Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f2c8b6b-de97-4a64-8589-e6f92f0a34b2.roa
File: 4f2c8b6b-de97-4a64-8589-e6f92f0a34b2.roa (raw, json)
Hash identifier: /naRcBPdpB7Q++itmJiIpQ3uYa9Dk1yobV9l/n5NAYY=
Subject key identifier: A0:22:02:11:91:AB:F3:40:FA:AA:AB:77:C1:AC:04:B2:7F:F9:D1:F3
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 38FED864FEDDCEF4D2EE994CB27AAFC8FF0EB4EE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f2c8b6b-de97-4a64-8589-e6f92f0a34b2.roa
Signing time: Mon 21 Sep 2026 18:22:57 +0000
ROA not before: Mon 21 Sep 2026 18:22:57 +0000
ROA not after: Sun 20 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.168.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:fe:d8:64:fe:dd:ce:f4:d2:ee:99:4c:b2:7a:af:c8:ff:0e:b4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 21 18:22:57 2026 GMT
Not After : Dec 20 23:59:59 2026 GMT
Subject: serialNumber=afe9e5edc809c88ac64d0bfc61c141d9d7cefca8687b0a4b56106562766a6e9c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c8:49:a9:08:7f:35:82:ae:0b:27:0d:74:30:
1c:62:84:53:f8:68:b6:6a:68:8a:1e:aa:e7:12:3b:
14:53:a0:64:11:4e:77:ff:8d:f9:a3:df:7f:62:e9:
ad:c8:e4:fa:38:79:29:44:1d:c2:65:74:2a:9a:ad:
ec:0c:d5:03:c2:ef:89:f5:78:ac:38:0d:5a:01:5f:
c6:66:fd:7e:b5:07:a8:df:cb:20:c3:23:b1:04:fe:
74:8d:af:86:8e:a6:16:21:9e:ba:3a:3f:24:c1:99:
6f:59:ac:87:00:59:e9:79:e9:c7:10:23:fa:53:0c:
f6:c6:8f:40:9e:6d:b8:01:1c:64:23:d0:0f:56:42:
36:e8:bc:2d:14:ee:4b:ac:4e:37:32:42:99:08:a2:
f6:34:81:b4:a8:eb:91:d8:b2:c1:d4:3d:e7:6e:e1:
ff:1c:32:bb:86:d5:4e:e7:db:41:fa:ff:d1:e9:fb:
b4:6d:4c:37:7b:dc:c3:aa:30:7f:be:54:f0:4f:d8:
55:35:1f:fa:67:9f:f5:1f:8c:e5:30:93:c6:44:fd:
d7:98:92:87:88:99:55:2c:c2:db:de:bf:c0:33:2a:
9e:89:9c:8b:d0:05:ea:aa:ed:cf:b4:60:38:43:b1:
bd:f1:68:74:5d:58:7e:e3:c0:7d:e9:08:5a:f8:30:
f8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:22:02:11:91:AB:F3:40:FA:AA:AB:77:C1:AC:04:B2:7F:F9:D1:F3
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f2c8b6b-de97-4a64-8589-e6f92f0a34b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.168.144.0/24
Signature Algorithm: sha256WithRSAEncryption
60:29:33:3a:e7:41:ee:ab:b1:ee:19:34:ec:3c:d0:73:1d:bf:
3c:cf:89:91:bf:e4:f0:a0:a0:9f:2e:58:55:ac:45:14:75:cb:
d7:20:f4:67:3a:04:b9:07:f7:5f:e8:e6:55:2d:9e:ba:e4:03:
c9:c7:21:51:bd:0d:bf:55:c6:08:89:0e:b3:cb:e2:97:eb:98:
b9:87:08:e7:82:ae:1f:9c:6b:02:4e:aa:e9:43:96:c0:05:28:
22:c7:21:d5:0e:0c:74:d9:3f:85:ed:e0:5b:d3:18:7a:1c:ac:
34:67:77:5e:a2:78:84:da:e3:b7:ca:3f:2b:20:6b:26:ce:67:
1f:74:58:b1:d3:5d:5f:ad:02:40:f5:28:84:4e:53:64:a9:5e:
06:46:e6:1e:c3:03:97:9c:c3:7f:8c:e1:28:e7:a5:a2:a9:40:
00:8c:17:06:ae:bd:4f:c4:17:1e:e3:16:1d:36:9b:c4:13:c2:
ef:8e:c2:5e:2d:e2:68:6d:98:2f:77:ab:72:13:a6:d7:56:99:
4d:c3:02:a3:52:a7:3e:ef:04:62:e6:b5:e2:d6:4f:00:82:5e:
5e:f7:c1:d2:b0:d7:fa:bc:83:77:5e:f6:4d:0e:0a:2d:b9:d8:
79:75:f5:43:c9:d9:ce:6a:d3:44:e9:a9:ff:5f:08:a8:cf:8f:
0f:51:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:31:27 2026 by rpki-client