Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49b2b5d5-46a7-42a3-9900-bcb7e3edffdb.roa
File: 49b2b5d5-46a7-42a3-9900-bcb7e3edffdb.roa (raw, json)
Hash identifier: psS6jWK1+OPCT5Of34JtN16y6mmxipRDBA4IU0S1A3o=
Subject key identifier: 10:42:36:56:09:07:0F:FA:37:DC:60:8D:F2:50:D8:F0:EA:3E:50:D9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6A9A0950E464DB67BBDD438B73A2A92E8D01C231
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49b2b5d5-46a7-42a3-9900-bcb7e3edffdb.roa
Signing time: Tue 21 Oct 2025 14:50:06 +0000
ROA not before: Tue 21 Oct 2025 14:50:06 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.192.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:9a:09:50:e4:64:db:67:bb:dd:43:8b:73:a2:a9:2e:8d:01:c2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 21 14:50:06 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=3d68220f4e57986a5f2a7b3cf02b0b16df4bc2bdde4369100e5130a636a50f66, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:82:e8:7a:f5:6e:50:16:b4:f0:d5:c9:19:
6b:74:af:c2:fd:f9:06:00:74:97:91:a6:c0:45:aa:
48:a9:0a:7e:b5:e8:2a:89:13:5a:9a:27:01:00:74:
8d:fc:06:49:1b:ba:78:2f:12:f5:5f:e9:fc:77:63:
8f:fa:05:f9:2d:b6:8a:e3:1e:35:7f:52:b0:be:75:
7b:74:24:02:9a:b7:ec:54:83:9a:a3:a1:36:e9:2c:
a1:6e:a0:e7:2f:d5:9b:23:74:7d:12:9e:9d:09:93:
13:22:da:d0:ff:62:a0:89:45:0e:4e:23:40:ed:92:
08:29:ca:12:41:e7:96:4a:5f:4d:13:6f:8b:b6:2f:
2a:c2:a1:a9:9c:e1:99:26:5b:9a:2f:b2:7d:4e:cf:
45:e9:3e:7b:89:09:29:16:e0:bc:4a:13:7a:cf:51:
8b:63:25:6b:d1:65:cb:7d:cd:4d:13:8a:e9:1a:4e:
a5:91:54:eb:84:a3:1f:78:66:38:a1:bf:f5:a1:43:
36:37:6e:81:1b:bb:22:5c:3b:d7:1c:e7:48:1b:a8:
8e:1a:ae:41:fc:a9:03:d7:96:9e:49:5b:7d:4d:a9:
1d:71:fe:0c:73:00:7a:5c:6d:70:0f:e4:61:74:1c:
a5:0c:3e:e4:70:3b:66:fe:ae:20:98:d9:5c:a1:ab:
a7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:36:56:09:07:0F:FA:37:DC:60:8D:F2:50:D8:F0:EA:3E:50:D9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49b2b5d5-46a7-42a3-9900-bcb7e3edffdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.192.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c1:c9:00:2c:32:08:71:60:09:23:81:02:66:20:97:3e:3f:ef:
74:e9:bc:a8:e7:51:5c:c1:7b:09:ea:82:fe:67:a3:c5:28:d9:
29:81:c6:d4:32:bc:da:2e:7e:11:b7:6b:6d:fd:dc:fb:82:d2:
b7:7a:f5:21:08:82:a1:e9:c9:97:e0:b3:37:f9:1a:3e:bb:ee:
f4:12:9b:9b:8f:a7:a0:f9:80:a8:28:07:68:5a:76:85:de:96:
aa:53:c1:c5:00:2b:ed:38:28:30:f9:16:64:ba:a6:fb:b3:eb:
c4:53:93:12:7b:56:18:e2:db:f9:22:39:33:37:d1:5d:8d:4a:
61:f1:9d:9a:87:b1:60:be:bf:68:9b:f6:9a:2b:6d:da:0b:0c:
f3:bf:f6:d3:02:bd:5e:36:b2:8c:d0:57:8a:3b:9c:f2:30:fd:
3b:e0:90:e8:1d:36:13:b7:6d:cf:07:62:0f:fb:e1:85:da:53:
ef:1b:3f:97:8c:d7:70:ea:01:99:a2:67:de:36:f5:49:0d:88:
60:ca:5a:d0:5e:8d:9f:70:6e:e9:23:be:f9:46:58:1a:37:e2:
70:05:ff:4d:ed:0c:97:38:93:42:ba:2e:bd:81:7b:75:9c:9b:
20:9c:cd:e7:fa:57:f3:0f:73:11:56:7c:5d:0c:c2:d0:ba:82:
98:c1:92:f4
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUapoJUORk22e73UOLc6KpLo0BwjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTEwMjExNDUwMDZaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDNkNjgyMjBmNGU1Nzk4NmE1ZjJhN2IzY2YwMmIwYjE2ZGY0YmMyYmRkZTQz
NjkxMDBlNTEzMGE2MzZhNTBmNjYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKatguh69W5QFrTw1ckZa3Svwv35BgB0l5GmwEWqSKkKfrXoKokTWponAQB0
jfwGSRu6eC8S9V/p/Hdjj/oF+S22iuMeNX9SsL51e3QkApq37FSDmqOhNuksoW6g
5y/VmyN0fRKenQmTEyLa0P9ioIlFDk4jQO2SCCnKEkHnlkpfTRNvi7YvKsKhqZzh
mSZbmi+yfU7PRek+e4kJKRbgvEoTes9Ri2Mla9Fly33NTROK6RpOpZFU64SjH3hm
OKG/9aFDNjdugRu7Ilw71xznSBuojhquQfypA9eWnklbfU2pHXH+DHMAelxtcA/k
YXQcpQw+5HA7Zv6uIJjZXKGrp4MCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQQQjZW
CQcP+jfcYI3yUNjw6j5Q2TAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NDliMmI1ZDUtNDZhNy00MmEzLTk5MDAtYmNiN2UzZWRmZmRiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPAMA0G
CSqGSIb3DQEBCwUAA4IBAQDByQAsMghxYAkjgQJmIJc+P+906byo51FcwXsJ6oL+
Z6PFKNkpgcbUMrzaLn4Rt2tt/dz7gtK3evUhCIKh6cmX4LM3+Ro+u+70Epubj6eg
+YCoKAdoWnaF3paqU8HFACvtOCgw+RZkuqb7s+vEU5MSe1YY4tv5IjkzN9FdjUph
8Z2ah7Fgvr9om/aaK23aCwzzv/bTAr1eNrKM0FeKO5zyMP074JDoHTYTt23PB2IP
++GF2lPvGz+XjNdw6gGZomfeNvVJDYhgylrQXo2fcG7pI775RlgaN+JwBf9N7QyX
OJNCui69gXt1nJsgnM3n+lfzD3MRVnxdDMLQuoKYwZL0
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:00:34 2025 by rpki-client