Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1fa61929-412c-4540-85ff-6ae53d3a9f99.roa
File: 1fa61929-412c-4540-85ff-6ae53d3a9f99.roa (raw, json)
Hash identifier: vXS4gaQJ9hynEaYd+Y01t3nmMJRj4uXCf1jakLuPS+A=
Subject key identifier: F7:57:6D:24:C3:66:D0:30:82:69:17:34:84:00:AF:EF:8B:F7:70:2C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 33BBACAD0839CB94E9F92A6738DC8A963F61CDF9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1fa61929-412c-4540-85ff-6ae53d3a9f99.roa
Signing time: Mon 26 Oct 2026 05:50:41 +0000
ROA not before: Mon 26 Oct 2026 05:50:41 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.212.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:bb:ac:ad:08:39:cb:94:e9:f9:2a:67:38:dc:8a:96:3f:61:cd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:41 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=bb777b68f2f5a2e38155c2cf76e276a85c236a6e79c9aa3b66dda3670040fa24, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bb:d6:5d:40:56:3c:cd:d3:90:bc:3b:85:a7:
37:52:55:a7:94:94:3a:96:bb:8b:fe:08:a7:b8:69:
9a:e1:b8:65:98:d1:f2:16:7d:47:3d:a5:94:02:4d:
17:2c:3c:07:e9:fe:e4:95:17:fd:46:47:7c:d3:2e:
8b:be:7f:e2:02:67:a2:f7:ce:f2:ed:03:f1:a2:3f:
98:8d:2b:d0:da:75:32:eb:c8:2e:91:2c:66:0c:db:
38:0c:36:67:51:6c:21:0b:32:ef:47:b9:ff:c5:f6:
22:80:18:d2:20:a3:89:db:57:d2:c9:25:11:b5:12:
a7:dc:7a:a0:13:d2:46:8b:3c:c2:59:49:c2:82:13:
e6:03:c8:05:3a:ee:d6:a8:09:4b:14:1b:c6:d6:93:
e2:5f:4e:29:32:46:48:3c:dc:0a:07:be:0c:05:39:
8c:5b:55:fb:4f:8e:6b:71:eb:1b:29:54:34:7d:39:
55:9b:83:3a:f4:c6:b0:25:33:5c:1b:b4:49:d6:79:
f5:bc:25:b9:12:9b:1a:d5:1d:f5:97:be:5f:66:19:
1f:bf:3d:d9:3c:f1:a7:83:93:2e:00:95:5b:b7:aa:
c5:20:d6:6c:d1:2d:a0:55:cc:70:8b:44:69:3a:c9:
99:dd:ee:c4:0e:0a:d9:33:f1:df:48:40:d8:e4:e9:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:57:6D:24:C3:66:D0:30:82:69:17:34:84:00:AF:EF:8B:F7:70:2C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1fa61929-412c-4540-85ff-6ae53d3a9f99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.212.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9c:a0:52:f3:27:41:af:b8:db:91:6d:4d:cb:30:70:56:41:b8:
13:57:db:e8:02:05:78:99:e3:e2:4a:7a:94:73:d4:de:ab:5c:
04:a4:eb:7c:05:12:42:27:d8:50:57:bc:ce:98:f5:02:eb:65:
2f:cf:6c:28:48:cf:3d:57:c9:2c:fb:9a:57:e4:22:aa:c4:56:
8a:58:fa:63:15:33:45:e8:c6:94:de:59:16:c8:3b:73:c5:77:
1e:a8:d1:6d:d7:fd:3a:64:5a:ff:6f:53:02:db:0d:e5:31:37:
75:19:5a:26:fc:fa:fe:7d:ae:db:07:07:a1:3b:ee:3b:8b:78:
7b:92:ba:3c:f0:93:24:70:3b:20:36:31:77:58:f6:96:59:f2:
15:97:bb:33:82:20:82:d2:27:e9:92:bb:3d:7f:e4:ac:83:26:
e2:4f:0a:e3:95:95:21:f2:32:03:98:2c:1b:fc:a7:61:94:94:
22:84:0f:b1:49:b0:44:b2:2f:94:78:db:a0:f6:55:f4:d7:ef:
1d:ec:35:6a:89:f6:e1:d7:99:78:ae:a8:ee:b2:dd:32:5d:ad:
6b:b3:1d:b9:04:49:a4:84:6e:d9:1a:b3:1d:d5:d4:9b:b4:39:
44:ac:b0:3f:bb:54:8c:d4:2c:a7:85:05:a7:1a:50:b1:e7:e0:
0e:1a:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:29:49 2026 by rpki-client