Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bacf843a-17ee-4ca1-9e3b-8f3728814d21.roa
File: bacf843a-17ee-4ca1-9e3b-8f3728814d21.roa (raw, json)
Hash identifier: x4Q7yyKD3JaEwhFXbIxCYu7hJ65WuQRFJNJF2dVf2ww=
Subject key identifier: AC:D2:5E:CB:1D:51:21:39:CA:8E:77:9B:3C:F6:22:45:F7:B2:F9:DC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7A3494FBDA96CED9A8601A79BCB66F72EEA4C1F7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bacf843a-17ee-4ca1-9e3b-8f3728814d21.roa
Signing time: Mon 26 Oct 2026 05:40:38 +0000
ROA not before: Mon 26 Oct 2026 05:40:38 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 51.100.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:34:94:fb:da:96:ce:d9:a8:60:1a:79:bc:b6:6f:72:ee:a4:c1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:38 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=210a4c2acb38cffdeb385c6deee19e633781aaa6e4dbfd13c1b097fef7df6e91, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:5c:3b:97:d7:70:9d:d0:c5:3f:32:40:59:
1e:2c:c9:1f:0e:ef:5c:77:74:7e:34:1d:8c:0e:ff:
36:2a:27:e7:a6:a2:2e:f7:e1:d9:4f:4b:79:f4:8b:
a0:81:a7:47:84:a6:a5:ba:c7:52:60:6b:63:de:57:
20:9b:7b:85:5b:dd:01:68:be:e1:77:8d:fe:46:bf:
9c:c0:3f:28:4d:1f:07:76:78:b0:23:f5:7c:1e:04:
9c:76:11:62:53:8d:92:d1:e0:8f:63:80:fb:5a:fc:
97:b1:4d:03:c0:ec:06:54:60:e5:fa:c9:62:61:f0:
0b:11:54:90:d5:df:6e:85:29:b0:7b:6f:d0:9f:39:
e3:8d:4a:6d:26:55:fd:7f:ab:cc:d6:89:87:bc:9d:
18:0a:61:60:af:66:1a:98:91:fa:ef:a3:e0:34:69:
32:b9:36:c1:3c:e2:b3:20:6e:57:c3:4e:41:a8:2d:
cb:8a:f1:0a:04:41:10:eb:81:b5:1d:be:60:37:ed:
9d:4d:e4:ed:47:4e:92:dd:c4:23:cd:b6:4e:e4:14:
24:f8:31:8a:27:d4:69:0e:44:de:bb:26:eb:39:9d:
a3:74:c9:9d:03:b2:67:6f:f2:90:ef:79:7c:fe:25:
a7:71:3c:5d:8f:13:86:e7:91:72:9f:f4:b2:ee:bf:
81:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D2:5E:CB:1D:51:21:39:CA:8E:77:9B:3C:F6:22:45:F7:B2:F9:DC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bacf843a-17ee-4ca1-9e3b-8f3728814d21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.100.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b0:81:9d:44:a4:ee:8b:0f:c5:a9:5c:c8:81:26:2d:8f:5d:a8:
df:ec:dc:f5:1e:c9:51:77:4f:29:ad:04:95:0f:44:11:f6:27:
52:e7:04:b4:77:17:9a:31:73:d2:aa:bb:cf:be:04:ee:14:ef:
a9:d1:56:6b:cc:92:ee:13:54:f9:2d:e3:c4:5c:86:6b:64:da:
96:8a:25:ab:b2:11:1c:c0:5f:45:ec:61:7b:d3:cd:ca:50:0d:
97:8f:08:fb:30:7c:ee:64:b4:ae:61:07:dd:4e:b5:c1:66:63:
6c:0d:38:e6:9f:4e:79:b5:5b:e8:eb:5e:37:1f:f5:ec:6b:4c:
3d:23:b3:84:64:c2:67:46:77:14:11:48:42:6c:91:09:c5:95:
87:ef:a8:0b:24:b0:3a:ff:9a:13:5b:86:3b:cc:f2:d9:dc:f8:
f8:81:65:a8:de:3b:56:d5:ed:66:49:1b:ef:57:13:c5:5f:98:
32:96:35:bc:eb:24:7c:13:b2:f2:39:47:bf:cc:ce:8d:f8:3f:
79:99:7a:3a:c8:3c:ea:6f:5f:4c:6f:32:78:93:04:d2:15:a6:
72:d2:ec:8a:47:40:81:85:3f:1a:94:9d:13:d6:38:6e:1a:3f:
ff:38:03:bc:63:87:cf:f9:f3:d8:31:a2:2a:2a:8c:8f:bc:6d:
ab:36:da:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:58:51 2026 by rpki-client