Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
File: 226b8c83-9647-47e2-847b-1787f3d54040.roa (raw, json)
Hash identifier: TfGVqfCfH9tsAwPDifkaUoMEcZbjNPzhtlt004auzBo=
Subject key identifier: 43:73:78:A0:8C:9E:9B:31:EF:2C:EE:64:6F:10:82:8A:C3:0B:CA:76
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3BCF726FBCBFEEE98551E39F363A90DF7087DC22
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
Signing time: Thu 16 Jul 2026 00:40:06 +0000
ROA not before: Thu 16 Jul 2026 00:40:06 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.94.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:cf:72:6f:bc:bf:ee:e9:85:51:e3:9f:36:3a:90:df:70:87:dc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:06 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=6f8b396c03751e2bc7dfd44d3ed1315a3486fa44416894f13f0ec32b832bde2e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:53:6d:58:47:b0:84:21:8b:f9:5c:2b:db:b7:
2b:ff:43:a3:be:01:07:4f:43:db:ae:09:4f:b0:0e:
3e:84:a3:24:0f:43:a6:56:36:40:ae:0b:72:e5:03:
3c:56:02:be:09:e4:c2:ec:bf:60:7e:0d:5e:f3:44:
f3:10:76:56:fa:52:f8:ef:1b:15:81:d3:17:78:59:
a5:16:63:52:48:3c:f1:25:27:c6:7a:13:f1:7a:a6:
7a:72:80:e0:08:dc:d0:41:22:bb:72:af:3f:c6:99:
be:5f:08:ad:72:f5:cc:2d:38:a2:5d:0e:e0:cd:61:
93:05:08:9b:fa:d6:3a:4d:0c:55:e9:58:10:ca:55:
ea:cd:2a:28:b0:cc:58:59:65:34:40:c8:6e:7c:3b:
ae:62:43:66:59:4c:4f:6c:32:e1:96:41:1c:43:97:
10:b2:d0:0a:4b:24:63:38:64:07:4e:c2:51:36:72:
9b:44:8c:eb:90:3c:ff:12:2a:26:47:19:15:f3:b6:
09:06:d9:8a:3e:ac:de:d0:89:c8:2c:0a:b7:39:a6:
9e:b0:f5:7f:4c:54:ea:80:b9:a8:0d:e2:36:a9:31:
fb:98:d2:69:e1:64:8d:db:bd:29:7b:a3:f0:30:44:
be:5a:cb:48:0d:3a:bf:18:73:6c:02:cc:6f:31:9c:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:73:78:A0:8C:9E:9B:31:EF:2C:EE:64:6F:10:82:8A:C3:0B:CA:76
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.94.0.0/15
Signature Algorithm: sha256WithRSAEncryption
40:f3:5b:2f:f1:dc:dd:e7:65:e5:69:bf:f6:e5:53:02:c7:96:
ef:8f:20:44:26:af:40:1a:55:ad:12:89:e9:48:53:17:4a:6a:
9f:99:34:4e:fc:56:d2:76:6d:e4:40:bb:ff:71:c9:f1:6a:c8:
68:15:c7:70:7c:9e:7f:5a:01:e4:19:97:99:ea:b4:0b:07:37:
04:d8:21:51:f4:4d:f4:8b:7d:0b:df:35:46:26:58:1e:be:81:
97:08:fc:66:86:63:c2:9e:bf:a6:0d:26:92:8f:05:5a:c8:f9:
90:c0:a5:37:2f:ad:c8:24:e2:f4:cc:90:4f:6c:08:60:72:39:
29:8d:ca:20:bd:2c:c6:e2:ce:60:c2:8c:c9:60:67:9a:76:23:
e8:b3:51:37:42:3e:a0:43:f4:8d:ba:26:a2:18:48:9e:46:7d:
9d:82:52:56:03:87:e8:eb:58:45:7b:06:5a:99:d8:6a:c2:99:
1b:93:d7:1f:94:b6:5a:21:16:40:d2:d5:d9:5b:da:95:9c:ff:
88:dc:82:b8:6f:e8:09:4b:94:05:7e:4b:53:6d:49:cc:73:fe:
8f:e8:88:c8:7a:70:c7:20:ca:6e:b3:30:26:e1:d4:22:05:2f:
15:b2:bc:99:31:4c:f4:2c:4c:bc:34:a5:3b:5f:51:88:91:ec:
01:60:57:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:41:14 2026 by rpki-client