Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/96060ba0-0bb4-49bc-8bf6-4a1495ffddf4.roa
File: 96060ba0-0bb4-49bc-8bf6-4a1495ffddf4.roa (raw, json)
Hash identifier: njyW3sFbqBhjVUtd2COcEG/xSgIDP5nHdR/sWtu3MPI=
Subject key identifier: 41:FC:9D:85:01:6E:F0:0D:94:7B:0A:D9:2B:CD:9C:90:88:A4:EE:4C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 312154F96AA63A8D4B72ABD94C7CCF890E053EAA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/96060ba0-0bb4-49bc-8bf6-4a1495ffddf4.roa
Signing time: Thu 16 Jul 2026 00:40:08 +0000
ROA not before: Thu 16 Jul 2026 00:40:08 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.20.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:21:54:f9:6a:a6:3a:8d:4b:72:ab:d9:4c:7c:cf:89:0e:05:3e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:08 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=197298b65c9dacca10ec13ca89a0ec0c28cea26ede639cc4385edb494630d3fe, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:b0:9c:a8:ad:a9:fb:1a:72:be:00:bf:ff:
42:90:73:c3:c2:cd:f5:a0:9b:b2:b8:77:92:c7:51:
15:a2:6d:f2:67:41:fa:4a:93:5f:be:a4:83:bf:0e:
85:63:6f:6f:7f:16:19:a2:31:6d:fe:94:47:ce:6e:
94:d9:83:a4:a6:74:6f:76:10:ea:96:e3:af:8d:98:
18:b1:d7:67:4d:b2:25:7e:bc:65:dd:ee:4e:fc:86:
3d:24:68:0d:27:90:d5:96:8b:a6:24:56:87:32:82:
be:93:cd:cb:ed:ba:21:74:f3:dc:d1:de:08:d9:06:
b5:bd:ad:15:59:2d:ae:a9:fc:1c:b2:c7:24:2e:93:
04:a4:9d:a8:24:40:36:e1:82:98:d8:32:ee:30:d9:
5e:b8:5b:d2:02:a8:9e:6c:ef:04:2d:e6:4c:e8:3b:
af:d6:e9:50:41:0e:39:27:7d:2e:97:51:12:99:38:
9a:0d:34:4f:82:de:25:3d:4b:cc:73:f2:22:10:92:
8c:a3:be:65:ec:03:18:77:6b:cd:37:33:3a:ed:0d:
8f:b5:8a:12:34:7d:46:36:0d:9b:82:70:82:6e:e1:
96:bd:64:5d:e4:ea:44:38:19:ea:7c:ce:ee:72:ff:
97:dd:f1:4d:3d:26:63:c5:68:16:28:6c:86:2c:8e:
6b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FC:9D:85:01:6E:F0:0D:94:7B:0A:D9:2B:CD:9C:90:88:A4:EE:4C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/96060ba0-0bb4-49bc-8bf6-4a1495ffddf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.20.0.0/14
Signature Algorithm: sha256WithRSAEncryption
5a:28:fa:de:3b:33:d4:6b:3b:cd:9b:56:db:60:be:09:e4:24:
1c:83:78:93:86:74:3d:1a:b0:c0:13:11:64:3e:6a:cf:03:dd:
45:cc:e7:3d:30:3f:4c:c0:f7:15:b5:72:bd:fb:c8:31:eb:11:
0c:51:22:15:9e:a8:30:2f:4e:ea:71:86:26:94:08:03:ae:bc:
0d:a7:21:b6:9a:cd:47:c4:75:97:e4:b1:3d:44:8b:1d:b7:c4:
34:13:e8:50:97:d5:ba:09:30:cc:1e:19:e6:d0:e0:60:1f:af:
c4:0b:44:2a:5f:ad:ae:69:94:5d:ee:4e:7d:66:58:97:f5:19:
2b:86:d2:63:85:79:a9:5d:f6:36:c6:23:8c:3d:d4:9f:fd:6c:
de:12:e8:02:4d:33:d2:a1:c8:02:fb:19:df:1b:ae:91:3c:f9:
40:f8:2e:1a:11:af:de:84:f4:aa:9e:15:62:de:22:0e:1b:cc:
83:24:52:1f:e1:45:43:6f:dd:30:92:53:cd:d8:e3:d3:4a:9f:
be:b3:b4:84:52:ec:07:d0:e1:45:24:ef:6b:31:df:db:68:02:
50:21:c2:ec:aa:95:75:f0:98:72:aa:b1:24:10:ef:15:36:42:
4f:e6:a3:4c:1b:7a:cf:33:3f:e0:2a:12:55:5e:81:25:a7:5e:
ac:97:33:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:41:17 2026 by rpki-client