Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4a35eec8-470f-4ad0-852b-9006065bbbb0.roa
File: 4a35eec8-470f-4ad0-852b-9006065bbbb0.roa (raw, json)
Hash identifier: PtlSYUU6ee3yhEbLvPhtqV3EAgy3D/nHMqB+RYSxKdQ=
Subject key identifier: 67:92:A1:D4:E4:36:0B:BF:41:D1:08:04:BB:ED:70:3A:51:DE:52:12
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 408313F33FDE58D08BD4A77EDE99FE3825D1A0BB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4a35eec8-470f-4ad0-852b-9006065bbbb0.roa
Signing time: Mon 26 Oct 2026 05:50:20 +0000
ROA not before: Mon 26 Oct 2026 05:50:20 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 51.166.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:83:13:f3:3f:de:58:d0:8b:d4:a7:7e:de:99:fe:38:25:d1:a0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:20 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=e634a0ce2e6fd23684442a89c8ed4c97013b68ff8d4392235c0b0ee84db0bc9f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:b3:ce:3e:fd:a2:40:f0:40:dc:42:dd:71:
4c:b6:e5:b0:f8:64:1b:d6:83:cb:e4:56:04:2f:2a:
1a:90:c4:fa:9f:18:ca:96:5f:a7:7d:82:7d:f1:dd:
8a:8e:99:f7:04:88:d5:56:37:3e:eb:e1:db:49:d0:
05:db:02:4c:42:97:f3:b5:02:2d:fb:0d:59:90:b9:
0a:a8:a7:de:75:de:b2:d4:86:39:43:30:94:da:ab:
91:2e:1e:26:ca:6f:90:15:2e:a6:bf:64:83:23:2a:
13:6d:c4:e9:93:54:93:ff:eb:ff:a1:e0:26:d1:e2:
09:3a:45:23:24:4f:19:1f:39:6f:f5:c2:f6:d6:47:
41:2a:e7:d1:55:6f:d4:02:24:f7:f3:33:7e:e9:0c:
2b:3a:0c:3b:8e:ac:59:e7:1f:a1:a0:0a:02:c9:9a:
a7:50:eb:12:1a:fe:25:2d:a9:69:58:5a:d6:5c:7e:
ad:f8:f9:ad:7e:72:7e:48:7c:4f:2e:ea:96:4c:5e:
bb:16:30:f4:e2:ca:80:28:2b:25:49:80:a6:93:bb:
fa:3c:39:b1:3e:97:88:96:12:8f:9f:2a:49:e9:4f:
9a:73:d5:d6:29:f8:be:89:46:54:26:45:53:66:97:
57:51:15:26:13:fe:d7:86:2a:70:f6:88:1e:2f:3d:
13:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:92:A1:D4:E4:36:0B:BF:41:D1:08:04:BB:ED:70:3A:51:DE:52:12
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4a35eec8-470f-4ad0-852b-9006065bbbb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.166.0.0/15
Signature Algorithm: sha256WithRSAEncryption
27:1d:cd:a4:58:75:ac:6a:01:a2:26:67:95:84:ea:1a:48:fa:
ec:45:13:e3:04:4f:11:58:47:80:c3:e6:2b:07:38:d1:f4:52:
1c:03:f0:30:55:c7:ef:aa:76:ea:6f:59:a7:67:61:cf:b1:c2:
4b:99:28:74:42:6a:97:99:a7:57:fe:f6:e4:9a:89:50:80:ec:
6e:74:2a:65:38:06:8c:10:8b:f5:e2:db:04:2f:dc:03:24:26:
32:e4:18:72:35:56:b1:84:03:41:c1:63:87:a3:3c:09:5a:df:
3f:17:23:63:b4:60:3e:49:72:c9:d3:da:f6:bc:25:60:1b:97:
c9:81:b3:97:5a:24:39:fa:f8:8f:28:18:0b:48:10:81:a8:fa:
1f:7e:c5:50:00:08:7e:d0:0d:74:d3:d0:13:69:06:a2:ae:d2:
4a:2b:11:36:5e:7f:d8:8e:f8:a3:66:e7:8f:63:f8:87:52:02:
51:e1:38:9a:a4:9b:22:91:c1:23:ae:1b:8c:d5:83:8c:cb:9c:
26:9a:0e:54:56:28:db:c0:9e:b8:83:b1:40:1c:b7:71:7a:92:
db:35:3f:50:40:0a:5a:46:e1:6d:8f:a4:13:ae:3b:23:fb:a2:
67:63:9e:d6:0a:ea:41:9b:2f:24:1e:64:2b:eb:8e:05:10:f4:
77:7d:d9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:01:23 2026 by rpki-client