Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2db57b82-f8e4-4b85-a46a-befecb4774c0.roa
File: 2db57b82-f8e4-4b85-a46a-befecb4774c0.roa (raw, json)
Hash identifier: nY5n2XSAFxhjb9cjAzQZ4tXicG+mLNaXrv6aaqafaKs=
Subject key identifier: 79:6D:29:DB:55:FC:37:DB:C7:E5:17:69:1E:13:52:CD:0F:D5:7C:5A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2C65AACC9FA7AF30C48664385BC12DA90B70E9D7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2db57b82-f8e4-4b85-a46a-befecb4774c0.roa
Signing time: Mon 26 Oct 2026 05:50:05 +0000
ROA not before: Mon 26 Oct 2026 05:50:05 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.32.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:65:aa:cc:9f:a7:af:30:c4:86:64:38:5b:c1:2d:a9:0b:70:e9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:05 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=e765b3cac66882565302c76d332e64b72022e6db9051f18ca3690945986e7356, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:28:d4:89:d4:3d:b1:33:dd:60:cc:07:e8:
1d:01:58:1f:6a:cd:90:cc:b3:9d:82:7a:8b:16:cf:
50:ac:75:06:ca:cf:7b:26:fb:79:ff:28:01:83:ae:
f4:fd:97:64:97:44:0b:d3:eb:e9:8b:b1:7e:a1:b6:
19:8a:9c:3d:d9:96:1d:62:b1:13:01:30:b9:90:ee:
98:8a:01:63:48:1d:f3:70:94:28:bb:45:78:fe:4c:
46:0b:38:dc:df:3c:2e:3d:35:0e:d3:58:2b:88:e7:
92:6e:4c:e6:96:d6:ad:85:10:96:2e:0f:ca:23:99:
b8:10:a4:a5:ce:ec:ae:6a:8e:12:de:5e:15:0e:ae:
f4:1d:15:e1:dc:77:81:fa:02:b3:9d:a7:3c:3d:16:
e2:99:ab:93:86:9d:54:67:4d:25:ce:b5:cd:5f:3d:
6a:3c:a5:68:00:4c:2b:d8:66:91:98:ee:8f:dc:53:
d2:74:ce:c9:4f:f4:32:f1:02:ad:b8:2d:5a:bb:11:
a5:5e:2b:83:9a:06:bd:78:f9:40:b0:d2:ed:07:a1:
d3:bf:35:c8:b0:e6:7d:c4:a2:5e:3f:07:9a:4b:fe:
9b:54:13:ec:07:02:b9:ef:cc:ba:96:71:91:fd:b5:
89:57:d1:db:b5:ea:5f:1c:ad:11:8f:45:1e:76:95:
6d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6D:29:DB:55:FC:37:DB:C7:E5:17:69:1E:13:52:CD:0F:D5:7C:5A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2db57b82-f8e4-4b85-a46a-befecb4774c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:73:d4:5d:6d:f6:d9:f4:1f:3c:4e:17:5b:7c:f7:16:3c:cc:
9c:0d:97:e9:9c:40:03:97:df:24:78:cc:66:bc:06:7b:8c:28:
15:a3:c7:b8:56:c1:60:3f:1e:8a:b3:50:72:54:9e:70:19:ea:
dc:00:ba:1f:43:05:fa:69:aa:3e:a7:71:77:a4:53:c5:0b:ac:
f3:45:77:1b:a6:09:8f:dd:be:ce:31:e0:e7:f9:c6:9c:92:49:
9b:c2:15:49:0c:a0:a2:7a:79:4e:15:bd:f4:54:a5:2b:2c:49:
e1:a3:bd:cf:13:af:f7:dc:b6:c4:bb:48:17:2a:3c:fe:b2:86:
b3:26:1a:03:2f:91:95:78:65:c5:08:82:f2:d3:b4:e7:55:03:
7b:ce:57:1b:5a:09:f8:84:50:82:e9:66:65:72:b4:8d:41:24:
4e:af:8f:07:64:ef:2c:ac:ef:f7:0a:17:b4:7c:d8:83:a8:3b:
dc:b9:0d:fa:90:83:63:be:8f:50:d5:9a:6e:b1:62:29:88:1c:
20:a0:01:19:99:d4:90:d2:36:d9:4d:82:57:71:fb:73:98:2e:
ad:59:45:75:d6:83:43:2e:99:46:c3:38:b0:ee:b4:7d:17:9d:
30:92:8a:e2:22:9f:37:d1:4d:ed:2b:93:a1:90:15:b9:b1:e7:
c6:31:a9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:11:52 2026 by rpki-client