Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/675bb2b8-b9b8-45ee-ad4d-7af481ebf99b.roa
File: 675bb2b8-b9b8-45ee-ad4d-7af481ebf99b.roa (raw, json)
Hash identifier: xkP9mLEeNJy03CP9QxfBE6OJnSzCeRVQ0eFXZoaEefA=
Subject key identifier: 74:D7:C7:8E:9F:5E:B2:B3:C3:82:12:14:C1:00:8E:F2:82:FE:A9:58
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 406BD1CE8112AA412C708ABD2E0BDA14112BBAB0
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/675bb2b8-b9b8-45ee-ad4d-7af481ebf99b.roa
Signing time: Tue 27 Oct 2026 01:02:15 +0000
ROA not before: Tue 27 Oct 2026 01:02:15 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 51.200.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:6b:d1:ce:81:12:aa:41:2c:70:8a:bd:2e:0b:da:14:11:2b:ba:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 27 01:02:15 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=444382b4ff6ecc95af3d13c460325d3777a8de0bbe25795e9009e2769fa82fad, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:2a:c9:e9:b5:bc:c2:df:11:53:1e:b2:6a:
f0:62:3a:37:fb:5e:54:c2:95:3c:3d:e0:fe:72:ab:
f1:2e:85:6a:f2:e5:a9:0b:97:cf:1d:bb:3f:c1:30:
d2:6f:e1:b1:33:c3:99:36:3d:48:b0:28:64:d4:bd:
13:2d:43:6d:78:94:1b:38:49:d4:a9:53:87:07:fe:
1a:42:50:51:9c:3a:02:64:79:3b:a4:82:14:db:dc:
55:71:de:85:4a:c8:15:cf:82:5c:bb:4d:91:47:26:
1e:5e:37:b5:21:0b:55:78:5b:d7:00:d3:f2:23:c3:
65:ca:9d:e8:20:8f:c3:e3:b8:24:cb:0c:c8:ac:03:
f8:fd:7c:40:22:8c:a0:b9:09:ce:c6:1c:cd:7d:94:
70:ee:57:ea:ad:bc:7d:22:eb:34:72:d2:b9:79:40:
dc:ad:b8:7e:e9:bc:68:4e:66:8f:91:0f:10:79:97:
64:cc:49:71:f0:c5:e1:be:eb:86:a4:a9:b4:0c:54:
35:cf:c2:d5:ca:b4:20:d9:bc:99:da:85:a1:2e:33:
51:1e:56:e6:3e:d8:c0:9d:75:99:ff:dc:e4:63:de:
ca:7a:5a:40:ef:9e:96:71:a3:6b:04:51:cd:fc:de:
fa:6f:1d:97:00:65:3f:bb:c7:25:a9:60:7a:cb:b0:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D7:C7:8E:9F:5E:B2:B3:C3:82:12:14:C1:00:8E:F2:82:FE:A9:58
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/675bb2b8-b9b8-45ee-ad4d-7af481ebf99b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.200.0.0/15
Signature Algorithm: sha256WithRSAEncryption
92:24:5a:fe:0d:80:08:31:e8:07:a7:03:8f:8d:aa:b7:61:e1:
f4:f4:45:de:81:e3:2c:3f:ca:a3:0a:d9:b2:5b:0b:8e:36:ee:
ab:00:06:7b:be:4d:ce:ae:8c:1a:8a:92:54:0c:a2:62:2d:3f:
c8:1a:39:f6:65:35:9e:a6:12:89:ca:2a:52:9d:1f:bb:f2:7e:
6d:87:f8:07:5b:fd:f2:2a:5e:25:d0:16:3a:62:79:25:6d:71:
5e:bc:06:79:dc:a0:39:a6:7e:a9:ec:cb:46:e6:f8:ae:67:e1:
fa:8a:6c:fe:ed:04:9e:56:62:67:d8:d7:c9:1e:15:26:71:3b:
b4:71:cc:2a:90:00:4d:cd:16:c0:fd:b8:cf:17:fa:fc:8f:2c:
09:49:7f:68:45:6d:09:2a:02:43:9e:b9:42:3f:9f:fd:62:b2:
16:55:96:bd:3f:63:cd:44:32:2a:d8:8f:b4:ae:f0:08:d1:4c:
e4:9e:8c:07:44:ca:ae:89:91:bf:c8:ef:27:e8:51:f6:46:88:
a1:86:dc:cb:f8:d2:d7:64:19:69:09:d2:fd:c2:dc:5b:a5:49:
a7:35:27:32:64:6b:7e:ad:24:35:7c:dc:80:c9:ae:88:ad:f4:
fa:ef:92:02:10:65:e8:8e:7a:41:6b:44:b1:db:e1:9d:1b:81:
7d:b0:56:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 12:44:53 2026 by rpki-client