Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
File: fc50f617-7597-4f4e-b8f6-87763b28caf0.roa (raw, json)
Hash identifier: a3QkdNkTjRjkUk3VS3rBPhY+ZAVAAmvMD7vwhIx0ZGk=
Subject key identifier: 93:18:BE:83:3F:89:EC:2A:E5:76:8B:C7:D9:10:9E:F0:E2:7F:71:91
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 14A16E8E09A6B2183F1B327253A98739978D072E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
Signing time: Mon 26 Oct 2026 05:40:21 +0000
ROA not before: Mon 26 Oct 2026 05:40:21 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.121.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a1:6e:8e:09:a6:b2:18:3f:1b:32:72:53:a9:87:39:97:8d:07:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:21 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=10568200bc85936efdf2701e9dcef7a2a87835d344722baddd89b6ea6680f785, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:83:b7:2b:2f:4d:1d:99:4d:2c:af:de:20:e7:
45:ed:c3:5c:0a:f5:68:76:35:c4:f1:29:13:42:f1:
78:bb:62:c6:12:09:7c:c3:ca:82:62:0c:c9:14:8d:
35:c7:d7:55:b2:e7:f3:96:bb:a4:94:ed:a9:f6:0f:
19:2c:6f:6f:0c:aa:9c:4e:1b:50:07:40:a5:e4:9f:
a5:f7:77:e7:c2:58:22:d7:25:d4:db:65:db:39:72:
a1:41:28:20:c0:63:30:7e:43:8d:b6:88:76:a3:8a:
01:28:d9:41:c0:4a:e6:3e:7b:d3:de:d3:35:6c:c3:
db:f5:7f:69:98:03:ed:1b:19:2f:4a:1f:ff:22:9a:
f9:c0:12:bd:24:ae:b4:6e:2d:0c:9e:85:9d:44:50:
9b:5b:9e:bd:ed:a9:98:d1:92:14:d2:bd:f6:92:d0:
43:4e:08:98:6c:c4:d4:fc:8e:72:fc:ba:27:bc:6b:
21:e5:fd:48:8f:f9:d6:be:b1:fc:f0:17:04:a7:a3:
91:9c:cc:1d:f4:eb:ba:a8:2b:db:6f:b9:c6:cb:da:
44:d5:16:2d:1d:8f:e0:9a:94:8f:74:20:11:9a:5c:
bb:83:e8:3c:e3:19:c8:9b:47:80:07:ba:28:7c:9d:
ac:4d:0e:c0:a6:66:a7:23:63:a8:ce:e8:d2:a4:aa:
cd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:18:BE:83:3F:89:EC:2A:E5:76:8B:C7:D9:10:9E:F0:E2:7F:71:91
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.121.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ab:b6:b3:38:e5:dc:00:9f:ce:b5:23:83:cf:f5:95:36:38:96:
4f:50:06:25:28:13:52:df:bc:ff:8a:81:9f:fa:17:71:1f:1d:
3d:6a:75:ff:ad:a9:b7:94:b7:d7:13:73:ac:70:9d:2c:12:90:
34:14:f3:13:c9:c6:61:0c:c9:af:e7:f3:1c:47:8d:78:0b:a7:
42:d4:7f:ce:d6:02:86:72:d6:03:26:47:62:93:d0:1c:49:e8:
75:a0:f3:d2:ad:60:99:74:f2:37:a4:2f:ac:1e:0d:86:36:e4:
99:d8:b2:ee:11:d6:13:83:b6:43:a7:98:9d:5a:44:f0:c5:11:
e5:30:ff:c4:f1:65:13:05:2a:58:e4:dd:d9:3b:55:d6:aa:d7:
51:9c:aa:a5:96:30:4e:d3:f7:e8:82:61:66:ee:63:e7:11:48:
02:a2:2b:12:bc:2e:10:ed:03:57:50:62:c4:b1:a4:42:95:6a:
cb:f3:3a:7d:8d:d2:c5:f3:a1:08:a9:e0:aa:1a:53:19:44:6d:
1b:fe:d3:fb:a9:34:2c:d3:8e:31:0f:b9:c7:96:68:7a:b1:b4:
c1:c4:36:e0:86:ec:20:46:08:94:a0:54:8c:ed:bc:2e:a5:d2:
dd:03:6e:f0:e9:55:e5:93:3e:75:d8:9a:94:26:a7:9a:23:8e:
a2:32:a9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:49:34 2026 by rpki-client