Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b41fa9b7-d736-4d41-9fc2-9feda5a87248.roa
File: b41fa9b7-d736-4d41-9fc2-9feda5a87248.roa (raw, json)
Hash identifier: Aqc441Y6IoG92TYD0J+ZzVpiCpHypFHIIiue5sYsWck=
Subject key identifier: 08:EF:13:71:EA:21:8E:F8:E6:E8:92:5C:0C:B4:47:86:A8:31:DD:95
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 33D488C5861E1FCEB9E2039BC5E7F08EC8D92739
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b41fa9b7-d736-4d41-9fc2-9feda5a87248.roa
Signing time: Sat 08 Aug 2026 01:00:13 +0000
ROA not before: Sat 08 Aug 2026 01:00:13 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d4:88:c5:86:1e:1f:ce:b9:e2:03:9b:c5:e7:f0:8e:c8:d9:27:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 01:00:13 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=6b5d0cb24e1a34598a13a5228dbd353fb38757621dd805545ee72b881cacf43e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:fa:39:80:58:ba:bc:7c:25:4f:4b:46:a7:
ab:2b:39:8a:02:8e:b1:2e:2c:66:68:bf:94:1d:29:
94:42:07:69:1f:c2:4f:7f:99:75:e0:09:c6:aa:58:
fc:b6:21:1b:ee:5c:e4:5e:70:66:d0:9b:c5:68:06:
c3:b7:69:0c:76:f8:02:a1:6f:f0:d7:28:e7:98:21:
b2:14:2f:1f:ce:34:24:49:a8:16:fd:f7:33:90:6f:
97:85:dd:8c:55:71:f8:bb:dc:b0:f6:8e:bd:50:8c:
08:da:a2:46:95:18:3f:0e:3a:97:e3:52:ba:3a:91:
01:dc:04:53:3d:47:f7:d3:90:da:2d:2d:45:6d:ca:
4d:71:42:fc:68:94:7f:42:a6:04:5b:63:b3:3d:34:
f8:55:1a:f1:b1:5c:96:46:10:ae:c2:8b:c5:56:89:
1e:93:40:5c:f5:1b:e6:c9:b8:ca:c8:ce:f5:72:ee:
a0:41:c3:0f:89:9c:02:27:d2:7b:4a:64:84:02:bd:
77:5f:a1:e6:6e:a9:cc:7b:4d:c0:67:d6:03:c5:58:
04:39:a6:ca:e0:37:c9:af:38:0c:c4:4f:67:1c:7b:
93:8b:30:41:fd:dd:b8:06:95:a8:b7:af:d4:c9:56:
55:88:f2:14:9e:b9:41:20:b4:bd:d7:94:03:c6:06:
08:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EF:13:71:EA:21:8E:F8:E6:E8:92:5C:0C:B4:47:86:A8:31:DD:95
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b41fa9b7-d736-4d41-9fc2-9feda5a87248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.255.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:0e:5c:2b:36:e6:a0:06:43:ad:88:67:d8:67:a0:ef:f6:17:
43:74:24:eb:bf:8d:a8:46:e8:60:e8:52:83:a9:ed:05:f3:97:
d3:1c:42:53:eb:bd:af:d2:2b:16:5d:0a:34:4c:80:7e:e2:ae:
09:0a:60:25:da:50:a9:07:c8:48:e8:66:e3:41:ef:da:d7:b8:
f0:d8:00:2a:7e:e8:9e:71:67:fb:ff:32:b8:fe:4b:ab:b0:eb:
4f:a2:20:85:18:e5:d1:b3:6c:72:e2:93:57:73:2b:e8:97:7d:
e0:f6:08:f8:6a:b9:46:1b:bd:c8:4a:55:e2:38:c4:05:79:23:
b8:cb:51:4b:06:9c:f1:43:f0:84:c8:1a:29:15:2f:2c:0d:50:
a7:20:a0:b1:f9:bc:eb:85:ab:14:3c:ce:b8:5c:bf:2a:e1:49:
34:59:27:93:b1:15:b2:57:b2:6e:aa:da:a9:30:25:0d:b7:72:
9b:1e:6e:5c:62:15:03:4f:d5:e5:05:89:3b:8a:7a:66:c1:be:
f6:dd:34:ec:6b:33:87:4d:fd:bb:50:3c:a8:0d:71:14:cf:c3:
01:d8:96:88:b9:84:2c:5f:03:e3:d4:1e:31:52:d0:90:e8:9e:
c7:a3:1e:87:8d:18:fd:6b:96:85:dd:94:97:aa:73:79:a1:83:
54:38:38:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:27:26 2026 by rpki-client