Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2fc6a253-dc60-4611-8bc0-f4b11851ccf1.roa
File: 2fc6a253-dc60-4611-8bc0-f4b11851ccf1.roa (raw, json)
Hash identifier: nYSY2DXsSio+BWg6kRGLP8uPzpyQBMHwsCTK7HqQCuI=
Subject key identifier: 35:7F:DB:2F:73:56:86:BB:8F:DB:CB:0A:70:24:26:14:D2:2E:4B:AC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 78B2870A2EFEFED6AE65CC55087154C41CCE480D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2fc6a253-dc60-4611-8bc0-f4b11851ccf1.roa
Signing time: Mon 26 Oct 2026 05:40:20 +0000
ROA not before: Mon 26 Oct 2026 05:40:20 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.127.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b2:87:0a:2e:fe:fe:d6:ae:65:cc:55:08:71:54:c4:1c:ce:48:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:20 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=76e2d48114bcc76717a05e0c9a469f82d8e0acbdd0c1d93a0495ef64c04384df, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:31:12:47:01:99:a0:3d:c9:df:b0:2b:de:
3e:9d:ea:3c:79:46:36:a6:62:6f:89:3d:43:22:56:
c8:03:f5:8f:84:33:53:cd:3b:4c:e9:b3:41:b6:6c:
a7:50:af:79:cf:2a:c7:66:62:9b:e6:fa:87:53:ae:
0c:cc:72:29:70:c3:a1:f7:da:f1:9a:04:28:da:bb:
ab:ab:0f:84:6d:32:8e:cf:1b:61:e4:20:d2:23:12:
c9:21:73:a6:51:c8:7d:63:2c:bc:1b:03:77:16:d1:
bb:86:93:0c:11:f3:c2:1c:3c:11:31:86:0f:b3:d9:
a9:1a:3f:b5:6d:73:1e:44:3e:b5:99:62:70:e6:0a:
a0:a8:b2:c9:72:e1:e5:14:0f:7a:78:7b:d8:88:dc:
f1:5a:75:ec:f8:ac:54:10:bf:3c:cb:0f:dd:78:3f:
b3:da:05:91:bb:cc:07:9d:07:e4:2c:5a:4d:d4:18:
1d:5e:87:99:68:55:d2:5a:0d:69:70:8d:ed:35:d2:
58:02:01:89:f7:74:e3:e8:6d:a4:43:08:d0:0a:7a:
e7:59:8f:0d:b0:b8:e3:42:f2:d9:3d:a8:01:f6:f1:
91:4d:fe:81:75:b8:c4:ba:97:4d:03:41:14:9e:ac:
0f:69:42:1c:a9:0a:f6:17:0a:e0:89:4c:35:18:68:
73:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7F:DB:2F:73:56:86:BB:8F:DB:CB:0A:70:24:26:14:D2:2E:4B:AC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2fc6a253-dc60-4611-8bc0-f4b11851ccf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.127.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c2:6b:7b:e8:54:65:a4:02:7c:5b:9b:f9:85:e4:f0:84:3d:df:
7d:94:75:8a:a5:d0:e4:a8:30:7a:59:11:89:f1:d7:55:58:fe:
ca:08:05:0a:84:f1:7a:0b:a6:86:bf:22:8a:cf:e3:b0:b1:1b:
64:d2:33:bc:6f:1b:0f:f9:e3:6b:99:ee:fe:c4:73:85:18:bf:
ed:2a:88:da:db:a8:d7:83:f9:4e:9f:ed:1c:06:b7:52:4e:38:
d5:71:fd:f8:e2:82:ea:14:ab:1b:22:02:3f:f1:59:05:1b:39:
19:09:bd:06:b9:58:aa:2b:ab:98:e7:a2:14:50:f9:ce:fc:e3:
49:a0:a1:78:49:e4:ea:dc:ea:75:42:bb:ce:f2:e0:c7:3e:7c:
cf:99:14:a3:00:c6:a6:a4:de:b2:af:cd:ab:d7:ee:9e:94:7d:
da:d3:e9:36:86:e3:55:c3:b5:3b:35:a6:a7:be:35:d4:c8:76:
91:d5:f0:be:c5:a8:b5:6f:df:97:66:d2:3a:93:d9:83:af:f8:
69:46:e3:ad:30:e0:9e:10:75:9c:10:2c:30:c8:d7:ac:21:39:
87:e6:18:51:c5:de:05:9c:7a:a7:ec:db:c5:55:b3:47:b7:c0:
4a:2b:50:f8:5b:90:ed:f4:60:e0:99:2a:fa:10:dd:26:07:d3:
c2:78:a6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:29:26 2026 by rpki-client