Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/186c4a20-4025-4599-90c9-1eeb15cf6730.roa
File: 186c4a20-4025-4599-90c9-1eeb15cf6730.roa (raw, json)
Hash identifier: BvuLHrELxRAyLpvSf9RV0bA9+JZw0+6JrUWmPyPD1Vg=
Subject key identifier: F0:24:CA:6A:27:1B:28:F8:93:A8:B1:D7:42:44:E6:14:6D:31:AD:38
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4296D23F4CD98D950F044B04AA1F64A3CEF0E647
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/186c4a20-4025-4599-90c9-1eeb15cf6730.roa
Signing time: Tue 27 Oct 2026 01:02:13 +0000
ROA not before: Tue 27 Oct 2026 01:02:13 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 06:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:96:d2:3f:4c:d9:8d:95:0f:04:4b:04:aa:1f:64:a3:ce:f0:e6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 27 01:02:13 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=19abec1a3a847774c21f407a27b2d32c5c9a7cd6fbf823e7d246403c85cbb54d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:52:18:34:bf:c4:20:0c:10:25:5c:3b:5e:
4c:1f:c9:8e:34:bf:cd:66:98:70:91:83:ca:d7:f7:
da:77:d0:ed:47:77:5c:d8:9a:e7:bb:37:7d:2a:03:
7e:9d:69:10:f6:e6:66:3d:58:a5:7c:c7:73:57:d6:
3c:d3:ae:4c:05:d6:a7:ff:40:39:c9:b8:4d:d8:32:
6c:c0:94:05:c1:62:43:ba:b3:b2:63:32:30:c0:da:
b8:26:6f:19:2a:fd:d9:9b:73:e7:4a:ca:2a:b2:0d:
e3:af:33:80:f8:0e:b5:51:e6:ed:b4:df:8e:40:80:
78:c1:0b:5d:6b:ff:6e:b8:c2:4c:37:8b:f3:67:0d:
87:e9:66:f8:16:ff:02:b4:70:a8:ac:e2:8b:db:10:
5d:1e:34:11:9c:82:35:d9:ec:41:0e:db:ee:f3:70:
e5:5f:03:89:8e:14:45:98:31:92:55:70:3a:75:ff:
50:11:6c:62:5f:fc:4d:fb:eb:ee:1c:db:8f:e5:ca:
6e:23:a6:fc:33:6b:79:62:30:61:e8:82:29:b2:56:
17:1e:33:e9:2d:d9:17:07:97:37:54:9a:e5:ad:c5:
20:11:d2:30:53:48:93:9f:b7:96:09:8b:d5:d6:4f:
39:3e:69:8e:ce:2b:7f:3f:d0:61:8b:3d:f2:8f:e7:
ae:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:24:CA:6A:27:1B:28:F8:93:A8:B1:D7:42:44:E6:14:6D:31:AD:38
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/186c4a20-4025-4599-90c9-1eeb15cf6730.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:b1:d5:d8:c6:7b:dc:4f:56:00:f7:69:53:13:2e:79:d7:b9:
a2:43:40:0f:ab:39:a6:a5:ce:b1:40:71:a5:5c:8e:8d:9f:4c:
a4:6f:c1:07:af:9a:9d:f0:7a:86:85:44:2f:7e:34:fa:e4:20:
df:21:19:e3:c7:31:a8:2b:19:c6:75:d3:ff:1a:c8:0b:1a:c6:
74:18:fd:88:4d:6c:96:8d:31:45:67:5f:ea:a5:d3:9f:80:03:
8f:c2:ce:d6:e6:f1:ab:0a:16:6d:69:f9:b6:08:5f:c0:d5:ee:
a5:db:a2:49:24:52:d5:32:50:22:6d:cc:9b:51:a6:01:44:21:
6c:43:56:da:0f:ef:d7:9b:93:42:ca:7f:c9:05:ed:99:3b:d9:
32:cc:aa:0c:91:ce:14:fe:77:ca:af:f9:94:3d:28:2e:77:aa:
6d:81:64:9b:65:24:98:8c:56:3b:aa:b5:23:59:c5:7b:57:9e:
04:a7:85:6f:78:4c:c8:4d:80:a2:ef:79:9d:23:00:ef:ff:15:
e4:bb:50:90:8c:91:a7:64:e1:b7:ff:7c:3f:df:0f:32:fb:7e:
ad:aa:e1:a0:ce:b8:b4:51:04:e1:3b:06:a8:9c:7c:73:bd:df:
ec:e2:47:55:cb:bc:fa:1a:87:df:af:da:0d:92:40:8c:7c:6f:
ca:11:d6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 18:02:42 2026 by rpki-client