Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0b62efe-867d-4733-9b0c-8354a04195f8.roa
File: f0b62efe-867d-4733-9b0c-8354a04195f8.roa (raw, json)
Hash identifier: E7xKt+LQFnljyMF5T43//LCR9MHcDew/frbiQ19iOxo=
Subject key identifier: EC:52:CF:72:25:54:33:4C:93:2A:7B:C1:3F:FC:36:CA:B5:9D:B5:3F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 66B76E1F719BEEDBE3D84FAF92A4519CEBAD9065
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0b62efe-867d-4733-9b0c-8354a04195f8.roa
Signing time: Fri 07 Aug 2026 05:40:16 +0000
ROA not before: Fri 07 Aug 2026 05:40:16 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.128.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:b7:6e:1f:71:9b:ee:db:e3:d8:4f:af:92:a4:51:9c:eb:ad:90:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:40:16 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=5a203baee9599b869762c67771887fe8db8cf25e8e493ae061dcfe9d631dfccc, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:1d:26:3d:67:86:c3:9f:38:ed:64:c0:d9:
86:bb:3b:47:7d:f9:6d:de:8d:cd:3b:34:b7:c0:1d:
5f:dc:46:21:59:72:bd:b7:32:c9:da:12:1e:04:97:
d2:0b:36:5b:49:40:6b:71:1d:c5:32:3f:b1:29:b3:
30:5d:8d:15:9a:86:e7:53:03:94:e5:e8:9e:bc:4c:
b1:99:36:98:1b:ed:5c:e2:da:18:e3:ae:d8:93:6c:
00:2d:94:2d:52:e4:80:52:60:e2:b3:62:d5:12:af:
be:fc:ae:ca:aa:a3:8f:91:83:b3:79:be:a9:0a:ea:
c5:04:f9:a2:70:55:80:ab:2d:3c:2d:5d:50:a7:2e:
62:9e:37:94:90:3e:fc:50:f5:97:47:a5:8b:01:26:
9f:55:6e:10:b8:72:f0:22:7b:7b:06:96:81:6d:a6:
27:ae:ae:ba:f0:a3:66:1a:84:92:81:ae:5a:a4:37:
14:fa:94:ea:05:17:a7:e2:7c:5c:09:2d:73:12:ea:
99:eb:68:5c:21:12:a2:a1:32:71:ec:91:09:f2:a3:
1a:72:0e:1a:50:ab:a8:f4:ee:a2:36:bc:41:d4:e9:
3c:ae:bc:44:a5:a9:6a:95:ce:fe:a0:33:ee:05:c3:
4a:34:58:88:f6:e7:4c:08:0a:00:c9:2a:23:a9:a8:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:52:CF:72:25:54:33:4C:93:2A:7B:C1:3F:FC:36:CA:B5:9D:B5:3F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0b62efe-867d-4733-9b0c-8354a04195f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.128.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:cb:55:f7:06:6e:11:70:b4:32:ef:c7:68:07:80:24:29:4f:
31:23:c1:66:85:c3:c5:d0:bb:b6:03:70:f8:12:be:8a:3f:4a:
fe:a5:ff:46:08:b6:2c:75:bf:cf:cc:98:d6:36:e9:c1:e3:ec:
32:f3:40:04:a4:2c:6c:14:ba:e3:04:03:7b:b1:b0:a4:ba:ef:
36:05:bb:e7:a0:6a:a8:c7:a5:94:28:5a:9e:a8:fa:9d:7e:08:
f8:11:59:cf:e6:f1:a2:48:0d:08:b5:ff:ea:75:4b:fd:5b:6b:
b5:fb:84:fb:a5:70:99:b1:05:62:de:11:b6:e5:e3:a0:34:71:
af:0a:0f:f8:76:85:0e:ae:eb:8f:74:58:20:40:f6:74:04:36:
23:46:43:88:61:98:b5:cd:5d:00:d5:60:01:92:91:b1:83:27:
b1:c9:f3:d6:3e:ef:85:c4:a4:09:6a:c6:47:94:62:32:0d:74:
68:18:2d:7b:ba:12:d7:02:fc:c4:e3:40:d2:91:9d:8b:85:9d:
5d:3d:d7:3f:ab:3f:41:55:74:f2:a4:72:8b:73:e5:3a:0d:a4:
76:59:de:50:f8:d1:cb:88:60:a9:d7:0b:79:15:bb:b4:75:44:
f2:16:e8:cf:31:4e:75:af:92:89:95:9e:22:ba:c0:13:ca:f5:
ac:dd:1b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:15 2026 by rpki-client