Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ca9dc172-c5c5-48fd-a801-9f7f050aa67b.roa
File: ca9dc172-c5c5-48fd-a801-9f7f050aa67b.roa (raw, json)
Hash identifier: u5dEU728q4X+WF/ln5KQ7x7XiTCUuF2JtCBsfP1W6JU=
Subject key identifier: F9:E9:5C:85:D4:36:31:02:EE:41:7F:50:78:0D:3B:CF:04:5F:3F:D1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 633BFC1BB6875070ADA6501200BB6A920957FC33
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ca9dc172-c5c5-48fd-a801-9f7f050aa67b.roa
Signing time: Thu 16 Jul 2026 00:40:09 +0000
ROA not before: Thu 16 Jul 2026 00:40:09 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.24.0.0/13 maxlen: 13
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:3b:fc:1b:b6:87:50:70:ad:a6:50:12:00:bb:6a:92:09:57:fc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:09 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=398037ba23f208d2603197dd4c99725c2798b1dd9f6a876904598b496506261f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:cb:58:8c:4c:e7:44:af:a4:32:2b:27:c0:
5a:60:ea:03:00:39:79:fa:17:c7:69:2d:03:09:d4:
b4:19:f2:f3:aa:f7:d6:b7:d0:17:ce:ca:8d:71:ec:
6b:0e:ee:31:16:73:15:8e:de:41:d9:50:54:cf:5f:
09:e4:b8:da:3f:dc:23:6b:04:78:d9:92:22:e5:c6:
19:ad:66:8b:d7:62:73:27:54:af:1e:b7:0c:c6:ae:
f9:44:0a:b6:bb:6d:9f:14:7f:8a:9b:2e:9c:2e:13:
95:db:10:ec:f1:ef:b6:14:83:40:7f:0d:3a:23:1a:
f3:21:7b:8e:32:0d:84:fc:64:81:7b:29:aa:e1:66:
84:9b:68:5e:a6:fd:dd:57:59:0c:c5:2f:8b:c4:a6:
a9:3f:ab:51:e2:0a:7c:b9:43:cb:df:52:25:d1:6f:
c1:99:58:72:d3:2c:a0:8c:3e:06:88:9a:49:6f:9f:
21:28:e3:4c:ae:a5:20:44:4d:cb:fb:31:a1:b3:04:
b7:06:73:d7:59:e5:d2:e7:04:3a:7c:33:d2:19:45:
84:3f:c6:5d:49:09:b8:05:fd:b6:b9:e7:9d:71:da:
da:f6:cd:e6:59:92:d7:92:fb:e0:72:31:ae:94:25:
b8:2d:44:6e:0d:ae:12:52:d7:23:c7:47:26:6a:c8:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E9:5C:85:D4:36:31:02:EE:41:7F:50:78:0D:3B:CF:04:5F:3F:D1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ca9dc172-c5c5-48fd-a801-9f7f050aa67b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.24.0.0/13
Signature Algorithm: sha256WithRSAEncryption
a3:af:a6:31:40:34:31:2e:14:16:11:a5:43:dd:9a:a4:bb:44:
bb:c4:e9:51:7e:31:d4:b0:8a:52:ac:a7:ed:16:18:61:cb:12:
78:10:d1:8c:68:83:42:ab:85:a1:84:de:9d:64:c3:62:a5:2b:
30:ca:4c:bd:ab:26:e5:21:c9:68:dd:c7:fc:87:5c:45:65:ec:
ca:06:f3:88:0a:2a:c8:e1:1d:b0:e8:b6:5e:89:11:fc:f7:59:
d3:8d:16:f2:68:bc:e7:e8:e9:24:ef:16:c8:65:cc:54:00:42:
c4:09:11:e1:bd:dd:e3:84:dc:17:21:c5:05:b2:65:af:73:09:
99:00:6e:7b:cc:bf:fb:aa:6b:b3:57:05:a7:10:f3:c7:d0:01:
ea:22:4b:8b:34:1b:48:f7:11:81:89:b5:b4:44:be:cc:bd:42:
63:0c:0d:15:52:19:22:c6:00:74:6d:fb:31:84:c7:40:b8:dc:
51:40:bd:11:5c:b2:03:06:c8:f8:c6:82:a5:4b:8a:84:b5:f8:
a0:d8:fc:9f:88:a9:5c:71:94:0b:01:f2:e3:b9:e6:a8:f6:6d:
e9:21:09:ca:06:25:02:1e:1d:be:89:cf:51:97:ae:b2:5c:22:
ea:9b:48:e1:fe:e9:67:e4:88:81:12:fb:74:1b:67:bf:e5:61:
c0:ae:aa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:01 2026 by rpki-client