Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b1f2e92a-59bb-45af-9b7f-630a07248560.roa
File: b1f2e92a-59bb-45af-9b7f-630a07248560.roa (raw, json)
Hash identifier: n+jVeXbVrGZ61xItGPtZNOIGXTMoKvomUP4zoJDh+cU=
Subject key identifier: 93:64:8E:57:E8:A5:BE:17:CF:07:73:FA:78:35:05:7E:42:07:5E:D1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7266E49F174D7F9873978D746ECF54F214EA021C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b1f2e92a-59bb-45af-9b7f-630a07248560.roa
Signing time: Sun 11 Oct 2026 15:20:11 +0000
ROA not before: Sun 11 Oct 2026 15:20:11 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.240.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:66:e4:9f:17:4d:7f:98:73:97:8d:74:6e:cf:54:f2:14:ea:02:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 11 15:20:11 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=a6a7c00457a17c6955f63f32297b96fb80e41da60260373f77128442b475ccd7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:c1:f0:e5:96:9e:5d:16:84:03:c8:3c:de:
2a:6b:57:eb:8b:96:41:90:7c:48:40:b9:32:f6:28:
92:bc:af:0b:ae:c2:9f:dd:4f:05:d0:61:8b:21:22:
23:bd:b8:35:d9:96:21:36:76:c8:85:5c:a6:62:f6:
82:48:8f:91:86:57:58:41:93:c6:3c:fb:30:75:07:
0c:e3:38:43:06:56:8b:ca:f3:9e:a8:bf:e7:af:d3:
49:ae:76:7a:a7:47:db:a6:09:ca:b5:02:39:67:c5:
90:59:18:d7:96:de:65:98:7e:89:51:e4:c2:d7:0d:
f7:96:61:b8:1b:ec:fa:c4:ee:b9:17:1c:cf:60:fc:
7f:08:ff:c3:8c:d8:ce:e2:42:40:50:ad:00:fe:68:
b5:a7:c4:d8:0d:75:65:8b:d2:4e:47:52:22:45:6f:
29:3f:be:15:06:1d:b9:cf:0b:3c:ea:d9:fb:5e:17:
f8:59:c8:4d:b4:f5:42:98:73:b6:fc:26:96:90:6c:
2d:2c:9a:d1:a1:ce:15:2c:b0:b6:8d:85:49:08:e0:
77:81:e5:3e:28:5b:86:23:66:06:f9:68:66:59:15:
0a:6e:5f:5f:98:5a:51:21:ae:d3:38:19:e4:e2:68:
f9:8e:66:39:50:d1:f1:28:0d:ed:b8:c0:c1:c4:fd:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:64:8E:57:E8:A5:BE:17:CF:07:73:FA:78:35:05:7E:42:07:5E:D1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b1f2e92a-59bb-45af-9b7f-630a07248560.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.240.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:d2:37:7f:f8:4d:49:09:d9:55:0e:cb:52:0d:c6:16:23:41:
0d:ff:72:30:68:56:67:45:02:e4:0e:33:e0:bb:a2:c0:aa:ee:
e9:fd:2b:53:cc:b9:4e:2b:51:7b:f1:f4:a3:c9:33:4c:af:cc:
a5:2f:60:77:f2:d1:d8:9d:e8:ec:22:e8:97:ad:e8:40:3a:1e:
b1:f9:23:dd:23:e7:a5:50:e1:0b:4c:0a:d7:32:75:d6:bc:e0:
4e:04:a8:fd:2d:d9:ee:80:8d:e7:3e:68:e1:87:3c:95:e0:e5:
47:c5:c1:6f:d3:bf:b8:1c:26:89:b2:6f:2d:73:76:81:c8:11:
ab:e6:19:d5:d1:e1:34:85:2d:d0:67:05:0d:62:37:11:45:50:
bf:9b:79:7c:c7:52:9b:41:d8:ef:d8:f5:af:08:9e:4f:0f:ed:
d1:ef:67:3f:1f:8f:92:de:22:03:e3:3c:52:6d:58:b8:96:c7:
d9:3e:7b:c8:3d:e9:4e:18:a5:d1:6a:3f:6f:74:2c:fe:c2:b6:
7b:02:d6:a5:06:6f:cd:de:ee:24:a8:b8:ff:be:bc:89:d6:95:
e5:c7:91:ae:83:f4:f5:82:fe:a8:97:f0:34:b6:62:98:24:be:
6b:34:48:ac:28:ca:35:38:c6:97:42:70:70:33:1c:09:f5:ec:
03:b4:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:06:46 2026 by rpki-client