Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/676cc479-c956-49aa-8372-560fd674c62c.roa
File: 676cc479-c956-49aa-8372-560fd674c62c.roa (raw, json)
Hash identifier: tPDlyttFDV35pY4U6R3k1Jai6LJDdlIvDnXUW5T8vCk=
Subject key identifier: 14:C9:15:CC:86:72:05:C5:AF:49:0D:28:A4:8D:79:D7:16:E5:05:AB
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0D60A695C6B4233EA9185563EB75D2A1256C35A3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/676cc479-c956-49aa-8372-560fd674c62c.roa
Signing time: Thu 16 Jul 2026 00:40:05 +0000
ROA not before: Thu 16 Jul 2026 00:40:05 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.20.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:60:a6:95:c6:b4:23:3e:a9:18:55:63:eb:75:d2:a1:25:6c:35:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:05 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=d61e39e62e5704b4c14cca6ac5f186bc8878d6613a18e7216d2e4a403ea60361, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:78:ba:20:b4:e2:e1:65:0d:92:d4:d4:cb:
22:6c:bf:ab:58:9c:02:b7:3b:11:95:09:55:64:ba:
33:72:78:bf:e4:c5:2f:ca:c2:28:f3:95:45:6e:e5:
bc:fc:76:16:f3:df:b5:7c:c1:8e:48:fd:0e:21:85:
eb:af:55:5f:aa:5a:62:70:10:61:eb:fc:28:b3:c1:
fc:00:d3:66:0a:35:f3:d1:c8:ec:92:30:09:16:4e:
4b:2a:70:77:18:28:c0:da:a8:67:97:c6:b0:6f:8d:
a7:91:59:ce:b4:96:0d:00:5b:fc:f3:8a:f2:3f:68:
64:40:6a:d3:74:a8:f4:2a:c9:dc:2f:f2:dd:fa:08:
77:0c:4c:d3:25:83:35:2a:c7:15:a6:6f:42:6d:70:
82:a2:97:83:32:49:78:cf:f5:a6:06:86:45:85:0c:
94:96:37:80:81:c8:f8:ed:b8:44:20:0e:4a:ca:f3:
c7:b0:f8:ed:0e:b9:60:4b:bd:f9:3b:a0:4b:a5:6e:
26:de:a2:ca:94:de:88:c3:c9:ad:81:34:16:46:60:
da:90:05:31:8c:e0:89:5b:d4:e3:7d:5c:ae:bf:21:
3d:35:4c:ad:14:f6:87:ad:50:60:1a:bc:67:fa:71:
21:02:7f:e5:bf:af:4e:83:28:0f:d4:0c:33:b4:f9:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C9:15:CC:86:72:05:C5:AF:49:0D:28:A4:8D:79:D7:16:E5:05:AB
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/676cc479-c956-49aa-8372-560fd674c62c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:07:91:72:50:fb:fe:a0:7b:30:c1:05:6f:7c:3a:16:86:1f:
e2:24:21:12:39:af:83:a2:86:55:e4:22:3c:9c:6a:42:85:22:
9d:a8:3c:fb:be:79:4e:07:55:15:8f:ff:16:b8:77:cd:59:bd:
c0:01:c1:6a:ed:c9:bc:d9:20:d2:89:a8:58:e7:b9:5d:93:51:
03:0f:18:e6:17:27:da:7d:1c:bb:6f:27:62:95:f2:bc:91:36:
2c:e9:c6:56:08:32:3b:3d:70:30:18:f6:36:29:d6:74:26:5c:
01:4f:d1:8e:d4:f8:3f:b8:82:9b:16:9e:5e:b7:35:27:73:c8:
72:3d:6d:b3:b6:25:5d:06:b4:af:43:03:83:80:69:74:71:ff:
26:77:11:df:69:fd:65:66:5b:d5:fe:ca:67:01:98:b0:07:9b:
f0:11:fb:2c:ed:a6:9b:9b:50:87:ae:22:b1:e4:60:4a:86:75:
da:04:93:26:4a:6c:2b:98:3f:fd:07:c5:4a:4f:bd:83:14:6c:
ca:96:d3:b2:cd:63:79:bb:1a:d5:0c:d0:ae:4d:11:a6:d3:18:
e6:4b:72:16:ab:dc:90:59:1b:64:02:aa:e7:b7:c4:bc:e1:e9:
41:8f:fa:5b:3a:43:b9:b8:7f:bd:c9:a4:db:a5:e5:be:c8:2c:
57:e7:21:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:03 2026 by rpki-client