Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0a36b38b-9bd1-4014-823d-9204a303350e.roa
File: 0a36b38b-9bd1-4014-823d-9204a303350e.roa (raw, json)
Hash identifier: jS0xqvPS9sB0elz6WDlo21YED6qPchzOOBD6MXJgPgA=
Subject key identifier: 6A:E5:FA:2A:D8:74:64:11:77:1E:D2:4B:EF:75:80:1D:27:57:CD:1A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 156040BCBF9E6C63A55EBF7162AD819F54A2C58B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0a36b38b-9bd1-4014-823d-9204a303350e.roa
Signing time: Thu 16 Jul 2026 00:40:08 +0000
ROA not before: Thu 16 Jul 2026 00:40:08 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.21.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:60:40:bc:bf:9e:6c:63:a5:5e:bf:71:62:ad:81:9f:54:a2:c5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:08 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=ae20ea397ba1f2d6a8bcc5b2ce2f2ef2718bdf256a033bca8677893c829eecc5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:ee:b6:23:ae:eb:cd:b0:09:c4:df:ce:a1:
84:86:57:2d:4f:0d:62:e0:5f:b3:b1:75:24:1b:19:
e2:a7:8e:08:da:9e:73:c3:23:a7:b4:92:19:2d:8e:
82:cd:0e:c3:07:04:22:d2:14:98:38:5d:4f:ea:01:
23:9e:a7:09:7c:1d:99:6d:c5:e7:3f:7f:6b:7f:e4:
19:00:b5:64:98:49:8d:a5:06:7a:d1:c3:c7:8e:38:
53:b8:03:b1:4f:8e:75:9b:ea:9b:03:80:10:e5:1b:
68:83:e3:36:d8:52:8e:38:67:f7:ee:b3:0b:90:f8:
fa:98:76:36:53:75:44:41:aa:9b:47:11:39:cd:98:
26:e9:21:a3:ca:49:ff:ce:4a:94:43:99:cc:18:08:
1e:75:62:78:57:ff:59:55:28:8d:b5:b2:41:ff:ff:
85:89:61:f5:bd:ac:56:e5:e9:80:b5:09:6a:9d:de:
73:98:58:30:7f:db:ee:83:8a:8e:ad:84:9c:b1:b5:
15:e7:6d:c8:0a:b4:76:75:a9:19:a0:bb:a0:fc:bf:
b4:41:4c:f9:0c:33:d3:cf:94:b6:0b:0a:c4:b5:89:
e1:20:29:f5:e7:62:52:18:08:c5:62:80:01:8f:c9:
71:67:d5:d4:c0:1f:ed:04:3d:b9:86:81:71:99:7f:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E5:FA:2A:D8:74:64:11:77:1E:D2:4B:EF:75:80:1D:27:57:CD:1A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0a36b38b-9bd1-4014-823d-9204a303350e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.21.183.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8b:ee:7b:74:ea:75:1f:fd:4b:66:4c:28:5c:36:3e:6a:ed:
91:a1:9b:2b:8f:06:aa:ce:83:9f:85:0b:a6:ba:33:60:92:26:
1d:2f:54:0c:ba:8b:83:e1:1b:03:1c:a1:c5:8a:8a:ef:7a:e7:
13:ed:bb:89:66:50:ea:7b:87:d0:7f:01:46:b1:21:e5:e5:f6:
73:b8:e9:bf:f5:85:41:9b:08:20:a4:0b:c5:26:2f:4e:22:2e:
f4:cc:42:4a:f6:bd:97:08:4f:f6:d7:ee:ff:9c:c5:c7:ce:72:
b1:03:61:99:d6:08:36:36:22:b7:5a:86:8e:25:b9:31:38:0e:
f6:e3:69:a6:3f:15:b3:29:d6:31:d2:0c:f5:81:d0:fd:03:a5:
9d:d2:66:d1:c5:83:2d:18:59:42:ce:01:b3:28:13:07:94:e3:
3c:9e:81:35:a3:03:9e:87:6c:d1:95:5a:bc:d6:91:86:16:cb:
b7:91:5f:c6:fe:57:d0:6d:aa:14:62:46:8f:7f:4f:f9:7b:77:
2d:54:56:19:13:b0:77:73:b8:ff:83:5a:85:5f:a0:12:d6:d1:
8c:d2:8d:1c:86:b8:d2:96:fd:90:15:7e:2a:d2:f3:17:20:11:
87:03:6f:3a:34:c1:e1:eb:6d:cd:7b:79:31:89:f4:4c:aa:f1:
ce:78:19:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:26:14 2026 by rpki-client