Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44bb00cc-3dee-4cf6-8de9-2febfa0f0f6d.roa
File: 44bb00cc-3dee-4cf6-8de9-2febfa0f0f6d.roa (raw, json)
Hash identifier: 3h3D1hoqltxO3jSRI9ChN48CwX6aGFn1dF0/HUIZ8UA=
Subject key identifier: 72:11:36:48:1B:DD:27:C9:1C:D7:74:52:D6:10:86:69:CA:6B:78:D6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1A1EC169CFFB5D483D5CB848F1138BF88CEED2E7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44bb00cc-3dee-4cf6-8de9-2febfa0f0f6d.roa
Signing time: Thu 23 Jul 2026 15:30:18 +0000
ROA not before: Thu 23 Jul 2026 15:30:18 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.244.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:1e:c1:69:cf:fb:5d:48:3d:5c:b8:48:f1:13:8b:f8:8c:ee:d2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:18 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=2d79d77f982362684e2615f060e61d24a94188ab3fc0f7ed77ba36497d6e2c07, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:57:7f:c2:2e:b6:95:de:1e:03:01:48:ac:
1f:c4:b3:00:bb:37:b5:5e:c8:dd:8e:12:de:d8:2f:
f5:2e:9b:2a:ff:2c:aa:98:1c:ff:64:a2:07:38:3e:
57:22:3c:17:81:0e:1a:33:c5:8c:00:74:7d:fd:a8:
ee:ee:89:f3:17:f9:c6:d0:95:6e:1c:ad:48:1f:b0:
04:3d:81:87:70:6d:6a:a3:29:86:35:f9:30:22:e4:
e3:19:eb:b8:e1:1f:1a:0b:55:f0:a0:45:d1:72:3d:
cf:13:31:86:84:0c:92:e2:0b:9e:ad:c4:ee:41:98:
ae:b7:d1:28:20:6c:d5:24:9d:a1:6c:12:80:b9:77:
1a:d5:1f:12:35:f3:8c:57:f3:9e:a7:c1:cb:3b:d6:
1e:70:12:91:f0:36:4b:ec:07:76:ac:e3:7f:3b:c6:
e5:01:2e:13:c0:c7:1e:35:ff:2d:bb:36:48:81:84:
9b:90:17:d7:eb:c1:97:1f:14:61:10:c1:f6:63:ad:
46:51:65:1a:36:e9:88:9b:30:75:f5:25:cc:94:0a:
93:68:64:32:4a:c9:0c:e5:c8:2f:ce:e0:63:31:98:
e9:63:14:d8:3c:8f:d2:cd:93:a9:e3:a7:fa:21:38:
33:90:ca:3c:4d:b5:8e:a0:46:7e:60:64:72:b4:c0:
86:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:11:36:48:1B:DD:27:C9:1C:D7:74:52:D6:10:86:69:CA:6B:78:D6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44bb00cc-3dee-4cf6-8de9-2febfa0f0f6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.244.0.0/15
Signature Algorithm: sha256WithRSAEncryption
8c:f3:e4:d2:91:d7:c4:91:2c:ac:3e:14:91:f9:d7:d4:12:5f:
58:54:7b:c8:bb:26:0f:25:e3:8f:eb:01:fd:12:6c:a8:ab:de:
e7:66:99:97:23:b1:f6:45:b2:6d:bf:e9:c5:94:be:f9:f7:8a:
3d:c6:e9:e6:e2:ac:8c:57:1b:20:f5:d1:5b:e6:6f:a5:75:5a:
30:2d:cb:5e:a1:ce:24:13:c9:52:47:9c:82:18:ef:e6:5d:8b:
a2:54:50:77:0b:e3:e8:c6:54:2c:70:d9:df:80:35:2d:cc:d9:
03:80:fd:58:2f:29:0f:bd:bf:8c:5f:05:05:75:d8:bb:eb:64:
dc:32:a8:1a:a9:55:48:c5:76:20:39:01:15:a1:0a:aa:8b:31:
14:45:26:81:ac:20:98:eb:64:1e:59:25:47:c5:05:fb:fc:b0:
de:eb:ed:b0:c3:5e:9f:61:84:12:db:81:50:f0:ff:96:ef:6e:
f8:a9:aa:01:90:34:86:cb:73:74:9a:17:48:36:c3:23:19:4e:
00:0b:3b:62:ae:e7:e8:fd:cb:89:56:65:7b:ab:e6:cf:f8:5b:
e8:46:32:a1:b4:7b:b7:e3:5a:c0:34:49:c9:3d:6f:d8:f7:87:
1c:ff:70:8c:f1:89:f8:6b:5f:a9:00:92:ae:2a:18:42:5f:78:
63:e3:11:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:33:52 2026 by rpki-client