:b9:b2:67:8b:ba:63:a6:2c:2a:e5:b3:
fb:d5:69:2f:5e:f0:1b:a5:f0:c4:da:a0:4a:cc:3c:
f0:5d:92:b6:90:19:bf:79:34:75:3e:7e:f8:40:72:
94:e3:be:a7:b9:de:2c:58:25:6f:ef:03:85:51:75:
58:d9:92:03:d4:1e:27:9a:e6:89:a3:a3:39:ec:c5:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0C:BF:3B:9D:DC:84:5A:B2:99:C7:EA:79:4D:48:14:A8:3F:3D:F5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1b27e87-801f-4c9e-98a2-f81b54e8b8d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.112.0.0/15
Signature Algorithm: sha256WithRSAEncryption
44:b6:c0:7c:90:e2:cc:c1:2c:b9:99:43:2e:15:f6:e4:77:96:
2d:82:fc:32:ec:70:7f:bb:d5:cc:2a:8e:e9:9d:78:a2:8b:46:
c7:2b:9e:ed:08:fb:0d:c6:3a:de:0d:32:ac:76:3c:39:65:19:
8d:14:cb:da:a4:03:f2:6b:74:70:d7:55:a4:53:b9:29:fc:21:
2f:f4:6d:31:ab:6c:a4:64:7d:8f:e9:bf:c4:e1:9f:07:a7:ed:
2b:ba:5b:af:1c:f0:a0:67:d4:ec:2c:61:81:17:0f:ea:4e:9c:
98:b5:c5:08:0a:e9:91:c8:35:e8:bf:81:30:83:f7:c9:aa:60:
28:f2:2d:84:6b:ed:37:bb:49:29:74:6f:e7:3f:d7:50:32:4b:
2c:1c:c8:45:51:7c:f4:70:ab:75:bc:bb:61:57:61:a2:eb:cf:
68:ae:d2:17:ff:3f:c5:bb:b5:81:2b:dd:29:6d:e2:28:21:50:
a9:2e:77:18:c6:f4:03:5c:5b:07:54:c8:68:69:3d:72:23:ef:
83:7c:2d:8b:bc:69:68:13:7c:d7:06:fd:95:97:54:33:85:21:
75:9f:78:b2:ba:a4:f5:d9:0e:fe:f4:24:1c:73:cc:7d:0b:09:
19:42:08:14:ee:c4:9c:36:fc:0a:f1:08:10:26:62:6f:e2:c0:
ca:30:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:21 2026 by rpki-client