Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05a39f1a-73ed-434c-b9e0-b1dc5d56a0fd.roa
File: 05a39f1a-73ed-434c-b9e0-b1dc5d56a0fd.roa (raw, json)
Hash identifier: et1tDhvwwPh0jjDYqWQdWnjGdbDovbR7ZqxHzmDhF6g=
Subject key identifier: 96:1F:E5:40:64:6C:59:A4:31:D9:CB:82:2E:08:37:FF:3E:5C:5D:D1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0260A52B24667B1574153003BDACB2EC86F4EA27
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05a39f1a-73ed-434c-b9e0-b1dc5d56a0fd.roa
Signing time: Fri 16 Oct 2026 00:08:25 +0000
ROA not before: Fri 16 Oct 2026 00:08:25 +0000
ROA not after: Thu 14 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 51.102.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:60:a5:2b:24:66:7b:15:74:15:30:03:bd:ac:b2:ec:86:f4:ea:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 16 00:08:25 2026 GMT
Not After : Jan 14 23:59:59 2027 GMT
Subject: serialNumber=0c86e590d4d89170bba316672aff68af48229c487554ca5615afb3ac17e7fd35, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:01:00:57:b2:9f:4a:b7:cd:32:03:47:83:8f:
9f:2b:ce:c1:d8:08:a4:f9:7a:dc:46:b8:51:15:f4:
89:ab:37:dd:56:c4:51:7c:d6:57:67:32:6e:29:e7:
36:be:c8:d0:39:99:f1:96:55:89:56:08:f6:f1:3c:
ec:04:36:53:93:58:c9:83:e0:51:79:b6:60:b5:5d:
98:70:dc:c7:6a:dc:67:d8:39:5c:a3:a4:d8:29:72:
8e:73:bb:54:f2:49:c8:97:20:0a:10:ea:cf:89:56:
15:08:3b:e5:85:29:f8:4d:9a:f7:c6:5d:32:fd:35:
86:4a:e4:6f:3c:ec:3b:6c:54:3d:1f:8f:4b:e7:31:
40:53:8a:ba:63:44:59:4f:21:16:4d:8b:7a:11:3a:
38:51:57:db:a0:01:c0:f4:e0:4a:8d:89:1f:38:2a:
c6:ab:fb:12:0c:c1:de:dc:bd:51:0e:7d:c5:69:96:
e6:66:27:f9:75:e4:62:84:16:1f:2f:e1:6f:ae:4d:
05:50:09:8c:c0:79:1b:33:d4:a7:f2:40:c0:bf:32:
8f:9a:a2:47:40:8e:f8:2a:16:b3:1b:87:ba:82:16:
a5:43:0e:3d:70:bb:11:36:59:4f:ba:c1:16:ff:47:
b9:37:62:9a:cd:ad:72:58:65:96:03:b4:09:b0:7a:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1F:E5:40:64:6C:59:A4:31:D9:CB:82:2E:08:37:FF:3E:5C:5D:D1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05a39f1a-73ed-434c-b9e0-b1dc5d56a0fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:9f:8a:ec:92:8f:ae:7a:6d:ce:04:13:66:ac:40:37:24:de:
e9:ae:c9:7b:c6:47:e1:d8:62:38:14:98:97:07:97:80:62:6f:
fa:db:7b:65:be:9a:fb:a4:30:7b:20:d6:5d:42:9f:c7:22:25:
13:1b:da:db:f4:3c:58:91:2d:0c:a2:e5:4a:bc:29:e4:32:78:
a4:af:3c:05:47:f1:5d:ca:10:b6:75:aa:89:2d:dd:f9:90:91:
c0:8c:e1:89:d3:cf:ef:38:1f:3d:6a:d5:cc:fb:14:41:e7:38:
1c:c9:9a:fd:ad:c5:c3:53:9f:6a:43:2d:c0:5d:44:8f:2b:e9:
39:c7:f6:d6:d3:4f:87:bb:62:43:b8:db:04:43:47:71:8c:58:
35:d8:3c:f0:80:01:ec:4d:c7:00:34:31:6b:cd:19:4c:01:90:
7d:93:a0:fb:bb:ff:96:de:2a:cf:a0:7b:51:bd:15:33:1f:b3:
44:c6:90:1d:bf:c2:23:45:72:fd:d1:ef:14:9b:ac:0e:9e:2e:
cb:f6:02:68:4f:d7:5e:60:ea:86:d4:68:ca:23:41:bf:93:85:
54:06:ec:e9:64:9b:8d:5e:ee:7e:32:dd:85:30:9d:d1:94:4c:
b9:b7:74:bc:28:11:49:0f:1d:be:81:58:81:21:69:bc:6e:16:
a3:38:d0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:34:04 2026 by rpki-client