Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/00796b4b-abd1-4104-86d8-cd52d074bf53.roa
File: 00796b4b-abd1-4104-86d8-cd52d074bf53.roa (raw, json)
Hash identifier: U9YKidbOHnHcfN+jsfI3ESHf2WpGUUu3F17LnEnFMuc=
Subject key identifier: 15:CB:93:D0:19:31:FB:A6:DD:6B:FE:13:E0:CF:35:3D:79:56:1F:6D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1C23F8634BEDB644808B6F6F59746D127C735FAA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/00796b4b-abd1-4104-86d8-cd52d074bf53.roa
Signing time: Mon 21 Sep 2026 18:22:58 +0000
ROA not before: Mon 21 Sep 2026 18:22:58 +0000
ROA not after: Sun 20 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.168.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:23:f8:63:4b:ed:b6:44:80:8b:6f:6f:59:74:6d:12:7c:73:5f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 21 18:22:58 2026 GMT
Not After : Dec 20 23:59:59 2026 GMT
Subject: serialNumber=c32ee22fb19e81e9a2374a7b673c3c24aa6518d729d2fddd889eab481d67f973, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0e:7f:36:22:50:ed:35:c4:29:e2:90:65:73:
bb:d5:54:f5:38:04:11:76:0d:41:3d:1a:fb:53:f0:
eb:6d:5b:95:d2:d4:13:ba:74:2b:92:50:23:ec:59:
a4:28:90:f1:89:44:85:d3:f5:72:5d:7f:07:b7:34:
2d:42:bd:f1:bf:0c:2f:81:53:0d:c4:d4:1c:0b:88:
74:a6:a0:d9:1a:cc:fe:63:67:9c:8f:21:6b:c0:39:
10:a8:37:ab:0c:ee:00:de:ea:cd:01:a0:d9:64:3d:
35:5f:61:9c:27:20:32:41:e0:ea:a7:01:7e:ae:a3:
45:55:4a:25:63:b2:0d:e6:d6:27:bb:fc:77:5a:d6:
4f:45:5c:6d:ac:6f:78:16:3f:04:b2:f4:65:27:46:
4b:cf:0f:74:f6:09:b9:ac:5a:38:ea:42:17:89:c5:
73:4d:9e:e1:08:37:10:82:1d:6e:26:7c:84:54:b0:
83:fb:cf:4e:59:7a:77:70:02:79:e4:c8:22:d4:cc:
74:55:e2:69:a7:c8:8f:5b:8d:a3:03:49:73:5e:ba:
84:3f:25:2d:5f:60:14:ef:8a:6e:ea:f3:55:00:20:
a0:b2:e2:e6:31:61:11:b3:f7:80:a6:c5:9a:f2:db:
b5:44:3e:a0:b7:11:dd:77:21:a7:58:6a:36:9a:1d:
ea:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CB:93:D0:19:31:FB:A6:DD:6B:FE:13:E0:CF:35:3D:79:56:1F:6D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/00796b4b-abd1-4104-86d8-cd52d074bf53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.168.146.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:37:3d:44:5c:1c:00:80:1b:32:53:a6:56:e2:2d:6c:1c:f9:
df:61:57:f4:74:a8:65:5d:58:f5:a1:37:e8:3f:6d:bb:11:94:
3e:29:4e:2c:0f:39:29:55:4e:89:e4:8f:53:2c:c3:e6:60:b0:
9d:90:d3:12:7f:d9:5c:60:a4:27:37:5c:2a:68:0a:81:74:07:
b9:4f:0c:75:b1:de:e9:54:db:17:51:0a:6d:fc:a3:96:3b:74:
94:5b:6a:7c:e5:06:a9:2e:0f:a7:99:24:ac:82:9c:72:d6:51:
37:3c:36:17:14:86:3e:f8:f4:19:b2:08:37:54:a4:1d:32:92:
83:d6:b0:67:ea:cb:b3:3a:34:da:76:07:c7:d8:99:a1:58:fb:
e5:a1:00:46:9b:5c:34:00:bc:95:66:69:63:82:b8:44:34:89:
3b:36:08:9a:6c:29:95:a6:d5:d6:63:f7:11:2d:bf:55:9b:da:
46:11:5c:f8:70:8d:b5:a3:be:bb:b8:48:46:26:b6:23:0b:e3:
e2:28:8d:e3:fd:37:10:02:d4:d2:c7:14:59:a0:bf:3f:4a:65:
82:42:ec:c7:51:5e:26:da:df:08:c8:d3:65:c1:56:74:48:ff:
a0:a3:44:5b:03:10:18:4c:85:e8:d6:db:f9:b6:30:ad:54:2d:
bd:ac:78:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:32:28 2026 by rpki-client