Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d7fdedfc-2bdc-42cd-a714-2abbc02deae9.roa
File: d7fdedfc-2bdc-42cd-a714-2abbc02deae9.roa (raw, json)
Hash identifier: ocHDZAtPvnMSryLe2+ALejRcTs8LwtmKTGCxmOTdNHY=
Subject key identifier: DA:3B:60:B6:EB:5C:BA:0E:4E:24:00:C7:73:F6:E0:D3:69:36:C4:A2
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7895B8E43A9C1CF482532F495D807E358F5673A7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d7fdedfc-2bdc-42cd-a714-2abbc02deae9.roa
Signing time: Fri 07 Aug 2026 06:00:09 +0000
ROA not before: Fri 07 Aug 2026 06:00:09 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.151.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:95:b8:e4:3a:9c:1c:f4:82:53:2f:49:5d:80:7e:35:8f:56:73:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 06:00:09 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=e5be4eab9ef645c1b92e1e1be31d35cfd1785e553b549da5629d1b60302cfcd7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:4f:97:37:de:15:b9:15:2f:29:98:89:9f:
cc:8f:9f:dd:53:a5:ff:ea:75:76:10:d0:a6:32:85:
2c:9e:fd:0a:0d:52:e5:44:73:a8:e6:c3:c7:9e:72:
ec:06:dd:10:34:6d:f8:d9:63:95:6e:84:86:52:09:
20:b8:5a:ef:68:92:41:ca:1d:9b:be:ca:7a:12:df:
73:5f:6b:21:57:97:1f:cc:9d:71:92:05:f1:32:1a:
28:2e:ed:d8:99:71:e5:19:b5:76:1e:e8:d5:7b:fc:
f8:44:bc:ce:bb:4c:3f:15:47:bb:c7:6f:e4:4e:fd:
86:7a:a9:ba:d9:df:4e:df:52:c6:cd:bd:f8:de:64:
76:1e:bb:b4:ce:63:e1:91:bf:24:de:09:d7:42:30:
72:fd:55:59:2a:9d:e6:d6:f7:c9:5e:50:00:db:fb:
ef:43:29:4c:06:8d:47:04:2e:0a:98:46:20:70:95:
37:f9:b1:13:68:45:77:2e:d4:d7:86:4b:bb:39:62:
0e:db:74:a1:0d:dd:a1:0d:9e:d6:55:ba:56:d6:34:
b1:e8:9c:35:5d:ba:51:cf:25:dc:be:2b:f9:55:73:
e4:84:c3:23:f8:df:5b:01:ea:1a:02:ff:24:4a:8f:
df:fc:68:69:a6:82:13:9f:ee:c1:f2:b2:ac:9e:5c:
0d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3B:60:B6:EB:5C:BA:0E:4E:24:00:C7:73:F6:E0:D3:69:36:C4:A2
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d7fdedfc-2bdc-42cd-a714-2abbc02deae9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:96:d1:a3:1b:a8:41:6d:f8:a9:03:f2:9b:f3:d0:ce:b7:5f:
9c:ac:b8:30:bb:f3:98:c0:dd:55:a9:2a:f7:69:e8:e6:40:1b:
25:8b:51:10:76:70:56:1d:01:6d:a7:73:db:a5:ed:1e:ac:03:
ce:47:9a:da:91:09:66:55:46:78:f1:d6:65:99:ec:4e:f0:38:
5a:79:a0:ea:ca:96:12:f4:7f:ac:78:ef:85:9e:0d:dd:53:55:
fd:ff:fd:4d:fe:54:62:24:16:22:1f:b6:3f:ab:2c:66:84:06:
19:2b:4b:a4:cb:7d:d5:6f:48:e0:e5:1f:ae:77:4e:96:01:bf:
41:d2:f8:1a:2f:63:59:fb:bf:ff:31:2a:47:40:a2:97:93:bc:
0c:f7:f7:c2:1a:5c:bb:ce:9d:a6:ef:b7:5a:f7:9d:a9:7f:25:
e6:bc:66:a8:cf:85:27:fc:cd:90:82:c8:e8:8d:10:dd:7d:79:
0a:b5:a7:8f:e6:05:25:9a:65:bd:7d:9e:bf:f8:69:25:5d:c8:
ed:c8:bf:e2:37:92:39:41:a4:44:3b:03:9b:fd:2d:f6:18:32:
5d:c3:1f:1d:91:cb:0b:43:4b:77:cc:72:0a:aa:c0:b4:40:73:
79:89:fc:7e:56:60:bc:e2:fc:32:c3:58:2f:04:c6:9b:99:90:
03:55:27:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 18:55:09 2026 by rpki-client