Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49c0599f-0613-4e9d-86e2-6493f86864b0.roa
File: 49c0599f-0613-4e9d-86e2-6493f86864b0.roa (raw, json)
Hash identifier: Cm91YBGcyBmEpk2kGSmYshO6Q4GydjUCVuLi4KgvF14=
Subject key identifier: D7:8C:1D:59:74:CA:DB:0F:65:4D:05:53:C4:1D:C3:2E:7E:DC:DE:71
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0E8D0E1E002619BA74800CCBA6C64F81E83B786D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49c0599f-0613-4e9d-86e2-6493f86864b0.roa
Signing time: Fri 16 Oct 2026 00:08:27 +0000
ROA not before: Fri 16 Oct 2026 00:08:27 +0000
ROA not after: Thu 14 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.102.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:8d:0e:1e:00:26:19:ba:74:80:0c:cb:a6:c6:4f:81:e8:3b:78:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 16 00:08:27 2026 GMT
Not After : Jan 14 23:59:59 2027 GMT
Subject: serialNumber=963470053eabffd24f7606e1bb6c421c39f89b1f49e4db6935379fac6ffa8381, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:dc:92:06:88:b9:26:ea:7f:8b:45:49:b0:
f0:c7:f1:67:3c:c6:67:0a:a7:18:6c:82:73:36:79:
e1:2a:d3:d6:5b:6e:fa:07:a7:3d:12:0c:0d:fd:80:
b8:a7:25:4c:41:e5:bf:5b:8c:39:5b:1c:13:a6:3c:
89:2c:96:e7:6f:88:bf:96:10:2a:2b:97:bc:c6:11:
c1:9b:ac:00:90:23:d3:1f:8c:12:a9:fd:21:b2:33:
4a:a6:2f:07:f6:82:39:43:3b:27:20:e3:ad:f7:32:
cf:83:0c:1e:14:e8:c2:44:86:d8:01:36:9f:9e:aa:
cf:1c:81:1b:6d:98:65:16:67:11:9f:53:6c:f2:8d:
c6:88:ee:76:0f:20:b9:ea:ac:7a:49:31:37:a5:70:
ad:8e:cf:85:04:8b:37:c1:07:08:af:41:6d:00:b3:
b6:42:4d:e3:27:f0:47:c6:9c:0b:d0:ec:8d:2d:28:
0b:40:65:0f:fe:d4:5b:1c:24:8c:dc:c1:f0:b2:cf:
2a:97:b7:f2:94:78:40:cd:16:b9:db:42:24:89:09:
0c:43:88:d3:11:3e:ca:4d:11:4c:af:33:b5:dd:81:
3d:65:f9:cc:c6:15:65:37:b0:0f:4e:0d:ca:f8:aa:
88:95:a7:9a:62:5f:b2:76:11:ce:3f:29:e6:58:52:
cf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8C:1D:59:74:CA:DB:0F:65:4D:05:53:C4:1D:C3:2E:7E:DC:DE:71
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49c0599f-0613-4e9d-86e2-6493f86864b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.102.0.0/17
Signature Algorithm: sha256WithRSAEncryption
c4:28:95:e3:1c:d1:b8:de:55:f6:5b:d5:5b:d3:72:26:4b:a7:
3a:9f:c5:38:bb:c0:a8:2c:73:53:e5:fb:45:ae:fa:1c:13:77:
e8:3d:2f:6a:44:fc:d2:b3:f2:0a:89:56:3d:9e:21:fd:d5:0b:
ca:81:e6:a0:dd:08:72:53:ac:69:8a:3a:84:47:3a:b2:2b:c1:
4e:08:79:55:e2:ec:6e:83:f4:a5:43:aa:33:2a:f2:87:73:e3:
df:34:86:e5:7c:36:ad:88:0d:73:ad:94:84:f3:d0:e9:a3:bb:
bc:4a:63:fa:0b:14:16:d5:78:26:a9:8f:8a:a0:8c:e6:d3:70:
5f:2a:1f:71:8a:3b:68:4f:ed:b2:f1:01:71:2c:ba:db:51:61:
07:c1:ba:20:d0:54:7e:5d:4d:0c:9a:6d:d3:50:7d:57:4a:bb:
da:a3:df:83:1b:23:37:77:a9:54:de:9d:7a:b9:e1:b1:c1:1f:
38:3a:a6:d9:87:95:55:9a:c0:7b:e7:88:0d:55:21:e3:85:60:
98:95:2a:09:d2:b2:d2:c0:b5:7a:dd:30:f8:d2:6f:2d:22:24:
1e:75:e8:46:23:48:b7:bf:73:07:c8:27:fc:d2:a1:e1:5f:b5:
63:ec:2e:75:83:88:3d:88:b0:4d:4b:c3:da:f7:b1:3c:76:23:
d3:dd:a9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:52:13 2026 by rpki-client