Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/24601d85-ac6e-46b6-a0d2-d35342ccc951.roa
File: 24601d85-ac6e-46b6-a0d2-d35342ccc951.roa (raw, json)
Hash identifier: kfrys/+PHrFRSnXZlxUEEJZwLEs9ub1Y/FNkJHdJ3r4=
Subject key identifier: C4:72:F2:60:43:A6:62:99:C0:8D:0B:10:B9:7A:8D:35:79:A8:63:C1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 402C050286675A2EA0F7C3D6C30FD5BAF7D0E7B7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/24601d85-ac6e-46b6-a0d2-d35342ccc951.roa
Signing time: Thu 16 Jul 2026 00:40:07 +0000
ROA not before: Thu 16 Jul 2026 00:40:07 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.93.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:2c:05:02:86:67:5a:2e:a0:f7:c3:d6:c3:0f:d5:ba:f7:d0:e7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:07 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=af371f293f376a50890b247444596a1f18e522996488c7913ed28a719eb7a5ab, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:12:af:29:40:12:11:2f:39:81:78:24:e0:
c0:df:12:75:d7:cb:09:15:55:bd:40:2b:01:b3:d7:
47:fa:a1:a1:04:1a:65:1b:f0:cf:15:92:03:0b:f5:
38:2b:07:35:bf:d4:b3:eb:ec:12:b5:fb:54:3f:41:
7e:67:11:fa:36:8c:97:7d:90:00:dc:56:02:f2:09:
82:3c:79:52:a8:2a:46:b1:7e:bf:6a:8c:d4:66:c8:
fc:de:c6:53:45:c5:1b:d3:dc:e8:ae:4a:d5:5d:5f:
8c:b2:9f:95:7c:38:33:6d:60:d1:80:8c:cd:38:e4:
e2:36:bd:96:e6:6a:6b:1d:7a:3f:10:4b:43:c3:91:
2c:ac:ef:c7:40:b2:38:1d:86:3c:20:4a:28:0b:2d:
7b:a8:0e:ed:27:b4:48:31:fa:7e:30:0c:8f:22:40:
e7:e9:0a:8b:3e:64:8c:40:ed:0e:55:23:ff:cc:df:
60:92:e7:2a:11:7c:d5:45:21:3f:33:43:c3:98:d0:
27:fb:45:6f:1c:38:93:ba:86:e8:96:cd:dc:70:c0:
86:61:27:e7:84:e8:71:f2:21:83:7a:e3:a2:7d:1a:
99:14:2f:38:0b:b0:b2:3d:9a:c3:97:bc:d0:28:aa:
98:b3:70:b8:7c:dd:39:d8:bf:9d:71:d6:68:04:23:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:72:F2:60:43:A6:62:99:C0:8D:0B:10:B9:7A:8D:35:79:A8:63:C1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/24601d85-ac6e-46b6-a0d2-d35342ccc951.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bc:a9:e6:ac:68:bb:43:ef:b5:04:4f:b6:73:c4:8c:9e:3e:0c:
fe:6d:ac:1b:6e:0b:05:ab:09:aa:39:9e:6d:ff:36:9f:2c:9f:
51:45:f6:35:1e:f2:ba:e3:13:69:39:37:23:ce:5f:b2:27:7e:
40:18:1e:9c:a1:af:45:91:d5:4a:ff:7d:17:89:c9:51:e0:38:
85:95:77:00:a9:01:b0:8e:8f:8e:33:28:94:02:e2:8d:e6:4b:
f9:f6:61:2d:70:39:db:a2:d5:8f:a4:55:17:00:e2:e4:41:15:
e4:3c:b4:36:eb:e0:cb:44:52:9c:a5:31:90:c6:a1:0c:45:df:
68:da:87:a8:af:35:a6:23:43:81:2a:72:25:5b:73:44:c2:16:
6b:10:3a:18:9c:d2:fd:a9:f9:15:f6:31:76:0b:98:7d:c4:4a:
a4:24:74:7c:01:fb:8b:8a:72:d8:b3:32:5c:2f:fd:97:7f:9f:
d2:99:5d:47:f8:4f:7f:2e:de:79:60:43:fb:fe:3e:3d:be:51:
f1:ea:4a:26:59:f6:03:2b:89:e7:64:a0:7b:96:35:05:92:ac:
ea:07:0b:68:8e:63:09:f5:3f:6a:6c:93:b6:2a:d3:9f:85:13:
40:d5:5c:66:0f:6d:04:f7:1d:f8:18:e9:2f:91:5b:b9:12:4d:
f6:c3:4f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:01 2026 by rpki-client