Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44bb00cc-3dee-4cf6-8de9-2febfa0f0f6d.roa
File: 44bb00cc-3dee-4cf6-8de9-2febfa0f0f6d.roa (raw, json)
Hash identifier: h1y/K0OSC/LhWis4LnFQ/wk4SDpcF9Rs/o9a51vOSW8=
Subject key identifier: FD:C3:C6:31:3D:28:F9:67:C1:92:6C:6F:1B:A5:E9:52:15:8C:CE:0F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 56BF556CEB6C7A1182FB7FEA69FE3C38611CD192
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44bb00cc-3dee-4cf6-8de9-2febfa0f0f6d.roa
Signing time: Sun 11 Oct 2026 15:20:12 +0000
ROA not before: Sun 11 Oct 2026 15:20:12 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.244.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:bf:55:6c:eb:6c:7a:11:82:fb:7f:ea:69:fe:3c:38:61:1c:d1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 11 15:20:12 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=d527ef985cda87de3e260126c8450fd9cefe71d94183032b1ccf6d4541937549, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:16:31:cb:8e:73:6e:58:c9:0c:ee:56:1f:
77:18:23:05:37:6f:7b:8c:d8:b2:88:60:9d:a7:fd:
90:fc:1a:26:43:26:06:cc:80:31:a9:84:c5:e7:bc:
1f:77:14:19:13:8b:be:71:ff:8f:f1:8a:af:51:73:
be:20:cf:dc:1a:83:1c:ba:aa:32:12:31:ae:4c:e5:
63:17:03:b1:aa:cd:c9:7e:cd:eb:86:01:55:54:c1:
58:6e:9c:1d:27:e6:89:04:f4:00:30:3c:33:56:16:
6b:d4:52:76:df:df:5f:fc:02:0a:6b:ac:ef:5d:5e:
e4:7a:a7:79:8d:92:0e:2f:a6:62:ba:e1:d6:fe:12:
87:9a:f7:4b:13:a8:b3:30:9f:ae:3d:01:4b:a0:5c:
22:ef:86:ce:01:86:62:c3:60:9e:bf:68:ba:c7:38:
f4:17:6d:3f:5f:fb:5e:2e:ba:4f:cf:e7:ec:e3:16:
3f:01:33:a5:ab:e7:e4:de:b1:34:cd:4d:64:6b:01:
b5:43:1b:27:80:3d:a2:8c:1a:c0:8c:fe:73:74:a0:
40:d0:09:c6:d7:0c:2d:8d:21:11:e0:12:b9:e0:5c:
b1:bb:cd:dc:92:6a:4b:b2:0e:ae:07:5b:cb:83:01:
c0:f6:39:2a:97:5c:0d:3a:91:28:e0:3a:dc:17:78:
f1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C3:C6:31:3D:28:F9:67:C1:92:6C:6F:1B:A5:E9:52:15:8C:CE:0F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44bb00cc-3dee-4cf6-8de9-2febfa0f0f6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.244.0.0/15
Signature Algorithm: sha256WithRSAEncryption
d0:79:7f:74:6b:3f:7e:4d:8c:9e:90:5f:54:1f:57:4d:a9:99:
04:ed:f7:a7:48:e9:3c:1e:cf:3f:58:7b:5b:73:55:24:e6:99:
22:97:2a:d0:11:55:35:1e:ff:58:ae:8b:0b:d8:5e:b2:98:30:
23:f7:be:21:5c:bc:d4:60:c1:b3:e3:1a:fd:11:53:60:37:83:
71:a0:2e:39:91:5d:55:15:6f:1b:7e:1d:0e:39:83:40:26:09:
14:9f:1c:63:2e:36:de:12:a6:fa:57:20:cc:b7:f1:00:8d:a7:
58:4f:82:03:4a:09:91:81:82:15:b6:89:fa:b3:3b:cb:52:b2:
3d:7e:f6:ca:52:bb:79:5b:68:88:68:41:a5:be:a7:d3:85:f9:
9e:1b:b5:73:7b:05:29:30:3a:38:d3:7f:12:3f:30:e0:39:be:
a7:b5:0c:69:a7:9d:41:f2:20:a3:eb:77:fe:b2:89:f7:b7:04:
90:68:73:b5:4f:92:c8:61:9a:4b:d8:1f:7d:ff:72:b2:57:5a:
ca:be:89:83:62:57:4b:f3:15:2d:28:b6:50:34:50:ea:9e:91:
f7:61:a5:00:5a:11:ff:53:78:70:b7:ee:63:0c:5d:ef:da:86:
c2:fd:0d:7c:b4:db:63:0a:6c:20:63:c3:fe:ac:c3:ce:dc:a0:
6f:71:54:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:47:29 2026 by rpki-client