Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c8fd8c44-7514-40e6-9198-e0b6e37b4c69.roa
File: c8fd8c44-7514-40e6-9198-e0b6e37b4c69.roa (raw, json)
Hash identifier: OyUoq616UMFSWp7l1F6jbvEHjWJLCv706/HOZoPZK9w=
Subject key identifier: BB:2E:4B:67:C0:20:C1:84:FB:D6:A8:66:5F:20:84:D1:89:E5:63:BB
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6568D88B2A77F0582CB84537668C2F12B9753343
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c8fd8c44-7514-40e6-9198-e0b6e37b4c69.roa
Signing time: Sun 04 Oct 2026 00:40:22 +0000
ROA not before: Sun 04 Oct 2026 00:40:22 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:68:d8:8b:2a:77:f0:58:2c:b8:45:37:66:8c:2f:12:b9:75:33:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:22 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=6bd6dd30b3b9c2b8f70f38e9196925b6866279b282ea799894d6cfd4d430655b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:dc:40:04:fe:d3:ef:72:db:c2:1d:f5:4b:
93:82:f4:e2:bd:20:c4:82:73:a2:90:f2:87:3e:00:
13:73:7b:c5:70:1b:26:22:26:ba:07:7e:e8:11:06:
16:2f:09:a7:6e:13:52:fa:33:31:90:99:60:b3:2c:
f8:5f:e2:75:bd:f2:01:92:0d:c1:9f:db:e4:62:be:
05:8b:9d:32:61:53:0e:e4:9d:a4:59:88:ec:81:e1:
d3:53:47:44:c5:56:1e:29:7d:5e:cc:0e:5f:3d:19:
85:70:cb:d9:a3:35:78:30:a6:83:4c:47:90:9d:c3:
7b:c7:8c:93:03:12:9c:99:16:f3:59:12:25:53:71:
67:e6:77:db:6a:10:38:26:dc:b7:72:bb:b9:d6:4e:
0d:3b:43:85:bb:1a:9e:9a:71:67:0f:4b:ba:12:92:
17:29:73:71:ad:a1:b4:28:cd:16:de:48:90:12:74:
bf:ee:91:e8:91:b0:67:8a:ca:55:c5:57:2c:60:15:
4e:67:6f:0d:9e:ec:cf:09:b9:9f:9e:87:e3:8b:8c:
4a:dc:ae:ee:8e:b2:b6:12:a9:6d:67:07:22:fa:27:
4d:fc:58:c8:29:0c:91:29:0c:a4:ab:df:5d:4f:81:
d1:1c:cf:1c:7b:84:f6:b8:05:98:26:74:f9:eb:a0:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2E:4B:67:C0:20:C1:84:FB:D6:A8:66:5F:20:84:D1:89:E5:63:BB
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c8fd8c44-7514-40e6-9198-e0b6e37b4c69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.238.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:9c:15:8d:08:9e:b8:12:a4:12:c3:5c:9b:9b:75:52:e0:66:
1c:00:b1:20:ad:1f:ec:4a:a9:d7:db:29:9b:26:95:4c:35:e5:
b0:e8:de:95:17:28:7d:90:1c:d2:5e:e5:46:30:3c:88:36:c4:
a1:1f:1f:97:99:91:0c:e8:44:b8:50:05:f6:46:6b:cf:84:8d:
64:58:d3:4c:b6:a0:56:e2:30:a6:79:89:b0:25:82:3e:63:d0:
5b:1c:42:5c:1c:92:7e:50:59:be:24:a5:d0:91:39:35:6d:f9:
34:9e:16:5b:95:f2:4c:8e:09:ae:2e:c0:74:6c:fa:ee:f7:b3:
ec:d2:86:8b:b8:ac:52:cd:26:32:1f:09:f7:d3:8b:bb:00:3e:
34:52:19:13:7f:af:1e:01:a8:97:99:cc:eb:7f:cb:5c:9f:f7:
40:71:cd:c8:2c:db:1d:19:ed:07:44:d6:53:84:29:f9:7a:e4:
27:f0:ad:28:2e:9e:77:9f:74:77:5c:5c:5e:a4:ae:4a:59:dd:
79:22:10:ac:4a:e9:51:86:de:7c:12:34:14:7c:fa:ab:54:0c:
eb:2f:f7:7f:66:be:38:10:1f:b4:99:3f:3e:6a:c6:2a:48:54:
8d:ce:89:e6:f7:fe:83:a1:67:9e:8a:6f:d8:14:88:21:53:83:
83:2b:2a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:47:48 2026 by rpki-client