Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8c7710c7-6ab8-4545-b04c-0bbeaa573eae.roa
File: 8c7710c7-6ab8-4545-b04c-0bbeaa573eae.roa (raw, json)
Hash identifier: 2mmzNhfhbykVjwPhCc2wXK4SzB5mGVm6IF2k8B2msZ8=
Subject key identifier: E4:AA:0A:9E:E2:11:11:AD:46:73:54:1B:42:6A:37:3B:76:E7:61:BF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 22222E01B4E9E3F4B0D4FC18B5232CD9FFDB5117
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8c7710c7-6ab8-4545-b04c-0bbeaa573eae.roa
Signing time: Tue 27 Oct 2026 01:02:26 +0000
ROA not before: Tue 27 Oct 2026 01:02:26 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.112.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:22:2e:01:b4:e9:e3:f4:b0:d4:fc:18:b5:23:2c:d9:ff:db:51:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 27 01:02:26 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=0f240065c9794b955758e466bae740baae6c827c5f03955068f24e4c7fea52ab, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:9b:a6:60:d8:2f:f9:a4:b4:37:1c:4d:97:
b6:4f:ef:bc:54:04:27:3c:37:6b:9e:1d:f2:b2:c5:
e6:85:ef:4c:be:0c:fa:4b:ee:40:2e:1e:f4:1b:ca:
fb:2c:37:6f:61:03:4a:7c:1e:06:51:46:a4:a3:2c:
0c:13:02:99:e7:0e:46:7b:7f:c6:30:d7:bc:fb:70:
9f:ff:f2:bd:3d:e7:e8:ec:27:dc:e6:ad:72:4b:04:
58:5c:6f:2e:f6:48:10:95:79:4d:49:06:6f:17:06:
6d:84:de:b4:08:f1:8e:2a:a0:c5:4d:13:b4:50:bd:
e1:49:71:bd:22:28:d4:01:95:b6:08:a3:a4:cf:32:
33:87:54:ab:88:7f:dc:48:a8:9e:51:89:e7:58:52:
ce:bd:2a:76:ed:3b:f4:38:af:ab:1e:09:81:4e:6c:
85:05:95:17:51:ae:a1:c9:07:dd:ce:48:e3:b2:1e:
3d:fa:6e:6e:4e:e7:75:6a:9e:41:87:fb:33:70:3b:
c9:74:dd:c4:ed:16:90:59:9d:3c:6c:0b:75:87:b8:
89:3e:74:cf:69:44:21:9f:1d:92:b2:a5:fc:ee:09:
4a:af:b5:e2:86:77:87:43:6f:7f:44:ab:1a:54:c9:
91:c5:33:b7:6a:8c:0b:11:ac:c3:48:f1:ee:70:58:
48:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AA:0A:9E:E2:11:11:AD:46:73:54:1B:42:6A:37:3B:76:E7:61:BF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8c7710c7-6ab8-4545-b04c-0bbeaa573eae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:4d:c1:c4:7e:48:78:93:e5:21:c1:58:e9:47:be:5f:e6:64:
f1:5b:61:12:a9:4b:78:59:13:3f:c2:10:7f:74:cd:51:fe:31:
5e:68:97:35:24:15:93:f5:68:84:9d:fc:0f:2d:ff:61:dc:d8:
71:9c:1c:a0:48:1b:46:d8:1d:f9:05:5a:69:ad:25:a9:17:a2:
21:5d:c3:7f:e9:e8:88:3f:66:b1:7f:62:42:36:89:db:c6:ec:
ea:b9:1c:0d:d8:e0:81:0e:91:32:2b:ed:a9:5d:a1:dc:f7:c8:
65:0c:63:d3:a5:85:96:e9:49:cb:b8:dc:bc:b2:90:7f:e2:36:
b1:1e:09:ba:80:93:e5:8d:08:85:85:fc:df:8d:e2:54:ab:fa:
21:57:0e:28:36:86:89:d8:05:f3:4d:7b:b3:e8:d6:50:3c:a4:
ec:7b:a0:3e:e3:d7:9e:cc:38:34:6d:5d:8f:c6:51:16:f6:e4:
dc:c9:1b:87:22:b0:79:d0:46:3f:2a:e7:a1:13:c2:a5:77:f2:
ce:eb:16:01:b2:5b:15:3a:99:e9:a3:76:50:29:db:71:40:f6:
df:d5:f7:83:d1:91:4a:b3:0e:7d:32:33:68:93:d5:4f:e2:a7:
7d:dd:66:87:54:a5:18:af:86:aa:38:88:33:97:03:8c:6a:5e:
56:66:1e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:22:36 2026 by rpki-client