Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2229ee03-08c0-4c87-acab-bbf5abf49264.roa
File: 2229ee03-08c0-4c87-acab-bbf5abf49264.roa (raw, json)
Hash identifier: gR27bgP56JTm5aDGrRmPwzYB6so6IS0oE+kaXMZCtHo=
Subject key identifier: 5D:AF:ED:15:BD:53:90:29:E0:F6:11:93:F8:4F:B3:CF:16:7D:F5:83
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 314900DBD06625627D5818A195B72EEEAAF75822
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2229ee03-08c0-4c87-acab-bbf5abf49264.roa
Signing time: Thu 16 Jul 2026 00:40:29 +0000
ROA not before: Thu 16 Jul 2026 00:40:29 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.86.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:49:00:db:d0:66:25:62:7d:58:18:a1:95:b7:2e:ee:aa:f7:58:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:29 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=555b8f2a69414406cc79f338ac56a3a2ed0e0ea9aee72f7664649955caa256c2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:10:52:70:75:09:0e:07:e0:86:01:79:5c:
0d:61:2d:08:a4:5a:38:e1:55:a0:6c:c7:38:dc:e0:
d2:ad:ea:a7:77:d6:03:8a:95:27:6c:6c:93:d2:42:
6a:4d:bd:19:03:21:6b:bd:6a:26:32:70:be:20:ea:
96:30:02:11:98:51:a6:8c:7c:2e:1c:b5:43:41:d9:
77:8f:f0:3b:fd:2d:f1:af:7b:0c:7c:c6:2a:8f:f6:
3b:cc:81:93:85:98:45:71:6d:cb:9e:f4:d4:9d:5a:
fb:6d:86:02:0a:1e:bf:c9:e9:4a:97:70:91:76:27:
bb:8d:06:c4:e2:da:d5:9a:57:00:c9:87:1d:c8:88:
7a:6c:a0:2d:41:28:43:f8:27:f6:51:b6:0c:f4:c9:
23:0a:91:7b:00:15:6a:7a:fb:57:f0:84:8d:52:5c:
2c:0a:2d:be:cd:90:1b:56:3c:6c:fa:2c:2f:62:b5:
27:d0:76:07:ac:a4:c8:7a:fe:73:1b:6d:65:c2:74:
0f:0d:0b:d0:60:1d:df:d8:60:ec:78:6f:84:65:64:
1b:5e:2e:f6:04:b5:8a:a4:76:f7:ce:32:5c:68:a0:
de:87:fd:94:b2:46:6b:a4:59:ce:c7:1e:59:36:e6:
6f:5e:bc:2d:96:ad:c1:86:a4:c4:19:bd:cd:38:a7:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AF:ED:15:BD:53:90:29:E0:F6:11:93:F8:4F:B3:CF:16:7D:F5:83
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2229ee03-08c0-4c87-acab-bbf5abf49264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.86.0.0/15
Signature Algorithm: sha256WithRSAEncryption
5a:82:68:23:de:01:38:8a:79:d7:81:ba:7b:93:08:4c:e9:90:
e1:68:02:90:e9:58:09:4d:15:da:81:5d:21:9d:38:64:28:b1:
38:de:27:88:44:17:86:ab:9d:6b:96:fb:c4:12:7f:3a:74:c5:
e3:aa:5c:77:45:42:0f:34:69:6c:6a:6b:dc:7d:b3:7b:ac:68:
0b:6a:5d:90:a1:68:8c:be:82:3f:77:ce:00:d9:ba:8c:bf:4b:
dc:6b:3d:e0:8b:f2:9c:86:5b:47:b4:8e:40:25:29:e7:c2:c3:
df:50:37:b0:fd:38:6a:66:07:8a:6a:42:42:1f:f1:c3:8c:a3:
f5:79:da:e0:92:54:18:36:ed:85:bd:2c:7d:d5:16:64:bd:a3:
d2:d4:e6:e7:20:36:d5:77:59:34:4e:38:28:4a:51:41:50:5a:
18:f5:94:db:95:42:92:ca:5f:2a:0b:cb:e5:91:8d:a4:53:37:
26:69:65:22:ce:55:f8:06:da:57:13:a1:9b:61:4f:6c:db:aa:
b5:b6:5b:3a:b6:8d:20:47:88:50:89:30:6b:57:ae:c9:bc:b1:
3e:4a:20:7b:6b:e3:10:c1:0b:a6:17:54:48:ed:70:cb:86:a4:
e8:75:4d:d1:d3:a1:e1:af:4f:d8:f5:8f:7e:b0:46:82:ac:d9:
41:89:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:31:44 2026 by rpki-client