Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa
File: 4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa (raw, json)
Hash identifier: 2M29heyaqFxOVAnbAoTudIblUCAMZYPplX6/xQEnVjw=
Subject key identifier: B3:22:95:A5:47:36:7E:25:56:70:4B:93:ED:29:6E:FE:B3:10:E1:1D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1E0B84F36BD76598DC7F25325AB2CFC0645992D6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa
Signing time: Sat 28 Feb 2026 06:40:37 +0000
ROA not before: Sat 28 Feb 2026 06:40:37 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.164.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:0b:84:f3:6b:d7:65:98:dc:7f:25:32:5a:b2:cf:c0:64:59:92:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Feb 28 06:40:37 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=0d9d37d47775589a987ead965ec437c206df108af5055820a35f90e9b9661f3e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:a6:57:41:6c:e0:1b:69:e1:7c:84:7e:37:
2d:20:23:7b:08:a5:9f:ef:db:c4:e0:00:5b:39:35:
72:af:41:2d:99:24:55:98:c8:26:9b:01:d5:86:91:
d3:dd:a2:40:c7:bd:81:85:08:75:50:26:52:3d:17:
15:4b:42:6b:87:4b:78:f9:55:f4:80:72:14:db:43:
69:fa:32:61:b5:f1:c9:b7:23:e3:26:5a:bc:26:ad:
a5:dd:89:c3:29:4e:ee:8c:85:21:35:11:9d:1f:f4:
48:b6:7d:5f:5b:8e:9a:17:5e:4a:81:72:80:6f:95:
4f:03:9a:0a:93:f2:3b:bf:13:94:28:76:d1:a5:43:
d2:1f:0a:2b:17:fa:f5:36:88:be:12:99:66:02:38:
36:45:a7:1c:b8:eb:9a:9d:93:43:20:d9:fe:84:fc:
7f:b0:15:11:62:f4:a6:31:b1:f0:45:d1:4d:18:b2:
78:37:7d:5d:a6:cd:ea:94:eb:17:a0:1f:48:fd:d4:
9b:25:46:b8:9d:2d:67:68:bb:f1:33:79:d0:f9:d9:
af:1a:0c:c7:bf:4f:70:2c:3d:52:d6:b8:6f:98:23:
53:d8:a2:7c:34:4a:1a:18:2d:6e:d5:a7:64:08:72:
99:ab:13:13:fa:9c:2c:71:c2:83:16:a2:d5:36:0d:
ae:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:22:95:A5:47:36:7E:25:56:70:4B:93:ED:29:6E:FE:B3:10:E1:1D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.164.0.0/15
Signature Algorithm: sha256WithRSAEncryption
5e:5e:33:87:5b:c0:20:e0:a5:98:b2:b1:1e:dd:b5:b3:fc:c6:
ea:e0:f4:11:05:fe:af:0f:dc:e2:18:f6:72:7c:50:58:9c:e9:
8e:3b:82:14:98:c7:5c:69:7e:a9:c6:42:46:85:4f:d3:5f:5f:
e1:50:91:4f:e9:4e:42:2a:a2:72:dc:33:7e:a7:55:1c:26:0c:
40:f0:48:48:58:a3:40:12:e9:9d:9a:e0:95:4f:cf:88:cb:79:
87:90:18:db:35:8f:15:5d:ef:50:12:dc:00:71:83:7f:3c:27:
44:3e:e1:21:45:b2:59:8d:02:8a:bd:3a:d7:27:51:1c:63:35:
43:58:5c:5d:86:5c:89:a9:bc:de:82:ff:8f:5c:f8:48:f7:4b:
af:fb:d2:12:3c:b7:27:b1:10:2e:72:0f:b8:14:99:29:22:39:
30:d5:61:9e:47:e3:39:52:db:46:7b:7c:e5:5c:86:be:3b:5c:
5e:57:41:9f:78:26:7f:18:95:12:23:ab:47:29:21:aa:bc:b7:
41:0c:fd:de:ee:bf:cb:b8:23:0e:02:cf:91:54:5a:79:58:f7:
c1:df:c6:46:68:1c:98:41:3e:a0:70:8e:1e:86:8b:85:69:b9:
e1:b6:e8:b8:de:e9:bf:f2:d4:ae:f9:f3:41:3e:c7:d8:99:b1:
96:0a:bf:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:50 2026 by rpki-client