Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2274bb17-af22-495a-a451-ba0ed5fd0a92.roa
File: 2274bb17-af22-495a-a451-ba0ed5fd0a92.roa (raw, json)
Hash identifier: I2iNWXrxa9Ziz0Kh+qzt3Qrm4Tu+6A3PPD7b3HRZXlc=
Subject key identifier: AA:BC:EA:EB:69:7C:73:2A:90:A0:66:4C:2C:F8:DE:29:2C:65:4A:7F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3B0AE9DDD9F4B8447944C278B453987D4A79B75E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2274bb17-af22-495a-a451-ba0ed5fd0a92.roa
Signing time: Sat 31 Oct 2026 00:02:46 +0000
ROA not before: Sat 31 Oct 2026 00:02:46 +0000
ROA not after: Fri 29 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 51.202.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0a:e9:dd:d9:f4:b8:44:79:44:c2:78:b4:53:98:7d:4a:79:b7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 31 00:02:46 2026 GMT
Not After : Jan 29 23:59:59 2027 GMT
Subject: serialNumber=9200f55e281abab785616a2d51ac7bd419b0fac812bd1e65e2c360d15ce9fe46, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:2d:7a:dc:d3:c2:d1:07:f7:38:84:64:93:
47:0b:4b:55:53:82:9c:b6:a4:7c:7d:e8:4d:b2:50:
e6:28:5d:be:1e:c4:ee:16:b6:9c:e0:b3:00:83:5a:
67:3c:33:94:79:12:36:33:bf:f4:58:33:49:9e:c9:
14:c4:83:56:d4:82:8c:8b:8a:5a:56:fc:7a:5f:ec:
0e:18:86:3b:58:7b:52:93:6f:7f:51:dc:84:f8:e1:
51:7a:3c:4a:41:c6:f9:7b:9f:89:41:dc:e0:6d:da:
ad:c1:bf:7e:9f:38:bc:11:a4:14:a6:1f:3f:46:f0:
d2:2b:8a:81:99:8d:c0:da:15:12:bb:df:26:01:f6:
92:25:30:5a:26:34:81:68:1c:1b:fe:a8:59:c5:cb:
e5:9d:4d:d8:b0:fd:83:cc:55:45:4c:36:05:12:3e:
02:2d:10:9a:b2:58:3a:cb:d1:93:91:2e:5b:79:92:
67:6e:76:2a:c3:da:c1:5f:16:9f:c8:f3:1a:f8:69:
aa:14:4a:4e:b4:94:5a:5b:03:2c:f2:ae:34:20:40:
86:8d:60:2a:ee:31:cc:78:70:f7:1b:a0:d4:33:1b:
81:53:89:37:54:67:f4:9f:7e:91:1f:8a:2b:43:b1:
d6:04:3d:31:81:e3:de:25:b6:2a:ed:bd:cf:12:a3:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BC:EA:EB:69:7C:73:2A:90:A0:66:4C:2C:F8:DE:29:2C:65:4A:7F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2274bb17-af22-495a-a451-ba0ed5fd0a92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.202.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a4:1e:e7:fb:4a:93:06:c1:da:58:9f:db:da:d2:93:a4:f7:fe:
f9:bc:70:11:e6:fd:58:0a:28:52:9c:44:f6:80:61:5c:62:5d:
ac:3f:dd:cf:14:ea:5b:fa:4d:a8:2b:44:f7:0b:c4:7f:bd:65:
df:98:df:a7:58:61:b1:65:36:c9:77:b1:72:10:f5:90:f5:41:
70:47:4b:70:24:54:88:63:45:65:0a:2a:24:44:7a:b5:86:4f:
18:e1:96:ae:71:f1:5b:c4:7e:25:1c:06:5d:c6:8a:6c:27:1c:
e7:57:ed:f5:6a:fd:f6:1d:11:58:37:54:0e:53:60:3a:1e:dd:
ca:26:30:1f:aa:db:e9:44:fa:ec:a0:d0:d9:1d:a6:b6:0c:75:
f7:1b:00:be:7a:cf:68:22:3b:ab:55:14:46:1f:df:e3:2b:53:
4f:33:e4:5e:c0:0f:7d:3f:76:45:ae:02:bd:0b:f9:f6:8d:b1:
3d:fc:36:f3:4c:8d:35:9c:4f:c2:b5:34:50:96:2d:c9:a3:e5:
00:0d:28:28:e9:6f:a5:39:4e:9a:81:92:70:f6:c3:59:ff:e0:
1b:29:1a:04:14:7d:81:cf:14:e5:2e:b5:c9:35:41:a8:f9:22:
7c:34:8e:80:95:a3:a7:22:59:15:55:47:26:c7:c2:8b:79:a6:
2f:32:ba:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:23:08 2026 by rpki-client