Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f060e190-89f7-4009-9831-b2d429343b80.roa
File: f060e190-89f7-4009-9831-b2d429343b80.roa (raw, json)
Hash identifier: es3/BrLhUadX6wyvrkoVyXSnaSHQTFCLhk9u0vrV5Q4=
Subject key identifier: 00:B8:D8:7E:C9:46:8A:94:A5:AB:89:F9:6E:95:38:F0:38:F8:47:AB
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0BFCDE82334F6D3CCFFE4C5A9BCF9228AB346046
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f060e190-89f7-4009-9831-b2d429343b80.roa
Signing time: Thu 16 Jul 2026 00:40:34 +0000
ROA not before: Thu 16 Jul 2026 00:40:34 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:fc:de:82:33:4f:6d:3c:cf:fe:4c:5a:9b:cf:92:28:ab:34:60:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:34 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=e2bef4944b0111deb7a54887e5212703aed5014b1674bf7fa963abf80f5ece44, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:b0:18:0e:ba:4b:88:fc:90:70:c5:1a:ca:
a2:c6:d7:b0:e3:e6:66:ca:a7:e7:a8:fd:bc:89:c5:
27:d0:7c:b6:72:01:b3:f2:33:c3:aa:83:66:2f:74:
b2:b8:46:bf:87:0b:cd:b9:a7:a3:00:19:a0:4f:3b:
9a:97:eb:b5:c2:2a:9c:26:5a:46:b1:47:a8:aa:d4:
c2:e4:55:e0:27:24:b7:cb:67:40:0d:91:ce:2d:5b:
59:a0:db:8d:56:04:24:97:18:59:c2:f7:08:50:79:
67:e7:da:38:f0:19:09:73:0a:23:88:a7:bb:45:60:
4d:d7:98:f0:8e:a0:66:c7:e0:1d:a6:36:dc:de:66:
c6:89:5f:6e:d6:a3:b0:5b:5f:57:d7:56:a0:e5:d3:
9e:90:2b:ee:4c:eb:73:88:05:b6:a6:94:32:26:ab:
84:54:03:22:fa:c4:e3:1d:bb:3e:b8:2d:db:a9:55:
25:2a:4a:28:de:ee:b2:41:b9:ba:02:9e:4c:74:a2:
7b:bc:4a:e6:03:f8:a3:24:a2:13:d1:c2:2f:2d:df:
e3:2e:c1:fb:cb:db:d2:c1:51:ca:36:82:72:92:24:
cb:c0:e1:22:de:73:2f:22:68:46:5d:9c:3d:1f:11:
79:9e:86:04:d3:29:51:3e:83:88:5b:7b:b8:85:67:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B8:D8:7E:C9:46:8A:94:A5:AB:89:F9:6E:95:38:F0:38:F8:47:AB
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f060e190-89f7-4009-9831-b2d429343b80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.0.0/15
Signature Algorithm: sha256WithRSAEncryption
2f:38:ba:36:14:70:00:32:b9:56:d1:06:6a:16:44:9e:78:0d:
82:4c:f7:79:4c:18:fe:62:af:56:1d:5b:d6:c5:f8:37:a5:41:
c3:cc:3d:59:e6:90:ab:03:61:9a:ac:79:a3:75:28:ee:2e:9b:
e9:76:9c:cf:8a:dc:b2:c2:4a:9d:7d:23:63:8f:1d:90:a7:dc:
03:06:68:bd:c6:e3:ea:52:9a:a8:23:ee:94:67:e2:cc:ac:54:
ca:8a:11:ec:c3:6f:9f:6a:28:3e:ad:61:11:57:ec:25:b7:28:
f6:88:bf:3a:76:f5:46:85:8c:7b:2a:18:ce:0d:da:73:43:c5:
6f:e5:b9:09:ad:06:f6:5b:51:08:42:00:1f:92:58:c2:fd:37:
06:9b:8a:8c:91:fd:cd:3d:cf:76:7b:ac:b5:9d:bb:ad:bd:c5:
95:6b:9c:5d:eb:75:a9:f5:d8:30:05:dd:96:a8:6f:1c:42:03:
9b:f7:2b:dc:63:fa:dd:2c:8e:b3:4e:85:b7:ab:06:7e:df:6c:
c3:92:54:f6:47:72:33:5a:05:a4:f7:5a:40:4f:51:6c:5f:62:
d4:66:11:04:66:5f:f5:ff:66:40:21:3e:9c:17:f3:73:a3:2a:
3d:a1:32:99:4b:bc:46:51:67:a1:05:1b:95:64:d9:dd:1f:44:
10:f8:75:31
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUC/zegjNPbTzP/kxam8+SKKs0YEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA3MTYwMDQwMzRaFw0yNjEwMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQGUyYmVmNDk0NGIwMTExZGViN2E1NDg4N2U1MjEyNzAzYWVkNTAxNGIxNjc0
YmY3ZmE5NjNhYmY4MGY1ZWNlNDQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKL9sBgOukuI/JBwxRrKosbXsOPmZsqn56j9vInFJ9B8tnIBs/Izw6qDZi90
srhGv4cLzbmnowAZoE87mpfrtcIqnCZaRrFHqKrUwuRV4Cckt8tnQA2Rzi1bWaDb
jVYEJJcYWcL3CFB5Z+faOPAZCXMKI4inu0VgTdeY8I6gZsfgHaY23N5mxolfbtaj
sFtfV9dWoOXTnpAr7kzrc4gFtqaUMiarhFQDIvrE4x27Prgt26lVJSpKKN7uskG5
ugKeTHSie7xK5gP4oySiE9HCLy3f4y7B+8vb0sFRyjaCcpIky8DhIt5zLyJoRl2c
PR8ReZ6GBNMpUT6DiFt7uIVnNwMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQAuNh+
yUaKlKWriflulTjwOPhHqzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZjA2MGUxOTAtODlmNy00MDA5LTk4MzEtYjJkNDI5MzQzYjgwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATMQMA0G
CSqGSIb3DQEBCwUAA4IBAQAvOLo2FHAAMrlW0QZqFkSeeA2CTPd5TBj+Yq9WHVvW
xfg3pUHDzD1Z5pCrA2GarHmjdSjuLpvpdpzPityywkqdfSNjjx2Qp9wDBmi9xuPq
UpqoI+6UZ+LMrFTKihHsw2+faig+rWERV+wltyj2iL86dvVGhYx7KhjODdpzQ8Vv
5bkJrQb2W1EIQgAfkljC/TcGm4qMkf3NPc92e6y1nbutvcWVa5xd63Wp9dgwBd2W
qG8cQgOb9yvcY/rdLI6zToW3qwZ+32zDklT2R3IzWgWk91pAT1FsX2LUZhEEZl/1
/2ZAIT6cF/Nzoyo9oTKZS7xGUWehBRuVZNndH0QQ+HUx
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:41:13 2026 by rpki-client