Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
File: 80a19bac-b522-4340-8501-74870117a3ce.roa (raw, json)
Hash identifier: m4t/yTzhltKRZRQ7ZA2Edg8MFUummVgdxUJvEd1gVuc=
Subject key identifier: 3B:22:DA:06:00:FF:CF:6E:F6:3A:A1:06:A6:90:CE:A6:07:AF:61:E2
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6E86A912AFCE33F5A02A796ADBA5EC79B625609C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
Signing time: Mon 26 Oct 2026 05:40:05 +0000
ROA not before: Mon 26 Oct 2026 05:40:05 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.80.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:86:a9:12:af:ce:33:f5:a0:2a:79:6a:db:a5:ec:79:b6:25:60:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:05 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=9ef7d5868078277b14d6ec2c74ebf09972d37d3fa29ee7134a9eb46f6ca5d5ab, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:62:58:fb:49:9a:13:1d:27:c2:f3:b7:5d:
57:44:1c:7e:a7:b3:c6:9c:81:e6:46:a0:3d:f3:b6:
12:27:5b:54:f9:b4:2a:d5:40:6e:dc:ec:a5:72:39:
8b:12:9b:8c:9a:09:ed:45:25:27:71:6c:70:4e:b4:
b7:77:dc:fe:af:77:23:05:c1:0e:c3:ed:3c:a8:93:
3e:05:84:0f:ff:6a:19:51:c6:ef:88:60:69:22:89:
db:35:5d:de:47:ce:54:2a:aa:2e:7e:d7:ca:e8:8a:
68:44:a4:27:c3:61:b3:a2:54:28:bb:78:05:11:f4:
8a:97:cd:69:e3:d6:39:ad:45:e2:49:60:db:ce:5f:
f3:0d:72:4b:e3:0b:0c:26:52:63:8a:e5:9a:02:4b:
21:24:5a:cb:b4:12:2f:9c:86:36:b0:59:9f:8d:d3:
24:62:bc:17:12:ee:ae:04:3c:7f:d6:75:03:82:18:
22:ae:17:bb:a2:37:ba:66:35:f4:5c:e5:9a:eb:f8:
ef:c6:d9:2a:57:5e:62:07:ac:13:6f:6a:38:37:be:
86:3a:db:cc:bb:50:ef:7e:cb:94:0e:de:fb:3b:46:
e8:dd:ee:9a:e8:40:90:95:76:8d:cf:ac:d7:78:4f:
aa:7c:aa:5b:b1:be:fa:b7:2d:64:41:00:1f:75:99:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:22:DA:06:00:FF:CF:6E:F6:3A:A1:06:A6:90:CE:A6:07:AF:61:E2
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d4:3d:9c:fc:26:6f:90:51:b2:bf:70:9e:d3:35:33:37:e6:69:
55:31:a7:39:2f:d4:54:ff:6e:02:dd:84:ad:9d:9b:63:e0:b8:
d4:fe:42:e5:dd:48:c5:29:c5:fb:da:d9:86:d3:0d:e7:9a:b0:
49:dc:2c:81:86:7f:30:e3:59:0e:b9:df:c8:55:b0:f6:aa:37:
30:3d:90:b9:e9:26:0a:f3:48:6e:c4:12:d5:44:13:2e:90:f0:
a8:cf:10:82:38:e4:c8:cf:93:bb:48:bc:ad:6a:b9:b8:f2:75:
56:9b:2d:3c:de:b5:93:b4:9b:53:d3:ef:db:2a:b9:83:77:2f:
60:95:5c:82:7b:b6:78:8f:9d:02:a2:d4:c8:8d:78:0a:61:22:
ae:ac:82:91:46:39:06:d5:74:64:d4:4f:05:cc:e4:95:e9:f7:
64:f5:55:05:67:bd:aa:7a:3d:5d:93:53:56:af:f6:c6:ce:0c:
d7:03:d3:7f:af:28:4f:92:d0:a3:de:f8:7e:f0:da:9c:42:64:
3a:f9:ef:42:70:92:85:18:04:cc:47:02:2d:af:9a:fc:83:4e:
99:f8:94:dc:4d:6c:ef:59:32:c9:2a:1d:87:97:18:e8:66:cd:
2c:84:36:b1:d6:c4:26:1e:ca:57:c8:92:58:69:41:eb:c3:cf:
0c:e1:84:14
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUboapEq/OM/WgKnlq26XsebYlYJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTQwMDVaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDllZjdkNTg2ODA3ODI3N2IxNGQ2ZWMyYzc0ZWJmMDk5NzJkMzdkM2ZhMjll
ZTcxMzRhOWViNDZmNmNhNWQ1YWIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMINYlj7SZoTHSfC87ddV0QcfqezxpyB5kagPfO2EidbVPm0KtVAbtzspXI5
ixKbjJoJ7UUlJ3FscE60t3fc/q93IwXBDsPtPKiTPgWED/9qGVHG74hgaSKJ2zVd
3kfOVCqqLn7XyuiKaESkJ8Nhs6JUKLt4BRH0ipfNaePWOa1F4klg285f8w1yS+ML
DCZSY4rlmgJLISRay7QSL5yGNrBZn43TJGK8FxLurgQ8f9Z1A4IYIq4Xu6I3umY1
9Fzlmuv478bZKldeYgesE29qODe+hjrbzLtQ737LlA7e+ztG6N3umuhAkJV2jc+s
13hPqnyqW7G++rctZEEAH3WZdZUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQ7ItoG
AP/PbvY6oQamkM6mB69h4jAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ODBhMTliYWMtYjUyMi00MzQwLTg1MDEtNzQ4NzAxMTdhM2NlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNQMA0G
CSqGSIb3DQEBCwUAA4IBAQDUPZz8Jm+QUbK/cJ7TNTM35mlVMac5L9RU/24C3YSt
nZtj4LjU/kLl3UjFKcX72tmG0w3nmrBJ3CyBhn8w41kOud/IVbD2qjcwPZC56SYK
80huxBLVRBMukPCozxCCOOTIz5O7SLytarm48nVWmy083rWTtJtT0+/bKrmDdy9g
lVyCe7Z4j50CotTIjXgKYSKurIKRRjkG1XRk1E8FzOSV6fdk9VUFZ72qej1dk1NW
r/bGzgzXA9N/ryhPktCj3vh+8NqcQmQ6+e9CcJKFGATMRwItr5r8g06Z+JTcTWzv
WTLJKh2HlxjoZs0shDax1sQmHspXyJJYaUHrw88M4YQU
-----END CERTIFICATE-----
Generated at Thu Nov 12 06:21:15 2026 by rpki-client