Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/faa5ec1e-61dd-4ddb-a08f-0b29cab481e1.roa
File: faa5ec1e-61dd-4ddb-a08f-0b29cab481e1.roa (raw, json)
Hash identifier: 1HR1+ModP2fcWm4ZSzE3NpnJicQNtaC9Mo1xLj+4NmY=
Subject key identifier: 99:16:BD:AE:2A:4E:00:11:6D:EB:43:0B:AA:05:83:96:4B:96:06:4D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2FDA2B60A588D6D005617444F3A3A92930DDD256
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/faa5ec1e-61dd-4ddb-a08f-0b29cab481e1.roa
Signing time: Sun 04 Oct 2026 00:40:06 +0000
ROA not before: Sun 04 Oct 2026 00:40:06 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:da:2b:60:a5:88:d6:d0:05:61:74:44:f3:a3:a9:29:30:dd:d2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:06 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=8c20e9dc61e5da95633e3f14c5607d2b94428fb3438db84027ed9ce91746e6e5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8c:a2:0a:2b:8a:e3:b7:7a:c6:ea:cb:a3:3e:
45:26:fd:d1:c1:04:3e:aa:c2:f1:e5:c5:d2:5a:98:
b9:e0:22:5f:44:53:d3:2a:9c:7d:81:65:c3:2e:7e:
fa:41:c3:fc:90:89:4c:7f:43:b0:51:46:c4:da:7b:
51:07:f0:5e:80:f7:80:dc:4d:47:a8:52:a3:d8:52:
1c:82:f0:dd:a9:ff:be:21:ff:8c:c1:b6:b6:ee:79:
ae:b2:b3:84:ed:14:e1:94:12:d7:fa:58:3f:f6:e7:
27:d2:8b:62:90:c8:0c:05:e2:33:78:21:1d:41:17:
24:8d:bb:8b:7f:92:2e:cc:3e:a5:1e:3e:89:67:52:
f2:87:dd:1b:49:27:b4:44:85:09:7c:52:67:d5:17:
f0:99:8a:1e:5e:08:a7:41:0d:bb:6d:c3:ed:cf:b6:
c1:d6:ec:77:61:62:7c:31:6b:68:3a:75:d0:d4:f2:
6f:ce:44:f7:88:05:74:2f:76:e1:e7:02:f1:23:81:
1d:6b:00:e0:12:91:86:b1:a0:13:ba:a9:cd:0c:6a:
35:ab:d8:7e:82:a6:6d:a0:7d:16:eb:2e:b8:bc:73:
61:31:64:b6:15:d7:56:9e:ff:31:7a:98:a5:65:1d:
00:ab:d2:5f:4e:7b:67:34:de:ea:c7:4f:ce:ec:c8:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:16:BD:AE:2A:4E:00:11:6D:EB:43:0B:AA:05:83:96:4B:96:06:4D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/faa5ec1e-61dd-4ddb-a08f-0b29cab481e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.240.0/22
Signature Algorithm: sha256WithRSAEncryption
74:47:29:c5:f9:3a:8e:10:51:66:4a:2d:28:47:df:b2:bd:11:
d3:31:13:5f:16:85:36:69:63:ac:3e:6c:7a:aa:23:59:24:94:
a3:92:61:0f:ae:8d:10:0b:66:bc:af:5a:26:a6:49:da:a0:8f:
db:fb:c2:bd:32:16:6b:8c:a8:f7:60:9f:55:fa:25:96:e4:c0:
af:d1:cd:88:e0:0d:b7:57:e4:b1:33:f4:6a:05:a4:45:2c:10:
0b:41:08:9f:b0:24:6b:35:c0:5b:49:47:60:55:09:31:8e:bb:
b7:83:14:ed:46:43:60:c1:3c:4a:6f:51:43:32:81:7a:d3:0d:
ac:42:96:6b:6b:be:64:13:5e:20:6d:34:69:dc:e6:ce:cc:f6:
3d:ce:14:51:e9:c0:91:14:33:95:df:18:1f:a4:33:80:98:38:
e9:9d:e5:4f:cd:ad:c3:04:89:03:aa:2a:d4:0c:e1:78:eb:92:
95:b3:01:08:ed:e0:db:46:ce:e8:fd:9a:55:cd:6a:29:2d:39:
75:d0:f3:f0:84:d3:4b:22:59:30:1e:43:09:b8:04:38:81:de:
3b:f5:7c:99:d3:ba:7a:ac:24:d8:e5:1f:c3:53:4b:14:df:b1:
02:5f:fa:c3:a8:76:99:4b:2e:b2:59:64:0d:6c:1a:96:73:30:
4f:6f:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:34:31 2026 by rpki-client