Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d241761a-4c6e-4db3-ba0a-26b2eda6222a.roa
File: d241761a-4c6e-4db3-ba0a-26b2eda6222a.roa (raw, json)
Hash identifier: ba6t9cHoB1SPWrar4wyQfFa9ukR5qZ3ueqTcL729ECw=
Subject key identifier: D7:7E:A2:DB:95:A7:03:F5:39:EF:E1:04:5D:66:D0:B8:DA:C3:AD:06
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3FC05830504EB9421CDC3B029464E6ED3D0DEDE8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d241761a-4c6e-4db3-ba0a-26b2eda6222a.roa
Signing time: Mon 26 Oct 2026 05:50:25 +0000
ROA not before: Mon 26 Oct 2026 05:50:25 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.110.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c0:58:30:50:4e:b9:42:1c:dc:3b:02:94:64:e6:ed:3d:0d:ed:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:25 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=512333aa1ba77e0d259dab40d5436ee249f35eb704110acb642356602d77086f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:18:a6:f7:c6:b9:b4:7a:44:37:15:d5:77:fd:
66:fa:fc:61:dd:e2:86:16:93:27:97:1e:29:95:b8:
85:02:2f:1e:90:ff:37:ca:89:75:69:9a:86:6d:1b:
d7:a9:5b:7d:c8:d7:cf:a9:c6:b9:4f:80:0f:ea:57:
43:fd:f4:35:63:25:ce:98:9c:1f:3b:c2:e3:af:88:
9d:5f:05:1a:32:94:7f:ab:73:4d:6b:8c:ae:6b:2f:
ae:46:da:23:18:4f:26:96:cf:a5:ff:c8:89:46:91:
70:88:5d:86:3d:f1:77:fd:3c:58:8a:1a:2e:dd:82:
29:6b:c8:e9:a9:20:f4:48:ef:d0:3c:4c:55:18:63:
38:2d:90:46:fb:40:53:25:fd:46:6a:91:a7:90:c2:
79:ac:cf:97:99:c6:f7:3f:49:8e:28:c5:fa:c5:80:
02:4a:87:1e:5f:73:0c:75:a3:51:67:8a:a2:49:ba:
09:c9:5a:80:27:d6:78:a2:8d:d7:a9:7d:7e:3d:86:
ff:1e:81:97:72:88:2b:96:74:bb:a1:59:1c:cb:e4:
73:32:dc:be:dd:92:ae:c2:84:49:96:56:88:a7:e5:
e7:91:b2:27:e5:38:8d:8e:3b:39:3a:4c:c1:b4:9c:
48:73:0c:4e:63:fc:23:0e:7a:b0:84:19:9b:81:33:
b1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7E:A2:DB:95:A7:03:F5:39:EF:E1:04:5D:66:D0:B8:DA:C3:AD:06
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d241761a-4c6e-4db3-ba0a-26b2eda6222a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:b0:d5:d9:03:6e:81:7a:de:c3:db:83:88:af:b9:3d:f8:e8:
ac:81:99:f4:a9:d3:20:33:ab:11:f3:97:3c:1f:b9:1a:dd:f7:
26:fa:4e:25:ca:56:d0:95:1a:18:26:91:fa:2e:63:c9:be:fa:
67:8a:a7:d6:d2:bd:49:e8:8d:4b:86:85:bc:85:8e:ef:3b:c8:
7e:b4:ab:4d:cb:fa:90:a6:c5:e7:bb:f3:f0:ee:f6:27:79:e5:
2d:6a:67:1c:a5:b5:3e:75:0d:2c:e0:4c:b7:bb:40:2e:a0:c5:
09:62:96:e9:ea:0f:92:14:ba:bc:55:f1:c6:78:e8:e5:f0:d4:
92:fc:2a:60:d0:b8:be:5b:b7:d5:1b:c5:0c:ae:6f:68:40:3f:
ae:35:f5:5e:06:6a:58:73:93:59:62:cc:b6:23:c0:5f:b0:3a:
76:ae:43:0c:68:d3:d9:26:c0:39:19:4d:40:46:cd:20:c1:1a:
3b:ce:9c:0e:d1:b1:9e:78:39:16:4b:76:f3:1a:2c:20:20:13:
08:00:d8:b2:a0:67:3c:83:5c:1c:bd:8f:1f:28:88:31:e0:4f:
65:50:3f:40:7b:3c:4f:28:58:d0:0c:4a:6a:a9:aa:71:4b:23:
93:85:e2:ea:e8:bd:28:a4:7d:be:d5:0b:07:3f:33:7e:60:ed:
d5:84:ac:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:19:42 2026 by rpki-client