Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cac574-b448-47b5-a751-22dfd7293698.roa
File: b2cac574-b448-47b5-a751-22dfd7293698.roa (raw, json)
Hash identifier: 6sSgcxlEg7RAveE0j3mS2n+aMTwBqbEzqi0bkVPOfKU=
Subject key identifier: AA:16:DC:1A:A7:DA:CF:F2:0F:93:CF:42:E0:41:D8:EC:43:EC:9A:AB
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 24BED00B9B272285F8F4211A461C91E33539A9F0
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cac574-b448-47b5-a751-22dfd7293698.roa
Signing time: Tue 28 Jul 2026 00:30:12 +0000
ROA not before: Tue 28 Jul 2026 00:30:12 +0000
ROA not after: Mon 26 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.102.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:be:d0:0b:9b:27:22:85:f8:f4:21:1a:46:1c:91:e3:35:39:a9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 28 00:30:12 2026 GMT
Not After : Oct 26 23:59:59 2026 GMT
Subject: serialNumber=b4b273730af7f0d5b46234e52404b92eac8ddb1e386ab4b9319523dc850859c5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:71:3c:6c:38:70:4a:8d:0d:a4:c8:ef:16:18:
e4:1a:49:5c:00:7a:5f:fe:83:bc:04:b3:67:36:de:
26:2b:ca:b8:51:77:a8:8d:a5:97:7f:c0:79:9b:7e:
7f:f6:0d:1e:cc:98:9a:b0:d0:e9:05:6e:b2:2f:2b:
9e:98:22:c9:82:fe:66:d2:bd:97:3f:4e:42:f8:a0:
c0:a4:da:bc:db:d7:d4:e2:c8:62:82:6e:b3:f7:e8:
18:dd:fe:b6:d2:09:dc:69:6f:3e:0c:7e:c7:aa:11:
b9:2d:fe:f2:09:52:5b:4e:55:97:08:d8:10:e7:c7:
e6:28:b2:7f:a0:f6:a9:4a:8c:89:76:f0:7a:4e:cc:
80:14:cd:c3:ca:3b:f2:50:6d:ac:60:ff:c4:49:ca:
7d:56:ac:b5:cf:a5:2c:ae:e5:24:c7:e8:22:ff:00:
52:fe:48:59:a5:66:e9:41:91:3f:cd:60:b6:96:a5:
06:f4:0c:7c:46:04:d7:23:a1:b0:0c:7f:c3:df:b0:
ab:35:0a:bb:b2:1f:23:36:04:c8:64:66:d7:d9:f3:
72:86:3d:35:05:42:df:2a:6c:8b:92:cd:df:b1:33:
ea:70:b5:a5:1a:27:e1:de:0d:da:4d:d7:a1:5f:12:
0e:7c:4c:9a:63:3f:0c:7a:08:d5:f3:2f:58:44:78:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:16:DC:1A:A7:DA:CF:F2:0F:93:CF:42:E0:41:D8:EC:43:EC:9A:AB
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cac574-b448-47b5-a751-22dfd7293698.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:8e:6e:1b:28:0a:ca:9a:1a:c4:8b:68:50:9a:c9:8b:65:32:
10:78:09:d0:c1:b1:6b:5e:84:93:49:1c:63:d7:d4:4e:08:07:
7c:e7:a4:80:0c:a7:09:4b:16:73:00:3e:0e:f9:5c:de:0b:ed:
b4:82:8d:68:b3:86:cf:98:06:41:35:75:2f:61:fc:bf:33:21:
41:c1:5f:c8:a3:cd:e0:07:fb:de:de:2c:44:1f:95:f9:7c:ca:
80:a0:c2:fc:3f:2f:7c:53:a8:a4:09:86:30:cc:91:ae:a8:7d:
d1:94:e7:89:01:87:08:af:26:51:3c:70:1c:28:ca:59:93:2e:
6c:86:85:90:82:18:38:78:5f:ff:ed:4d:5f:53:4a:a1:fc:fa:
06:a6:66:7d:bb:63:c3:c4:3a:94:f2:09:68:ed:b0:e5:5f:8d:
9f:c9:ec:69:d8:43:e3:ff:e9:b3:0e:9c:fc:de:56:8a:95:ea:
d9:80:a0:c9:13:98:41:60:76:7e:ff:06:53:36:01:8b:e1:ac:
7a:29:b2:c4:21:d8:96:0d:9e:28:6b:ba:8b:f1:f8:fe:d5:2c:
00:65:2f:a1:a9:a0:d9:95:1f:7f:de:9c:07:fe:6a:30:b1:6a:
09:82:7e:18:a5:81:06:3d:8c:cb:d0:22:03:21:04:16:5f:60:
57:e4:35:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:22:45 2026 by rpki-client