Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2b51d415-1366-43ea-8ce9-f13b63a2c827.roa
File: 2b51d415-1366-43ea-8ce9-f13b63a2c827.roa (raw, json)
Hash identifier: ZzocHN5jOX2G0Cg62R5WsF/xJgLQtoiTetOwa2lFVO8=
Subject key identifier: 5F:A1:32:A3:5F:1A:DC:82:7B:95:0D:9F:C4:08:BD:9B:00:0D:A0:34
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7F6CAE8EE53AAB19562B6B3DE5EB150FE4CE4886
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2b51d415-1366-43ea-8ce9-f13b63a2c827.roa
Signing time: Thu 16 Jul 2026 00:40:30 +0000
ROA not before: Thu 16 Jul 2026 00:40:30 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.45.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:6c:ae:8e:e5:3a:ab:19:56:2b:6b:3d:e5:eb:15:0f:e4:ce:48:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:30 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=1560e367470db29fc74321cb7b2e6e32a931357da492aef98657807e05326dd4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:5b:40:b2:79:f0:ec:5c:49:ed:ac:61:9b:
9b:51:50:0a:28:ce:fd:3d:16:6a:b5:c2:54:44:be:
6e:13:bc:f6:57:6e:49:ee:4e:d4:1c:fe:54:c1:44:
ed:da:d2:cf:90:a9:7b:f4:64:b4:5c:34:9b:fb:db:
fc:c7:d1:88:e3:14:01:00:20:8c:8d:d6:aa:f1:6a:
25:b3:a6:21:e8:89:8c:21:f4:c3:95:75:3d:57:6b:
a5:8f:8e:55:a3:7f:f2:42:47:7f:36:5d:70:5e:fb:
82:18:d1:9f:1c:e7:ee:22:06:bd:16:54:f0:42:d2:
1b:c8:e9:16:1c:c0:d1:ea:3f:74:47:95:5f:ce:ef:
cb:e9:09:3d:fd:97:f1:77:de:68:b4:25:5b:2f:8e:
ca:5b:02:96:7c:11:34:0b:37:00:e3:a2:eb:2d:28:
e0:87:53:f1:45:a7:bf:be:c8:b1:7b:f6:77:55:a7:
1f:1f:ed:02:d1:0d:b5:f6:dc:3d:aa:62:be:a6:20:
29:c0:6b:0f:c3:32:bb:ec:05:d9:52:38:c0:09:ce:
ea:30:7a:0f:d4:60:8b:3d:6a:0a:33:70:ce:c6:64:
9f:16:85:08:20:e8:62:f4:8d:d9:93:59:3b:df:7c:
26:75:c7:4b:cf:02:36:7f:be:c1:2a:fa:75:34:5b:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A1:32:A3:5F:1A:DC:82:7B:95:0D:9F:C4:08:BD:9B:00:0D:A0:34
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2b51d415-1366-43ea-8ce9-f13b63a2c827.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.45.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:70:61:47:60:9d:e3:44:3d:bc:17:37:db:5a:92:61:71:dd:
df:67:89:1c:0d:2f:5e:8e:6a:32:bb:82:28:7e:53:34:6c:71:
3c:b4:3d:16:1b:20:22:cf:aa:4c:4f:39:4b:2c:99:a2:be:e6:
fc:3b:cb:e8:6c:fb:86:d4:47:be:f0:c9:39:ad:75:c5:3d:d5:
f5:ce:81:af:14:a5:bd:fa:3b:9e:d8:10:69:27:5e:ad:a6:8d:
4f:fc:3d:78:bc:a8:85:32:ba:da:ca:3b:4b:54:e8:fe:70:18:
2e:f9:9c:3f:7f:e4:8e:28:dd:0d:6b:71:7b:32:1d:57:8c:4c:
cb:16:64:d3:ea:30:97:2d:79:d7:33:6a:7b:95:21:22:61:78:
79:a3:ab:67:fa:5d:86:20:13:78:00:df:52:ec:73:4b:d4:bf:
d7:1b:76:01:54:dd:62:5f:21:b4:4d:5c:33:bb:4b:7d:6b:57:
a3:80:ee:1c:20:68:d9:87:31:9d:b4:42:b5:ea:f5:36:44:93:
9b:02:a6:e5:ce:2b:af:a8:91:3e:c5:c2:0b:b3:09:43:32:76:
05:54:c6:36:2b:26:ab:10:17:5f:6b:f9:eb:06:41:63:ab:a2:
0f:d1:fc:40:54:11:42:52:58:74:e4:46:05:32:0d:96:1f:a6:
55:e1:1b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:40:56 2026 by rpki-client