Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/51429a37-e3fd-4b49-a184-1e07ed522f97.roa
File: 51429a37-e3fd-4b49-a184-1e07ed522f97.roa (raw, json)
Hash identifier: AY7h2BGK+m1oOz8Kf1hjD054XYbrW7lcVHZeg/193BE=
Subject key identifier: 0D:F4:1C:68:94:0C:CD:C4:AC:AC:B8:FC:54:C7:CB:0F:7C:9B:BD:24
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5CA62D77FC85E7C451E6420DB686D8D6651D8A7D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/51429a37-e3fd-4b49-a184-1e07ed522f97.roa
Signing time: Mon 26 Oct 2026 05:40:18 +0000
ROA not before: Mon 26 Oct 2026 05:40:18 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.3.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a6:2d:77:fc:85:e7:c4:51:e6:42:0d:b6:86:d8:d6:65:1d:8a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:18 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=f246631f96d20eb9288cf62d9309a02bc648e9010a02616eef63e85569b33ee5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:94:97:d2:ba:9e:40:0b:6a:6b:19:1c:a1:4d:
1f:b5:72:f7:f0:f9:5b:88:b9:15:98:9c:ab:a8:d9:
a5:dd:c0:37:79:d9:65:95:8b:bd:56:02:c9:3f:31:
05:1b:80:52:ca:e8:65:17:e1:8d:b7:51:2b:35:b7:
2c:06:25:a4:a8:2a:1e:3e:b1:57:aa:94:2c:c9:44:
bd:e7:98:59:4c:20:ff:bc:55:be:3e:18:3b:42:f7:
2c:0f:2a:74:52:8a:79:0f:38:ab:c3:4a:f6:63:8b:
52:a5:78:0f:13:09:54:5e:85:4a:2f:f0:06:40:23:
e6:9f:2c:19:a7:d8:c3:a5:3a:90:17:67:b7:95:15:
da:2f:44:95:7d:27:2a:0d:e6:21:3a:c2:cf:5c:8c:
71:b8:2f:69:72:f3:1c:65:b2:3f:e9:12:b4:9f:10:
f5:98:42:77:c3:a2:6a:a9:bc:78:78:a8:2a:85:c4:
97:d2:de:ba:ba:73:4b:fe:2f:87:cf:d5:23:1b:86:
fc:8d:79:36:e7:a0:d7:43:3b:24:37:af:90:34:95:
bf:fe:e7:3b:56:91:80:8a:7d:a3:a5:85:0e:ea:97:
2a:05:69:d9:4f:e3:77:95:c0:66:d0:32:fa:fe:35:
88:70:b5:31:9d:a5:60:97:ff:bd:67:1d:6a:b1:5f:
f2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F4:1C:68:94:0C:CD:C4:AC:AC:B8:FC:54:C7:CB:0F:7C:9B:BD:24
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/51429a37-e3fd-4b49-a184-1e07ed522f97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:34:91:2f:27:bd:25:79:ab:38:03:51:c7:6b:af:af:bb:75:
4a:c5:a0:36:76:37:c8:8c:41:64:0b:c2:e8:e9:06:d9:13:c9:
8a:61:b4:5a:43:bf:d3:50:72:c4:05:e6:8f:8a:4a:05:7a:50:
80:68:bc:d2:10:75:3e:22:73:f1:b8:e8:bb:01:57:17:37:13:
b4:41:83:47:ac:8b:ec:1d:f8:37:2b:a5:1e:b9:de:fb:04:37:
c8:24:e6:71:56:74:cc:fc:c1:ea:b9:8c:b9:43:94:c4:78:cb:
16:e4:b1:40:b5:51:82:27:dc:a1:01:ec:a2:97:fc:8d:6b:2b:
d1:2c:97:91:5d:f7:cf:76:2c:df:64:29:1a:69:6c:16:cf:72:
a8:6b:70:99:9b:54:9f:5a:da:51:2f:e2:df:90:37:37:af:8f:
8a:5c:3b:ea:45:d8:72:84:90:ca:64:8f:62:d2:3b:87:9f:08:
2a:4b:2b:b5:67:be:c5:1d:dd:db:5e:02:a1:ad:fb:14:5f:7a:
5b:d5:d2:f6:eb:68:71:a6:29:29:f9:64:9c:ad:d9:87:cc:35:
8d:45:f3:06:b5:0f:57:47:16:b8:48:ea:e2:2e:b1:3f:15:a6:
06:29:ba:6d:58:fd:4f:22:57:b9:fe:c3:0e:cd:13:ec:e6:88:
98:ba:4e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:49:27 2026 by rpki-client