Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/aa15a3a6-022f-41a6-9a60-2175164bb741.roa
File: aa15a3a6-022f-41a6-9a60-2175164bb741.roa (raw, json)
Hash identifier: mjMCfP5TItICB01Zz5NMTUgRdgvSwRbA5iVpBlW6xBk=
Subject key identifier: 32:2E:63:D6:2D:57:F3:4B:CC:2C:7C:F8:F5:E5:A5:8C:B7:E0:FC:44
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 07A666D93BF6673DD70DB5D4E588273D861794A7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/aa15a3a6-022f-41a6-9a60-2175164bb741.roa
Signing time: Tue 27 Oct 2026 01:02:16 +0000
ROA not before: Tue 27 Oct 2026 01:02:16 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:a6:66:d9:3b:f6:67:3d:d7:0d:b5:d4:e5:88:27:3d:86:17:94:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 27 01:02:16 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=1f99bd51b94949261ee154444a34c27e812a400f57f67dcf6626038db9fb3e2f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4e:d9:bd:26:2d:ca:cf:5b:e2:f0:f2:13:7d:
d7:90:68:f6:ac:d2:5f:4b:7b:05:42:d8:28:5e:b9:
a6:c6:d1:6b:7f:1c:0f:3d:60:22:67:74:95:b1:e6:
c1:2a:cb:d8:b0:0b:44:de:5c:64:e8:5f:d2:7b:6a:
c1:b7:42:35:35:0a:75:64:87:64:97:52:10:1d:98:
85:91:4e:be:13:1b:34:53:7e:97:ee:96:cc:0e:c8:
61:94:e0:96:1b:a9:c4:9f:f1:a3:b7:55:b2:72:9e:
96:6d:f7:74:0a:66:fe:61:b5:9b:5a:97:3a:da:aa:
1a:fe:51:55:6a:05:a4:e0:f0:97:e3:7f:5f:e1:ee:
20:01:b5:8f:cd:a7:e9:69:13:c6:cc:8e:a7:1b:61:
08:59:52:29:b3:b4:e4:0a:67:42:4b:9d:3b:32:b2:
83:c1:32:40:2a:38:dc:02:95:07:02:73:2e:88:d9:
9d:71:61:54:96:b8:76:94:58:9a:5c:06:ab:da:dd:
5c:e0:4f:25:2d:e3:bd:6f:0f:a0:1d:07:ca:e0:67:
cf:3b:31:f7:70:af:0f:32:a1:84:69:80:0a:a9:dc:
f2:02:45:18:71:b6:1d:05:4a:58:28:f1:72:7c:0b:
d2:96:d6:5a:58:55:0e:43:db:8f:6c:76:eb:a0:a2:
0c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2E:63:D6:2D:57:F3:4B:CC:2C:7C:F8:F5:E5:A5:8C:B7:E0:FC:44
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/aa15a3a6-022f-41a6-9a60-2175164bb741.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.204.0/24
Signature Algorithm: sha256WithRSAEncryption
91:82:2d:95:99:04:b7:1e:1f:78:74:19:b0:08:fc:14:82:19:
1c:9f:44:32:0d:f5:8d:71:3e:ef:2e:21:32:db:a7:d8:a8:9c:
96:dc:bc:1e:82:3e:b9:ee:cf:dd:04:79:3f:8d:09:fa:26:62:
4f:b3:07:3e:55:48:4d:09:f4:59:f6:16:02:ab:b8:32:3e:17:
a0:c1:5a:36:4b:1b:61:d9:a6:31:ac:37:89:29:77:58:d6:ec:
d7:fb:10:2f:3c:35:e7:c3:17:3e:a2:ea:63:19:8d:1a:f8:42:
05:77:ad:e4:79:81:2a:30:6d:42:43:92:3a:0c:f1:f8:8b:17:
85:c0:4c:6e:20:fa:36:02:52:82:a8:40:de:13:45:e0:e5:28:
d7:67:f1:89:76:4e:76:c6:22:4c:6f:e4:59:df:b1:99:ef:20:
8e:6f:c6:b9:5a:e7:f1:70:e7:24:53:7e:76:28:4a:e3:92:ee:
cf:9b:5d:68:71:0e:8b:af:d0:aa:06:35:aa:86:54:e7:90:1b:
80:cd:76:bb:62:2b:c6:98:26:8e:53:9a:39:5f:7b:90:41:c8:
25:ed:b3:7a:12:28:4c:58:77:33:25:6e:dd:c2:29:62:b6:20:
0b:4c:17:61:1b:09:de:ff:27:7f:37:9d:88:84:7e:b4:63:c4:
71:a7:cb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 22:42:05 2026 by rpki-client