Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/11164216-4299-4083-9b4b-7e6a857673fc.roa
File: 11164216-4299-4083-9b4b-7e6a857673fc.roa (raw, json)
Hash identifier: lbSJFE/GyLgFkJ1qQ0sJOB0cBQUmiS0QX8jWUvhxfoo=
Subject key identifier: 0D:86:66:5A:5C:86:88:2C:87:F5:78:EB:E3:AA:0E:7F:0E:FA:97:D0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 371E108487B40F8DB4BD1E215D649F7873D0F928
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/11164216-4299-4083-9b4b-7e6a857673fc.roa
Signing time: Mon 21 Sep 2026 18:22:57 +0000
ROA not before: Mon 21 Sep 2026 18:22:57 +0000
ROA not after: Sun 20 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.168.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:1e:10:84:87:b4:0f:8d:b4:bd:1e:21:5d:64:9f:78:73:d0:f9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 21 18:22:57 2026 GMT
Not After : Dec 20 23:59:59 2026 GMT
Subject: serialNumber=cf062ed561f12967d24b35043cf35fe9cfb3545c24335995ad73a9d9f3fbb145, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:ea:73:30:e8:b3:08:c8:ee:6e:0a:31:0b:
5b:3b:65:c2:c6:6c:76:6d:75:33:f5:c2:8b:af:65:
be:44:8e:eb:47:b6:5b:93:31:ef:a8:21:b8:aa:d5:
ce:8d:27:71:bd:e9:89:62:f7:43:93:c9:4a:02:f0:
31:7d:2b:a3:e9:dc:8a:23:03:8a:b0:4e:eb:09:f5:
44:8f:c2:a0:38:0b:2c:e1:a6:2f:87:9f:b9:fd:44:
e1:bb:68:49:81:c3:a9:94:ae:44:0a:28:bb:ab:91:
bd:12:5a:2f:69:77:a0:5f:f2:ba:88:5c:b5:0a:cb:
c9:78:5b:f3:6b:f9:80:78:c3:09:ed:0b:84:6c:f6:
84:0b:ac:91:ce:93:fc:34:fe:d0:ff:15:d7:b7:3b:
c6:f0:e1:12:86:2d:20:9c:72:f0:83:c2:92:07:42:
76:15:63:f9:aa:14:44:da:bd:59:11:bf:b3:40:35:
13:10:1a:3c:a8:59:8f:3a:85:2c:99:e2:28:d6:24:
ce:1e:ce:c0:21:17:0f:0c:26:9b:c3:be:7b:05:07:
31:7b:96:33:b2:0e:c9:9f:ba:9d:6c:98:c8:2e:f6:
93:6e:54:52:4f:a8:0c:cd:24:fd:a7:7e:b9:b3:79:
ea:aa:a2:bc:08:b6:28:6f:85:79:7a:fc:dd:4c:d3:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:86:66:5A:5C:86:88:2C:87:F5:78:EB:E3:AA:0E:7F:0E:FA:97:D0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/11164216-4299-4083-9b4b-7e6a857673fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.168.145.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:41:3f:8c:98:6e:cc:c5:60:82:cc:b0:73:94:cf:e5:bc:9a:
e8:ab:af:8f:73:7d:6c:4c:0c:1e:85:50:68:b5:b7:47:46:68:
aa:d3:b5:5b:ee:53:7b:5d:06:d9:4d:0e:65:6c:56:10:4c:c6:
3e:49:ec:0d:37:7b:02:82:5a:16:3b:97:53:5f:de:91:12:02:
ce:87:c9:55:b0:1b:a3:8b:8c:ca:47:a3:a1:ec:36:ab:bb:04:
dd:df:c9:9f:3a:c0:ec:00:52:a5:21:f0:fa:d7:d6:13:47:97:
3f:96:95:40:f2:59:9e:25:8a:91:ec:7e:f7:6f:c2:73:50:7c:
0f:35:68:d1:6d:c0:01:f7:9a:d0:ea:4d:81:cd:0a:8b:65:01:
81:9c:6e:6d:d4:d0:90:7f:bd:b8:33:83:6d:4c:23:c3:88:29:
d4:4e:9d:60:f5:79:e1:d8:b5:57:da:e4:09:51:a4:88:cc:1e:
2a:f8:e4:49:af:d1:33:7e:11:dd:1a:1a:60:e3:34:38:21:36:
48:91:e5:f7:b9:c5:d0:cc:f1:8b:fc:71:64:0e:3b:82:57:c5:
85:21:b9:3f:a8:e5:cc:a8:f8:bb:7d:23:dc:2a:e9:c4:2f:fa:
c9:f6:e7:ea:dc:7d:44:bb:be:a9:df:6d:67:b5:3d:73:f4:4b:
ff:7a:48:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:28:02 2026 by rpki-client