Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/54f9687d-a273-4060-846b-ce640aca7c79.roa
File: 54f9687d-a273-4060-846b-ce640aca7c79.roa (raw, json)
Hash identifier: k9bfpH49v/FDJHm5pt/Q2tHngNWZrEo9womi8D1/HgY=
Subject key identifier: C9:51:6C:FB:CF:39:5C:C2:02:7D:A7:EB:06:0D:08:FD:34:DE:B0:BE
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0E22C1948B2528563958FE59C85150D7B2DF6519
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/54f9687d-a273-4060-846b-ce640aca7c79.roa
Signing time: Thu 16 Jul 2026 00:40:32 +0000
ROA not before: Thu 16 Jul 2026 00:40:32 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.44.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:22:c1:94:8b:25:28:56:39:58:fe:59:c8:51:50:d7:b2:df:65:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:32 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=d8c862a588602cb0cb85dece47be4eccbf9b467b18c2a5ae630c24f5cdfc4eb9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:ff:f0:7d:c6:03:fd:12:f4:0c:b4:03:91:
4d:2c:d8:f3:fd:a9:32:c9:54:d4:ae:66:84:98:80:
d8:db:70:74:df:43:15:22:c7:32:cf:f7:4e:d7:2e:
7d:8f:e0:3d:4a:3a:83:35:04:d2:50:74:7a:35:7f:
41:76:40:ce:e0:66:b8:fa:35:00:7e:7c:6d:08:33:
e6:19:75:f4:de:21:58:b6:84:3d:a9:aa:71:96:a3:
7c:69:d2:24:30:24:73:a6:db:95:c6:1b:64:2d:67:
2a:e7:52:fc:e7:b6:fb:b2:d4:84:b5:34:a5:18:1e:
85:5f:de:e8:bb:da:69:41:73:9b:6e:5d:b8:d2:5b:
8b:49:46:67:b3:ea:bc:26:00:9d:cb:5a:74:84:25:
ec:5d:99:10:8f:0c:68:c5:8b:2f:aa:18:4d:91:97:
b4:1d:96:a9:a0:4a:56:76:6f:4a:40:fd:29:16:8b:
11:cf:b8:35:4e:40:c4:7b:89:4f:93:b2:67:90:a1:
a9:e8:1f:15:20:0a:e8:39:00:13:67:38:59:5a:99:
06:cf:9c:ee:8f:d6:63:9d:96:dd:3f:f2:90:19:b4:
c4:f7:d6:64:c2:85:a4:de:47:58:6f:64:e9:b3:96:
20:a4:25:cb:c4:de:bc:dd:2f:b8:bc:4f:54:db:76:
ba:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:51:6C:FB:CF:39:5C:C2:02:7D:A7:EB:06:0D:08:FD:34:DE:B0:BE
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/54f9687d-a273-4060-846b-ce640aca7c79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.44.0.0/14
Signature Algorithm: sha256WithRSAEncryption
ae:3f:6e:6d:c1:7f:21:23:98:5e:6f:c8:fe:16:58:22:66:62:
60:a5:76:04:30:07:cb:3e:4a:bd:27:95:22:10:d2:17:cd:87:
99:e3:d1:1f:17:89:80:eb:5b:b0:68:0b:40:a1:63:3a:ec:32:
8f:3d:1f:b1:26:8f:31:3e:23:33:04:81:f5:45:1d:d7:c3:a2:
39:fe:04:ef:5b:e7:6d:e9:ea:a3:06:a6:fd:bb:ea:ca:4b:2d:
83:0f:7c:c7:7a:70:3b:75:c0:a0:4b:56:88:f5:3f:66:a5:fe:
33:b6:81:31:3b:81:f5:bc:49:67:f8:da:60:9d:84:55:d2:c6:
bc:de:a0:ba:0f:94:76:c0:99:9e:77:01:d7:7f:be:f6:4a:1a:
16:24:87:8c:1f:79:73:a1:43:72:e8:8d:a8:a6:0c:72:69:36:
1a:d3:9b:79:85:5f:7b:5d:39:4b:07:b3:5a:84:1f:6e:71:f6:
10:d5:17:a3:fe:b5:17:d4:8f:40:cf:cf:75:59:c8:e8:f1:6a:
9a:56:68:ca:fd:a2:d9:9d:0d:26:b0:15:6a:9c:48:81:e3:dd:
b5:a6:f8:45:ae:4f:00:03:22:50:59:8c:a9:1d:a0:4b:1b:ef:
59:f9:68:6d:3d:6e:28:7b:b5:0e:d0:ca:d3:31:90:f0:5f:6c:
f3:81:4f:c9
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUDiLBlIslKFY5WP5ZyFFQ17LfZRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA3MTYwMDQwMzJaFw0yNjEwMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ4Yzg2MmE1ODg2MDJjYjBjYjg1ZGVjZTQ3YmU0ZWNjYmY5YjQ2N2IxOGMy
YTVhZTYzMGMyNGY1Y2RmYzRlYjkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM97//B9xgP9EvQMtAORTSzY8/2pMslU1K5mhJiA2NtwdN9DFSLHMs/3Ttcu
fY/gPUo6gzUE0lB0ejV/QXZAzuBmuPo1AH58bQgz5hl19N4hWLaEPamqcZajfGnS
JDAkc6bblcYbZC1nKudS/Oe2+7LUhLU0pRgehV/e6LvaaUFzm25duNJbi0lGZ7Pq
vCYAnctadIQl7F2ZEI8MaMWLL6oYTZGXtB2WqaBKVnZvSkD9KRaLEc+4NU5AxHuJ
T5OyZ5ChqegfFSAK6DkAE2c4WVqZBs+c7o/WY52W3T/ykBm0xPfWZMKFpN5HWG9k
6bOWIKQly8TevN0vuLxPVNt2umECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTJUWz7
zzlcwgJ9p+sGDQj9NN6wvjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NTRmOTY4N2QtYTI3My00MDYwLTg0NmItY2U2NDBhY2E3Yzc5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAjMsMA0G
CSqGSIb3DQEBCwUAA4IBAQCuP25twX8hI5heb8j+FlgiZmJgpXYEMAfLPkq9J5Ui
ENIXzYeZ49EfF4mA61uwaAtAoWM67DKPPR+xJo8xPiMzBIH1RR3Xw6I5/gTvW+dt
6eqjBqb9u+rKSy2DD3zHenA7dcCgS1aI9T9mpf4ztoExO4H1vEln+NpgnYRV0sa8
3qC6D5R2wJmedwHXf772ShoWJIeMH3lzoUNy6I2opgxyaTYa05t5hV97XTlLB7Na
hB9ucfYQ1Rej/rUX1I9Az891Wcjo8WqaVmjK/aLZnQ0msBVqnEiB4921pvhFrk8A
AyJQWYypHaBLG+9Z+WhtPW4oe7UO0MrTMZDwX2zzgU/J
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:41:04 2026 by rpki-client