Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/179c664b-afae-4c21-9c97-2a2a3985d5b0.roa
File: 179c664b-afae-4c21-9c97-2a2a3985d5b0.roa (raw, json)
Hash identifier: KxJU4QjniERjwDCWf+u2BA5P7rZZo01PySTCcm57Fqw=
Subject key identifier: CF:D6:A4:86:E3:0D:99:8B:D0:04:74:86:B6:2C:43:A3:E9:25:67:D1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6E3E95A9B0EF3EA9B3159CCDF26EADDC48D6D040
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/179c664b-afae-4c21-9c97-2a2a3985d5b0.roa
Signing time: Mon 26 Oct 2026 05:40:06 +0000
ROA not before: Mon 26 Oct 2026 05:40:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.117.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:3e:95:a9:b0:ef:3e:a9:b3:15:9c:cd:f2:6e:ad:dc:48:d6:d0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=627cf6e5cea6a89a68a4442b671394fa7ba4b467674629007eeeefa1600cd6b5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:c1:c0:bc:bd:5e:60:c8:3c:08:f7:0c:e7:
c1:82:2f:89:8c:ac:c1:52:b0:1c:5b:31:58:db:15:
02:a5:cc:9a:94:d2:49:d1:7a:ac:32:ce:38:5e:45:
8b:bc:43:ab:78:ff:26:1c:11:a4:38:a0:1a:9f:ea:
47:da:42:11:d4:a7:92:83:35:cc:06:93:8f:c0:31:
bd:53:66:6f:39:20:55:8c:4f:31:5e:e4:3e:3b:24:
ac:7b:ff:06:87:b2:67:85:27:b7:68:8f:2e:79:e6:
61:8a:7c:17:66:11:9c:f5:f0:a4:33:0f:a4:16:32:
3c:e2:ae:e8:8d:92:33:23:79:43:95:32:b2:fd:a1:
2e:cd:c1:34:f5:cc:f2:34:de:68:6b:57:12:c4:a7:
6d:a7:95:6d:f3:72:87:0e:33:00:ca:9b:c0:40:b2:
fb:a3:49:7c:80:69:ac:4a:4f:eb:07:7d:0f:d8:af:
a8:ea:39:4a:b3:6c:4e:75:04:59:3a:22:59:2a:1a:
74:5b:1f:8b:b9:17:10:b8:1b:77:28:cd:9a:5c:96:
04:90:39:52:cc:5c:d0:72:d1:a9:31:c7:0e:b8:3b:
a4:e1:f5:73:13:18:2b:3c:da:e4:56:51:b7:9d:1a:
a2:15:08:87:42:fe:59:2c:f7:b7:e0:48:c5:78:ac:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D6:A4:86:E3:0D:99:8B:D0:04:74:86:B6:2C:43:A3:E9:25:67:D1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/179c664b-afae-4c21-9c97-2a2a3985d5b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.117.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:75:73:7a:f2:ca:10:68:cd:3c:9a:d0:31:c3:e0:88:91:52:
a4:77:6e:a6:0b:28:49:de:81:cb:60:94:95:4e:86:15:1c:65:
d7:dc:ec:cb:a5:18:da:4f:cb:20:58:ac:e3:37:4c:03:05:4b:
6a:8c:15:46:e2:f2:3d:60:21:23:f3:c0:15:cb:8c:16:c4:9a:
92:55:15:d2:13:d4:c1:7a:72:14:35:cb:2c:91:fe:99:39:a6:
ee:59:30:77:af:1b:4c:82:fd:fb:05:53:91:67:f8:59:49:96:
6b:98:98:f9:51:77:d9:3f:76:75:ab:a1:51:90:19:10:e8:31:
ca:17:c0:d8:b0:97:61:7e:93:c1:c3:ef:d7:12:42:61:ff:21:
8c:1e:39:70:95:72:7b:5e:82:ba:b0:3c:99:16:e9:1b:f6:58:
82:6e:03:3d:de:b6:8b:10:c2:68:d5:98:10:69:c4:f9:a1:ab:
33:e8:84:89:37:e9:d5:33:5d:68:53:27:12:ba:60:7e:fa:23:
46:b8:de:eb:ee:13:9e:6a:c9:b4:61:e8:15:d8:23:c0:86:8f:
69:4d:9e:eb:cd:9b:a2:3b:fc:c7:94:54:7f:0f:06:83:ce:46:
f5:49:72:ba:8c:f9:36:3d:cc:01:02:0e:dc:00:d5:c3:ac:64:
a7:25:03:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:30:23 2026 by rpki-client