Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
File: 80a19bac-b522-4340-8501-74870117a3ce.roa (raw, json)
Hash identifier: aoX4maUVIdsKB2x3lPcjZwT7+qIR31O+hHS519nYZl8=
Subject key identifier: D0:1F:81:47:AF:50:AE:2F:53:D9:F1:E6:50:0C:AE:67:9A:E7:80:84
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 20188352469172A5CB0825C964369400074C61FF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
Signing time: Tue 21 Oct 2025 14:40:37 +0000
ROA not before: Tue 21 Oct 2025 14:40:37 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.80.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:18:83:52:46:91:72:a5:cb:08:25:c9:64:36:94:00:07:4c:61:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 21 14:40:37 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=5774fff37e5fd5fb3989d0adc911a86d77eaac27d67d6d067021b5389c3a228e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:f4:a3:87:4f:c6:16:6e:f1:c6:39:52:be:
f7:c0:ca:b6:ff:66:9f:30:f1:35:59:fa:0c:9c:a6:
69:ec:69:5f:23:de:06:49:8e:52:48:7d:5c:57:f6:
5c:dc:71:8a:73:7b:26:02:1e:96:8f:f2:59:45:49:
9e:3f:d0:57:4e:6a:90:5f:cf:e2:5c:fd:4d:95:db:
b1:a6:75:48:aa:f0:4e:8e:65:e9:cb:5f:94:35:b3:
9d:93:98:2d:b3:3d:f9:ef:b0:60:21:bd:93:d7:4e:
c8:07:fa:2e:a1:1b:a8:39:6a:24:4a:cb:7f:4c:81:
0f:b7:06:53:cb:69:75:59:5e:d3:c3:7e:00:0f:6f:
a0:bb:48:b2:0f:1c:94:90:49:55:87:41:72:4e:79:
b2:c0:e5:9e:b8:6c:f1:21:80:fc:1d:4e:91:0d:fa:
4b:82:f6:dc:98:df:a6:f0:1c:92:17:65:79:bd:80:
be:82:c8:63:70:c4:a6:14:a1:f4:9e:1e:87:d7:42:
a7:8b:e5:10:0e:18:f6:85:0b:59:15:7d:2e:ce:6a:
57:cc:7b:b8:68:8e:39:ba:87:2b:90:23:2a:e9:d8:
dc:1e:a8:4d:2a:59:44:93:0d:40:9f:df:fb:f0:97:
4d:77:a5:43:9f:cc:cb:53:5a:41:0c:a0:fd:02:bd:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1F:81:47:AF:50:AE:2F:53:D9:F1:E6:50:0C:AE:67:9A:E7:80:84
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:3f:fc:cd:61:29:ec:f7:6a:6c:06:56:23:5e:0b:7f:20:7e:
c3:4d:1c:a4:2b:e8:ab:f7:5c:23:4e:1d:c4:a2:9b:86:1a:9a:
39:b5:65:c3:41:71:3f:07:ce:65:56:f5:6c:f9:87:fe:4d:71:
70:09:73:a7:c8:30:85:83:c2:23:8b:cf:59:dd:a1:d0:c9:d2:
68:c1:ec:a9:6a:fc:88:5b:f2:81:3c:1a:7b:37:ad:bd:48:12:
69:7d:ec:fb:a7:db:11:7c:01:fa:c9:54:39:5b:6e:50:bb:71:
ee:c4:03:26:d7:40:9f:65:3f:76:1f:fe:60:bb:ea:f2:ad:b8:
93:ea:87:d0:de:a6:9d:dd:3f:29:97:e4:43:c7:3e:b2:b0:6e:
75:56:9b:34:54:11:cf:36:fc:e2:54:0a:15:73:cf:31:ad:0b:
76:e9:f3:6d:0a:75:9c:e4:aa:bf:8a:df:5b:53:4d:57:a0:b9:
7c:14:dd:de:bd:56:e8:10:f9:4f:ea:56:68:5f:27:e2:d6:b2:
ee:e7:52:af:a9:c9:c1:8f:4d:45:a3:aa:21:3f:b9:7b:92:0c:
c5:03:5b:1d:96:9e:ac:08:30:9a:46:de:dc:ce:8d:64:6a:00:
22:c1:cd:57:4f:cd:81:4b:56:30:80:66:95:f1:e8:08:38:34:
47:db:63:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:32:09 2025 by rpki-client