Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/02d707a3-bf41-4da2-aff1-ee763071324a.roa
File: 02d707a3-bf41-4da2-aff1-ee763071324a.roa (raw, json)
Hash identifier: NxnY2J25aW8fsRCeCFjHsYQesnxP02a3VSvgfQivVhc=
Subject key identifier: 9C:F3:8E:48:7C:F8:80:BF:86:09:78:CF:81:C7:CA:32:1F:69:8E:E7
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 227574A5CB4F6204B421231B7FF0F88764A22EA3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/02d707a3-bf41-4da2-aff1-ee763071324a.roa
Signing time: Thu 15 Oct 2026 00:20:09 +0000
ROA not before: Thu 15 Oct 2026 00:20:09 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.24.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:75:74:a5:cb:4f:62:04:b4:21:23:1b:7f:f0:f8:87:64:a2:2e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 15 00:20:09 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=cacb6306102a1ad7914c0c1474fac82e5c81c573f4420c8889f98dbb9370336e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:1b:c8:c7:45:6e:19:ce:79:62:e8:c8:8c:
ce:e2:28:69:cc:b9:45:61:4d:49:72:5a:2b:62:96:
19:af:fb:6a:66:21:a3:5d:9d:58:05:d8:57:5b:79:
0a:57:df:e8:fb:c0:2b:2b:4a:34:5b:27:7c:eb:94:
88:46:2c:75:99:e1:8d:8b:5e:9c:2c:0c:f8:18:67:
b1:e3:34:9a:dd:b2:35:f6:a6:d8:08:68:61:b6:0b:
57:c2:25:9b:88:2e:eb:96:7d:3f:1d:4a:80:11:9e:
ee:41:3d:f9:ed:39:15:e8:5e:c9:7f:5d:a8:c2:01:
07:79:d0:77:ac:5f:67:fc:83:4c:dc:f6:07:47:86:
a5:a8:d9:16:ec:be:15:bf:70:8c:fb:d8:0b:28:b5:
78:58:36:18:d0:28:ac:9a:ca:88:6f:6e:bb:dc:b9:
3e:fd:c5:96:e8:ba:15:af:fb:3f:e6:bd:1f:c4:e8:
af:28:ed:10:17:09:e4:ac:ec:33:b3:c7:2b:44:34:
6c:50:ba:f6:37:98:e2:6b:03:1e:f9:b9:85:eb:b5:
52:c7:ee:c4:f2:d8:fb:90:22:06:ae:49:8a:c0:00:
2f:13:1d:58:db:e2:dc:56:1b:7b:dc:81:44:79:c8:
00:e3:9c:e0:00:88:0f:39:e2:d4:b5:ec:6a:d6:dd:
50:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F3:8E:48:7C:F8:80:BF:86:09:78:CF:81:C7:CA:32:1F:69:8E:E7
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/02d707a3-bf41-4da2-aff1-ee763071324a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.24.162.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:d5:a8:19:89:c4:9d:54:97:1f:49:0d:5d:cb:d8:5c:e5:01:
e6:40:d6:73:5d:0c:90:45:6e:ac:22:2a:88:f2:89:2e:2e:37:
ae:15:4b:d1:61:d1:c9:3d:c1:6e:a0:90:7b:e4:03:14:33:ae:
27:fa:d7:2a:95:d8:5f:9a:60:8e:9e:d9:38:08:e1:e6:24:fe:
ea:e1:5d:05:69:f2:23:0f:28:c7:7a:b4:ea:75:0d:66:d5:ac:
13:e9:27:e7:c6:6e:33:9c:8f:97:82:a9:13:30:64:2e:a0:c0:
12:c2:8d:ac:11:d9:e1:fd:3a:e9:60:cf:39:08:ad:7d:5f:d3:
14:aa:be:5a:72:27:4f:73:19:40:05:6d:30:8b:d3:67:2c:b4:
d0:0f:13:52:6f:2a:08:57:99:68:0e:82:8a:1f:8f:01:17:0a:
a0:2a:3a:d3:43:fb:2f:36:67:88:67:8d:2f:03:d8:2e:0f:59:
fc:93:a5:de:3d:1c:4e:2e:cb:cb:14:24:f5:c9:49:8d:72:7e:
22:f1:4b:98:bc:cb:9e:b7:39:48:5e:37:7f:27:41:f3:82:b0:
63:66:f7:c4:c4:31:4c:49:e7:a9:2a:b4:a9:1b:59:67:12:f2:
dd:98:5a:b9:c3:41:ed:cd:c8:76:8e:4b:08:43:84:78:a1:ec:
8d:41:7a:6d
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUInV0pctPYgS0ISMbf/D4h2SiLqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMTUwMDIwMDlaFw0yNzAxMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQGNhY2I2MzA2MTAyYTFhZDc5MTRjMGMxNDc0ZmFjODJlNWM4MWM1NzNmNDQy
MGM4ODg5Zjk4ZGJiOTM3MDMzNmUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANyeG8jHRW4Zznli6MiMzuIoacy5RWFNSXJaK2KWGa/7amYho12dWAXYV1t5
Clff6PvAKytKNFsnfOuUiEYsdZnhjYtenCwM+BhnseM0mt2yNfam2AhoYbYLV8Il
m4gu65Z9Px1KgBGe7kE9+e05FeheyX9dqMIBB3nQd6xfZ/yDTNz2B0eGpajZFuy+
Fb9wjPvYCyi1eFg2GNAorJrKiG9uu9y5Pv3Flui6Fa/7P+a9H8ToryjtEBcJ5Kzs
M7PHK0Q0bFC69jeY4msDHvm5heu1UsfuxPLY+5AiBq5JisAALxMdWNvi3FYbe9yB
RHnIAOOc4ACIDzni1LXsatbdUA8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSc845I
fPiAv4YJeM+Bx8oyH2mO5zAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MDJkNzA3YTMtYmY0MS00ZGEyLWFmZjEtZWU3NjMwNzEzMjRhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATMYojAN
BgkqhkiG9w0BAQsFAAOCAQEAXNWoGYnEnVSXH0kNXcvYXOUB5kDWc10MkEVurCIq
iPKJLi43rhVL0WHRyT3BbqCQe+QDFDOuJ/rXKpXYX5pgjp7ZOAjh5iT+6uFdBWny
Iw8ox3q06nUNZtWsE+kn58ZuM5yPl4KpEzBkLqDAEsKNrBHZ4f066WDPOQitfV/T
FKq+WnInT3MZQAVtMIvTZyy00A8TUm8qCFeZaA6Cih+PARcKoCo600P7LzZniGeN
LwPYLg9Z/JOl3j0cTi7LyxQk9clJjXJ+IvFLmLzLnrc5SF43fydB84KwY2b3xMQx
TEnnqSq0qRtZZxLy3ZhaucNB7c3Ido5LCEOEeKHsjUF6bQ==
-----END CERTIFICATE-----
Generated at Wed Nov 11 14:15:21 2026 by rpki-client