Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5480e32c-3a23-4243-82e3-c7eea059d814.roa
File: 5480e32c-3a23-4243-82e3-c7eea059d814.roa (raw, json)
Hash identifier: FyJh8mFTfU+fsz82z2suGPrAug47aLQK8EjZ1/1vZHo=
Subject key identifier: 84:10:BA:93:3D:C0:6A:08:81:AB:78:CF:A7:98:81:D9:EF:7A:5E:7B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7BEB339C7B0B6BCDB1F389A10BC094AB5353CBFE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5480e32c-3a23-4243-82e3-c7eea059d814.roa
Signing time: Thu 16 Jul 2026 00:40:29 +0000
ROA not before: Thu 16 Jul 2026 00:40:29 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.92.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:eb:33:9c:7b:0b:6b:cd:b1:f3:89:a1:0b:c0:94:ab:53:53:cb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:29 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=e2ea5fea5a36b4f2d014b7713807e0ceef59f850a265ca9e36fbd11c90df5b27, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:a5:31:38:0e:ac:a2:ed:4c:bb:5c:09:a0:
b8:67:01:eb:01:a6:cf:f3:2c:27:0e:ea:bd:d3:71:
7b:d0:55:af:fb:e7:4c:bc:80:2e:92:62:66:e7:cc:
06:42:04:10:85:4a:3b:a9:98:9c:ae:65:29:e1:ce:
7b:27:b5:d0:46:0a:7e:1e:9e:de:aa:5f:95:2f:29:
0a:4d:4b:84:d0:b4:ac:e7:49:47:4f:51:65:b2:f2:
c8:05:62:bd:0a:07:2f:93:46:cc:55:06:ca:a8:0e:
3e:2f:c5:c2:c9:47:cb:52:87:90:0b:fe:8d:d5:12:
ed:87:b5:d9:b4:52:a2:34:bd:df:63:ba:55:eb:8c:
04:46:bc:15:2a:f2:aa:27:42:a1:30:1c:ed:bd:8c:
84:9e:43:e0:6f:f8:82:68:b1:0d:b2:cf:6f:00:0b:
8c:87:ca:30:98:9b:d2:77:17:90:b2:1f:f6:6a:13:
d5:84:5c:d4:cc:54:a9:da:c6:51:f5:ca:dc:79:18:
c6:cc:3a:6c:14:e4:e3:63:6c:fc:36:7f:19:78:d5:
a8:06:70:e9:4c:6d:af:f5:68:d8:83:ee:23:15:35:
3c:da:e2:1b:a4:29:55:ff:ce:9d:7e:95:67:64:f4:
2b:f6:9c:58:84:9a:10:dd:90:f5:b1:c4:19:e5:ed:
d2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:10:BA:93:3D:C0:6A:08:81:AB:78:CF:A7:98:81:D9:EF:7A:5E:7B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5480e32c-3a23-4243-82e3-c7eea059d814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:8d:fb:b6:7b:ed:cd:f5:04:29:9a:c0:59:97:f0:6d:79:da:
6b:57:1d:8b:26:1b:6d:fb:5c:8c:52:6e:60:4a:0f:27:18:a6:
4a:7c:60:e6:e8:d5:c0:cc:1f:34:02:f9:43:ba:b6:f9:2e:b3:
50:30:b2:55:c2:b5:21:36:f9:70:7f:5f:de:dc:02:74:13:ef:
bc:1d:e4:96:67:2d:e5:79:13:90:57:44:ff:ba:b1:44:ec:d2:
96:3f:34:08:b3:ee:fb:bc:ea:19:2f:ef:65:2b:a5:46:47:b6:
fc:0e:38:d2:96:d1:b9:44:e1:15:00:2a:8e:29:8e:0b:cf:75:
10:95:a6:60:79:c0:4f:85:b4:a2:12:df:38:95:93:b4:c3:95:
b3:9f:39:e2:d5:f5:4a:f3:3c:db:e6:53:2a:29:46:7f:a8:30:
a2:e6:ff:d2:6b:1e:53:31:19:fc:83:72:d1:3e:6b:1e:6b:1f:
ef:5e:b3:9e:78:ba:65:17:12:41:ea:ed:3e:76:58:f7:3a:5f:
6f:01:b3:ba:91:8a:df:b5:db:21:7e:a1:32:ac:aa:b6:3d:29:
cd:14:14:8b:17:fe:09:a4:18:86:bf:1e:5c:a9:74:b4:3f:5b:
3c:50:69:2d:29:de:8a:73:36:eb:80:9c:5e:6a:ef:f3:dc:45:
c4:0b:aa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:31:37 2026 by rpki-client