Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/286f881c-8fa0-4200-ada2-20a0cc49038e.roa
File: 286f881c-8fa0-4200-ada2-20a0cc49038e.roa (raw, json)
Hash identifier: TWWlEoMzfxoVb9URKwg0WszBH8rJVIfPr+mqoS7IhLg=
Subject key identifier: 9B:63:FC:3B:CF:7B:E2:6C:57:27:01:F3:81:CF:FD:69:F5:2E:B0:68
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4951A63B21BF543790A005B4D950E8F745AD4CD6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/286f881c-8fa0-4200-ada2-20a0cc49038e.roa
Signing time: Mon 26 Oct 2026 05:50:21 +0000
ROA not before: Mon 26 Oct 2026 05:50:21 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.166.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:51:a6:3b:21:bf:54:37:90:a0:05:b4:d9:50:e8:f7:45:ad:4c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:21 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=94cfd204817122421d8c9375ba0839a6fc3c8ec0b80b15ff99e747ea70bde4e4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:78:aa:b6:b1:76:80:10:aa:55:e3:dd:fb:a4:
93:fa:3b:4c:ea:5c:47:70:37:63:77:38:41:40:1a:
b1:cf:ec:9a:28:53:8e:36:d9:75:45:de:df:3f:ad:
ca:ab:4f:9c:68:cd:e6:9d:bf:d8:b2:8d:7f:5a:50:
b0:25:e4:a1:e6:e9:ef:53:a2:65:16:32:d7:cc:71:
b6:5b:ab:c5:a1:bd:23:55:aa:0a:58:cc:69:a9:97:
5d:f7:08:4d:66:50:38:c0:f0:fc:fc:80:cd:6b:aa:
53:44:55:55:a1:3e:98:2a:4b:a5:ac:a1:84:4d:dc:
64:ac:71:4e:44:69:14:4a:f6:2b:20:ad:92:6b:a4:
b5:94:fa:20:d0:5e:60:60:7f:af:8d:fb:99:7c:54:
48:b1:9c:28:00:df:10:ba:4a:cc:94:6b:84:30:03:
e0:c0:aa:78:59:d2:ff:51:13:bc:6e:a3:f7:9f:fd:
8a:1c:2a:a9:dd:7b:8a:59:08:e8:99:1a:6b:c2:be:
33:2e:27:76:27:31:23:a8:9e:68:4d:c7:07:f5:80:
19:48:6c:25:3d:31:31:ae:d5:bd:b3:50:2e:a3:6d:
11:b5:21:19:23:83:ea:5f:74:60:3e:89:38:da:2d:
4e:69:c8:e1:93:8c:92:a0:e1:04:80:77:34:46:98:
28:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:63:FC:3B:CF:7B:E2:6C:57:27:01:F3:81:CF:FD:69:F5:2E:B0:68
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/286f881c-8fa0-4200-ada2-20a0cc49038e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.166.0.0/15
Signature Algorithm: sha256WithRSAEncryption
d3:43:40:6a:ea:6a:9d:b2:dc:34:24:49:38:1d:0a:b8:b6:de:
9f:7d:b4:9e:f0:ab:12:f8:fd:0b:24:1c:62:ac:a4:27:78:84:
3d:c0:6f:1b:9b:b1:fb:a8:47:e4:fc:90:c3:7a:86:20:da:23:
0f:26:02:79:ab:c3:1e:3c:f8:23:c4:b1:4f:fb:c3:9c:9a:7a:
d0:56:71:19:fe:0c:c5:97:fa:b6:ac:e3:5b:5d:bf:6f:15:81:
4d:1e:e9:58:a4:6b:6b:f9:ca:9c:0c:c4:cb:d6:ea:b5:f1:8d:
1d:3b:cb:5a:6b:42:9b:f0:db:bb:33:fd:d0:e1:24:f9:07:20:
7b:16:e8:18:cf:8d:1a:55:d9:97:3d:4c:cb:5c:71:38:17:b9:
42:f6:56:d5:d2:92:d6:4f:74:e3:0b:08:60:a2:ef:00:fc:5c:
6f:97:5f:cc:fd:7f:bb:d6:25:af:e2:ce:49:19:11:42:fb:70:
30:42:fa:56:6c:15:65:9e:05:28:09:4f:2e:c0:f4:e4:e4:6a:
69:dc:57:4f:2a:3f:ff:9e:22:04:b6:1c:7f:82:0b:48:30:44:
c2:dd:d0:72:04:ef:6c:ac:69:5b:23:40:7a:b9:d6:a6:52:27:
2f:7e:0f:e9:6a:80:7d:c4:86:eb:2a:e4:9f:a2:fa:6d:ca:45:
fc:24:7c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:30:14 2026 by rpki-client