Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2cff4ce1-10cf-42d8-a4e5-08cfd238dc4c.roa
File: 2cff4ce1-10cf-42d8-a4e5-08cfd238dc4c.roa (raw, json)
Hash identifier: f0vRQEc14mwnVK4Fiz2WU6acyjgMAyQ9EQEzKimIvAo=
Subject key identifier: E3:98:86:34:A8:E7:2A:AF:B1:1D:1E:E9:D4:17:3D:5C:18:8F:F2:07
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 77D4FD2898871D2B60D1FE856CE477C385D4E4B2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2cff4ce1-10cf-42d8-a4e5-08cfd238dc4c.roa
Signing time: Thu 09 Jul 2026 13:02:19 +0000
ROA not before: Thu 09 Jul 2026 13:02:19 +0000
ROA not after: Wed 07 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.24.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:d4:fd:28:98:87:1d:2b:60:d1:fe:85:6c:e4:77:c3:85:d4:e4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 9 13:02:19 2026 GMT
Not After : Oct 7 23:59:59 2026 GMT
Subject: serialNumber=26f28e2867308e14d01f0d09877773ed21ceab4f05fa182b53b57289c5385f3d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:97:fa:9a:6a:bb:8c:9f:eb:0e:65:bf:3f:
3d:ea:42:9d:04:cf:e7:f0:27:c4:55:33:3c:8d:ef:
ef:e7:b2:73:8c:25:c0:74:d7:22:2f:e9:0e:93:df:
5f:9d:ff:8d:e9:28:93:3f:84:c2:80:c9:2e:76:92:
97:ff:77:64:f5:11:f2:1b:c9:0e:9f:fb:03:65:8f:
61:71:16:b8:9e:8b:a1:e3:33:11:66:0c:33:2b:68:
6c:4c:ae:15:e6:d6:6e:a6:1c:14:d2:1d:f4:55:1a:
b8:a7:00:8b:7a:5b:84:5c:33:3d:e2:ea:85:ea:a4:
df:67:ff:9b:9b:67:b0:58:a5:cf:e0:70:87:69:48:
c7:19:09:ce:84:d6:98:b5:75:10:77:63:3b:e6:68:
de:9a:ec:fc:0c:8d:6b:0c:39:d0:83:fc:bc:dd:0e:
86:b3:29:d5:86:65:f6:50:bf:e1:b1:36:be:f1:b6:
3f:32:35:c3:06:62:cd:48:85:da:3a:93:49:6e:cb:
fc:61:8c:2f:fc:f4:e5:2a:47:cc:48:17:c2:43:ff:
10:7d:17:5f:76:77:6a:27:68:45:bc:0e:ad:5c:f7:
59:5d:45:90:80:4d:b6:38:9e:cc:bd:19:61:4b:d2:
87:61:8b:ff:07:20:4c:e9:86:02:1c:18:7c:e3:85:
5b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:98:86:34:A8:E7:2A:AF:B1:1D:1E:E9:D4:17:3D:5C:18:8F:F2:07
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2cff4ce1-10cf-42d8-a4e5-08cfd238dc4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.24.128.0/23
Signature Algorithm: sha256WithRSAEncryption
af:be:8b:39:24:16:72:c3:54:9c:1b:f5:d4:64:53:4e:b7:a5:
3d:6b:19:d5:68:8d:f3:07:38:af:b5:04:b1:0f:4a:d6:1c:e3:
f3:09:a1:25:f3:6e:59:b9:c9:3b:ec:cf:06:31:d0:19:68:ed:
77:d9:fa:7d:d5:d2:ab:0e:f9:2f:3e:e5:2d:13:de:72:31:3a:
1a:4e:d6:af:44:12:35:52:b4:7b:4c:00:42:1c:2a:b7:9b:bc:
81:97:ac:03:3b:64:6e:f9:6b:82:d0:72:24:77:46:98:0e:6b:
a7:3b:1a:c1:44:b1:86:c8:0c:21:a0:49:54:83:c9:10:79:a5:
3b:8f:62:05:59:6a:96:f3:82:6c:5e:69:01:8e:b3:cf:36:d4:
c9:07:99:66:60:59:b4:d8:ed:e6:79:67:d0:72:cc:cc:5e:f7:
c9:e1:7d:c7:1d:84:a5:29:e1:d0:08:0c:61:ed:11:de:a6:06:
e7:58:76:91:05:52:27:9d:17:85:0e:ad:6a:f0:7e:2e:35:30:
78:0c:17:24:99:32:25:4e:c4:ee:80:64:59:fd:01:a9:7d:67:
0c:c5:24:cf:95:7f:6f:91:0a:9a:25:6f:fd:8a:e3:90:af:7c:
14:bb:9b:79:85:2e:81:8d:2b:71:f0:f4:a0:82:14:fe:bb:63:
2c:18:83:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:15:50 2026 by rpki-client