Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/620d46e8-bb13-40cd-8918-677590eaf682.roa
File: 620d46e8-bb13-40cd-8918-677590eaf682.roa (raw, json)
Hash identifier: xSt3vKm/9Ll+/CxI7k9/fBPGs5xJFC0j7IerBGNst8w=
Subject key identifier: D5:36:8D:FF:7E:03:45:F5:9B:35:20:66:82:AC:99:85:34:EB:00:E5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 02803D3AEC754E2BB6B7BAE36DE55BC9302B9690
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/620d46e8-bb13-40cd-8918-677590eaf682.roa
Signing time: Mon 26 Oct 2026 05:50:42 +0000
ROA not before: Mon 26 Oct 2026 05:50:42 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 51.226.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:80:3d:3a:ec:75:4e:2b:b6:b7:ba:e3:6d:e5:5b:c9:30:2b:96:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:42 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1f1e448542c8037178467f1114bb67eaaf2ddc2ea58915f1370e2f83338de571, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:15:17:5d:7c:46:50:4e:10:94:c4:97:6f:
26:3a:c3:ce:c1:ee:05:91:9b:11:2e:af:0c:fb:ac:
91:e0:78:d3:10:87:e6:27:54:e6:c6:c9:33:9b:8b:
1c:8a:8c:88:52:0e:fa:7b:e0:9c:a2:50:51:1a:c4:
7f:7e:0b:88:24:bc:97:81:fd:bf:16:65:ef:b6:3f:
03:c6:c9:1e:e3:1a:47:f6:d1:fd:47:f6:0d:16:ea:
00:63:15:34:34:3f:af:dd:0f:97:d9:d2:30:30:73:
6f:aa:b1:78:0c:05:0d:77:f3:6e:f5:bd:c4:74:d8:
a7:58:67:8c:29:2b:f8:d9:77:92:25:da:35:5c:86:
dd:b0:24:30:54:8f:d5:90:fe:ba:5a:2e:f7:2a:4c:
68:72:39:82:0c:05:4b:bb:86:70:4b:c0:b3:68:6c:
7a:b5:f1:d0:1a:18:ca:1e:b4:97:13:90:5d:80:31:
11:38:7b:91:2b:cd:32:1d:fa:72:4e:e5:37:d2:3b:
5a:1b:0e:55:c5:fa:91:2f:35:8f:a1:f3:ff:35:08:
03:3c:0f:7c:46:93:f1:00:ea:c3:7c:05:06:57:68:
22:81:73:42:08:66:87:2b:ce:b1:3c:e8:c0:9d:39:
d6:5f:bc:89:06:5e:39:4a:c4:5a:35:98:4a:be:91:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:36:8D:FF:7E:03:45:F5:9B:35:20:66:82:AC:99:85:34:EB:00:E5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/620d46e8-bb13-40cd-8918-677590eaf682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.226.0.0/15
Signature Algorithm: sha256WithRSAEncryption
89:ad:6b:77:44:51:7a:67:e3:7a:a7:1b:c0:a2:4a:14:e8:a4:
3a:95:7b:de:95:4c:6c:61:c2:f6:a9:cd:a9:d0:95:71:19:ff:
a7:98:c3:b6:03:ac:83:24:47:ce:c5:7e:6e:0b:b0:d9:64:ca:
94:43:2f:3a:50:22:f4:e8:6d:22:a9:03:02:60:38:63:51:6a:
f9:4c:a0:2d:6e:1e:da:95:f0:13:59:0d:43:d2:10:d0:41:40:
c6:9d:80:7c:7a:a4:e3:8f:c3:0e:a8:8b:1c:64:4d:5b:27:9d:
08:95:30:45:00:49:77:2e:81:2f:07:96:84:e4:d5:02:cd:da:
b5:f0:d9:dd:c9:97:19:cc:c1:cc:a5:73:86:31:9f:f6:a9:10:
49:dc:14:f4:d7:47:94:ff:72:b0:e1:64:70:96:41:9a:7d:17:
b9:bf:9b:b4:b8:2a:8d:10:9b:0b:b5:18:e0:96:21:fa:92:38:
6b:49:f5:95:af:fb:58:7d:ca:57:e1:0c:9f:bd:7f:b1:0a:b6:
f3:76:48:9e:36:34:61:b3:5f:d0:19:c5:f5:28:7a:46:51:1e:
8c:9b:8a:4e:16:cb:58:bf:9b:e1:1d:dd:e5:8e:40:5d:6b:1c:
87:d8:f7:62:11:a3:de:c2:df:09:dc:83:a5:8d:d9:e4:88:63:
ab:62:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:59:52 2026 by rpki-client