Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/13a74b66-e274-4e4f-b119-7d13adaa4c9c.roa
File: 13a74b66-e274-4e4f-b119-7d13adaa4c9c.roa (raw, json)
Hash identifier: SefymyedAiHxvh+8Te2aotOw7Xw9WxinPOcNxflFuEg=
Subject key identifier: 3C:11:87:86:C7:82:DB:C2:BD:5D:E2:DF:43:7B:D6:EE:60:F0:7C:90
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1ED54AF8F76011F9B6DE4AD84483EF40F6304B62
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/13a74b66-e274-4e4f-b119-7d13adaa4c9c.roa
Signing time: Mon 21 Sep 2026 18:22:56 +0000
ROA not before: Mon 21 Sep 2026 18:22:56 +0000
ROA not after: Sun 20 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.168.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d5:4a:f8:f7:60:11:f9:b6:de:4a:d8:44:83:ef:40:f6:30:4b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 21 18:22:56 2026 GMT
Not After : Dec 20 23:59:59 2026 GMT
Subject: serialNumber=ad8ac31614a1ba5737c58b402f0b87be1210f3f49e0f947aa9255dcdea18337e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:52:c8:7d:bc:30:e9:a6:67:45:50:b4:a0:
d3:a1:bb:a9:1c:7d:97:86:87:ed:c2:a0:29:3d:89:
75:67:02:88:71:ab:85:81:25:65:97:7c:11:cf:3d:
14:b6:9a:42:88:5c:47:c8:e3:01:ad:c4:79:29:de:
b7:83:a0:3a:1c:2f:3f:b4:a7:3a:90:84:a6:5b:29:
cd:a5:55:f9:29:1e:c5:28:6d:0f:37:a4:85:e0:3c:
0c:c8:d9:f2:3f:7f:3d:3c:07:55:a3:50:d9:1e:11:
23:a3:b7:ca:26:9a:56:4b:f6:99:0a:a0:63:a6:42:
26:3d:79:54:5f:97:83:e0:e3:c9:ab:30:0a:4d:68:
41:ee:9b:89:b5:5a:7e:4e:a8:b8:f8:00:47:44:6c:
a0:49:e0:d1:f4:a6:8e:91:7f:80:2d:6b:eb:01:2a:
36:89:c1:cd:d0:0c:87:60:af:45:19:50:64:37:fa:
f5:45:6d:a4:a6:53:6a:16:d5:ea:1d:65:8a:3a:0a:
7d:59:a9:a4:75:2c:98:23:7f:c1:df:4e:07:08:ba:
46:72:36:27:d0:a9:fe:03:c3:5c:2c:78:85:c2:91:
de:2c:b6:05:de:35:7e:c8:0b:43:92:ba:5d:27:24:
20:7f:e6:44:31:e2:d3:34:28:1f:a8:df:a8:de:a3:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:11:87:86:C7:82:DB:C2:BD:5D:E2:DF:43:7B:D6:EE:60:F0:7C:90
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/13a74b66-e274-4e4f-b119-7d13adaa4c9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.168.143.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:24:d9:73:6a:e4:95:46:a9:41:7c:58:ba:4b:a5:5a:97:dd:
96:35:5b:b0:40:87:2d:50:34:44:68:3b:44:1f:5c:97:70:d9:
e9:de:11:d1:c2:b1:36:ca:1e:d9:48:85:e5:25:9b:ab:84:bb:
66:ce:ff:0c:e2:0f:b6:83:b0:ef:96:32:b7:77:42:5c:dc:9e:
3b:0e:6a:b7:4a:e5:b3:2d:53:2b:8c:d5:9d:62:7e:fd:62:b4:
b2:42:a5:be:66:84:a9:2c:92:6b:c3:31:39:12:3e:bd:cc:2b:
d7:2a:2a:ca:04:bd:dd:d7:22:f8:8c:3b:62:68:d7:6c:ec:09:
ae:86:ad:f3:d5:e4:af:4c:b1:b0:aa:06:cf:bc:9d:b9:9e:e4:
33:39:e6:16:bd:37:15:5a:4b:5f:9a:72:48:02:76:9c:ae:47:
2b:89:b4:73:54:38:de:dd:b2:5d:2f:da:27:13:a8:e8:fa:df:
e1:59:be:6b:82:4a:70:21:30:14:e6:e6:c2:c6:65:a9:28:9e:
9b:d8:72:c0:a0:56:5e:cb:f7:ed:c3:fa:ee:a1:23:a3:03:b1:
d3:66:ff:b8:7c:6d:20:29:58:1f:72:09:a7:e1:17:af:9c:5e:
d2:13:9c:4c:3b:d1:15:19:d0:07:e2:fa:13:1a:0d:82:7b:6c:
ec:1a:6d:e4
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUHtVK+PdgEfm23krYRIPvQPYwS2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA5MjExODIyNTZaFw0yNjEyMjAyMzU5NTlaMHoxSTBHBgNV
BAUTQGFkOGFjMzE2MTRhMWJhNTczN2M1OGI0MDJmMGI4N2JlMTIxMGYzZjQ5ZTBm
OTQ3YWE5MjU1ZGNkZWExODMzN2UxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALxcUsh9vDDppmdFULSg06G7qRx9l4aH7cKgKT2JdWcCiHGrhYElZZd8Ec89
FLaaQohcR8jjAa3EeSnet4OgOhwvP7SnOpCEplspzaVV+SkexShtDzekheA8DMjZ
8j9/PTwHVaNQ2R4RI6O3yiaaVkv2mQqgY6ZCJj15VF+Xg+DjyaswCk1oQe6bibVa
fk6ouPgAR0RsoEng0fSmjpF/gC1r6wEqNonBzdAMh2CvRRlQZDf69UVtpKZTahbV
6h1lijoKfVmppHUsmCN/wd9OBwi6RnI2J9Cp/gPDXCx4hcKR3iy2Bd41fsgLQ5K6
XSckIH/mRDHi0zQoH6jfqN6j7/sCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQ8EYeG
x4Lbwr1d4t9De9buYPB8kDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MTNhNzRiNjYtZTI3NC00ZTRmLWIxMTktN2QxM2FkYWE0YzljLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADOojzAN
BgkqhkiG9w0BAQsFAAOCAQEAayTZc2rklUapQXxYukulWpfdljVbsECHLVA0RGg7
RB9cl3DZ6d4R0cKxNsoe2UiF5SWbq4S7Zs7/DOIPtoOw75Yyt3dCXNyeOw5qt0rl
sy1TK4zVnWJ+/WK0skKlvmaEqSySa8MxORI+vcwr1yoqygS93dci+Iw7YmjXbOwJ
roat89Xkr0yxsKoGz7yduZ7kMznmFr03FVpLX5pySAJ2nK5HK4m0c1Q43t2yXS/a
JxOo6Prf4Vm+a4JKcCEwFObmwsZlqSiem9hywKBWXsv37cP67qEjowOx02b/uHxt
IClYH3IJp+EXr5xe0hOcTDvRFRnQB+L6ExoNgnts7Bpt5A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:31:35 2026 by rpki-client