Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3b67bb62-9bcf-4daa-99b5-5374c3285177.roa
File: 3b67bb62-9bcf-4daa-99b5-5374c3285177.roa (raw, json)
Hash identifier: /28afO3w4hiOcpEHkKjtoZXMne2JcsfF0gb8E54Eg/s=
Subject key identifier: C1:3A:AD:65:45:6A:DA:AB:6B:12:FE:19:03:B1:6A:AD:CA:AE:43:B2
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 125083EF4159F511F6597A0C09D2919253AED527
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3b67bb62-9bcf-4daa-99b5-5374c3285177.roa
Signing time: Mon 26 Oct 2026 05:50:44 +0000
ROA not before: Mon 26 Oct 2026 05:50:44 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.48.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:50:83:ef:41:59:f5:11:f6:59:7a:0c:09:d2:91:92:53:ae:d5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:44 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=a2cbfb009915451414c402d8347fc232b51c1e528f09c743932b67142508397d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:5e:ea:2a:cc:28:31:70:23:94:bb:e2:34:
88:d0:b8:4a:d8:6f:5f:07:25:a3:88:53:13:eb:45:
91:12:50:1e:66:d3:7f:e3:cc:36:47:5e:45:f2:8d:
7c:e5:26:8c:aa:ee:f2:26:f1:8e:3f:8d:39:6c:b2:
89:90:33:ed:ba:a4:02:f4:ab:a8:e6:db:0e:5c:84:
78:64:95:5e:44:08:53:36:31:18:fb:7d:5d:31:95:
6d:ba:72:4a:43:c5:46:6a:7d:04:4f:93:9b:06:f9:
45:8c:a2:f2:5c:09:b6:fd:a2:ea:44:c6:39:3e:bd:
e7:ce:d4:b1:3b:bf:64:a2:ae:3e:1b:40:c2:f0:8a:
0b:1a:9d:29:35:51:44:6c:d1:f3:bc:a3:5f:5e:9d:
fe:cb:4e:f8:54:c0:0f:94:d2:16:61:50:48:38:57:
70:31:7c:53:80:77:73:32:f7:2b:00:b4:de:e5:00:
79:1d:9a:0b:7c:f8:38:54:c4:62:5e:ee:3b:a9:6a:
1e:55:ab:59:a2:50:05:07:9d:d5:8e:b2:ff:2a:4a:
fc:8a:94:1c:7b:8f:b9:ae:ba:a3:88:0c:58:af:1b:
42:1d:73:fd:2b:f8:3d:b2:d5:20:c9:77:58:01:f9:
cd:51:49:97:77:14:62:6e:29:1c:f6:03:72:37:77:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3A:AD:65:45:6A:DA:AB:6B:12:FE:19:03:B1:6A:AD:CA:AE:43:B2
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3b67bb62-9bcf-4daa-99b5-5374c3285177.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.48.0.0/15
Signature Algorithm: sha256WithRSAEncryption
35:8c:4c:b0:4d:e3:a4:e1:05:be:0d:77:58:0d:59:9e:f7:c5:
22:c0:23:eb:e0:a8:af:f4:5e:f2:75:ef:a2:14:84:96:eb:6a:
9f:69:84:06:a9:2c:e6:87:8a:18:8b:00:69:74:d0:6d:53:8a:
6d:8a:2c:b6:c4:c6:ac:0f:8f:c0:55:c5:d7:26:42:ce:6d:9c:
d6:44:f7:6a:c5:f5:be:0f:6a:2a:49:7f:5f:e0:38:2e:10:6f:
a1:f5:f0:b7:8e:bc:a1:19:dd:89:05:cd:0a:32:60:47:ec:40:
78:d9:b1:db:92:93:c6:52:fb:e0:14:c2:58:7b:54:3b:8f:30:
a2:c1:e0:1a:39:78:4f:52:cd:fe:85:f3:e6:19:3d:46:55:dc:
b2:74:7f:15:72:f3:1e:42:55:51:56:52:a3:ec:c7:50:b5:e5:
37:79:00:0e:95:4f:9f:4f:e0:4c:4c:21:2f:a7:cf:3e:09:9c:
50:b9:09:83:4f:9c:02:f4:cf:9b:93:83:21:e0:3b:ba:3b:46:
66:c8:63:fe:cd:d6:e0:df:3f:a6:97:25:a0:dc:fa:b2:6a:b0:
69:75:31:9c:07:f3:6a:88:00:97:40:96:0a:db:5d:76:14:c8:
fc:47:19:dc:a8:0d:bc:80:c1:23:36:19:2d:e8:3a:63:9f:01:
60:64:70:bb
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUElCD70FZ9RH2WXoMCdKRklOu1ScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTUwNDRaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGEyY2JmYjAwOTkxNTQ1MTQxNGM0MDJkODM0N2ZjMjMyYjUxYzFlNTI4ZjA5
Yzc0MzkzMmI2NzE0MjUwODM5N2QxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJK3XuoqzCgxcCOUu+I0iNC4SthvXwclo4hTE+tFkRJQHmbTf+PMNkdeRfKN
fOUmjKru8ibxjj+NOWyyiZAz7bqkAvSrqObbDlyEeGSVXkQIUzYxGPt9XTGVbbpy
SkPFRmp9BE+Tmwb5RYyi8lwJtv2i6kTGOT69587UsTu/ZKKuPhtAwvCKCxqdKTVR
RGzR87yjX16d/stO+FTAD5TSFmFQSDhXcDF8U4B3czL3KwC03uUAeR2aC3z4OFTE
Yl7uO6lqHlWrWaJQBQed1Y6y/ypK/IqUHHuPua66o4gMWK8bQh1z/Sv4PbLVIMl3
WAH5zVFJl3cUYm4pHPYDcjd3Or8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTBOq1l
RWraq2sS/hkDsWqtyq5DsjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
M2I2N2JiNjItOWJjZi00ZGFhLTk5YjUtNTM3NGMzMjg1MTc3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATMwMA0G
CSqGSIb3DQEBCwUAA4IBAQA1jEywTeOk4QW+DXdYDVme98UiwCPr4Kiv9F7yde+i
FISW62qfaYQGqSzmh4oYiwBpdNBtU4ptiiy2xMasD4/AVcXXJkLObZzWRPdqxfW+
D2oqSX9f4DguEG+h9fC3jryhGd2JBc0KMmBH7EB42bHbkpPGUvvgFMJYe1Q7jzCi
weAaOXhPUs3+hfPmGT1GVdyydH8VcvMeQlVRVlKj7MdQteU3eQAOlU+fT+BMTCEv
p88+CZxQuQmDT5wC9M+bk4Mh4Du6O0ZmyGP+zdbg3z+mlyWg3PqyarBpdTGcB/Nq
iACXQJYK2112FMj8RxncqA28gMEjNhkt6DpjnwFgZHC7
-----END CERTIFICATE-----
Generated at Wed Nov 11 14:04:03 2026 by rpki-client