Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/60c12693-1526-46ae-aa45-d5276a0c0f79.roa
File: 60c12693-1526-46ae-aa45-d5276a0c0f79.roa (raw, json)
Hash identifier: JL3YAT6IBpFiV/zkA30+sXnY8ONSI6KcIN2xclyidAM=
Subject key identifier: 18:10:49:ED:89:00:75:71:73:F3:72:CC:31:95:E5:9F:74:9C:B4:FC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 61450D8433DC760349A89A0BA2A05BC90CFAEE33
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/60c12693-1526-46ae-aa45-d5276a0c0f79.roa
Signing time: Thu 16 Jul 2026 00:40:28 +0000
ROA not before: Thu 16 Jul 2026 00:40:28 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.86.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:45:0d:84:33:dc:76:03:49:a8:9a:0b:a2:a0:5b:c9:0c:fa:ee:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:28 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=51222d7eace32225b56af338b3b801721206c70947594838e9f8900a72e9a205, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:6f:fe:46:61:dd:3e:15:a6:00:ab:92:82:
54:b3:68:12:9e:b1:39:d3:d0:73:5e:28:69:df:5f:
df:ff:8e:97:1d:ee:48:f9:0f:57:b8:c9:70:2d:62:
11:3d:a5:a1:5d:eb:a1:c8:83:af:d8:fe:6d:f4:0c:
93:1f:ce:87:91:93:d9:45:da:13:d3:78:b0:e9:bc:
55:47:f1:60:4c:15:66:c8:80:08:73:83:ed:8f:99:
fd:82:ce:be:e7:75:49:b7:69:0a:e8:51:ce:cb:20:
06:59:4c:6f:b6:b5:be:01:57:34:ff:9d:5d:56:a7:
b1:3f:0c:a1:ce:2a:6a:6f:28:d8:91:15:2c:f2:55:
68:c8:35:7b:46:2f:77:a1:cb:f9:93:ab:69:09:e8:
e0:8f:92:33:05:43:b5:23:ae:5c:d3:bd:3d:1e:ab:
6c:29:48:93:26:0e:ef:3a:f8:b5:c7:94:7e:c1:87:
2e:17:3c:7f:46:c9:ec:69:3b:d6:22:3d:77:d6:50:
d9:cd:3e:17:7a:ac:a1:fb:68:73:ae:39:c3:d6:57:
e6:85:42:d5:ea:dc:69:dc:e9:f5:98:e8:20:ab:b2:
49:4c:2d:9a:75:f6:f4:92:c6:a6:fc:5b:68:ed:1a:
cb:cd:1a:3b:fa:ff:a5:43:c7:da:d6:54:aa:60:57:
94:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:10:49:ED:89:00:75:71:73:F3:72:CC:31:95:E5:9F:74:9C:B4:FC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/60c12693-1526-46ae-aa45-d5276a0c0f79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.86.0.0/15
Signature Algorithm: sha256WithRSAEncryption
66:2a:e4:67:87:f9:18:dc:29:70:a2:49:32:75:3d:48:99:b7:
6c:53:5e:dd:54:38:a3:30:dc:4e:e4:95:87:bf:c3:df:a4:6d:
a7:f1:d4:46:a0:0e:b1:d1:d8:8d:52:8b:bb:e1:b1:82:5b:21:
c5:ba:0e:c2:3f:30:b7:8e:df:3d:b2:64:a1:a0:5d:b9:48:1d:
ea:be:a0:14:02:6e:3e:be:c3:13:80:09:28:c8:6e:30:86:a2:
be:a4:ba:83:6a:e1:f4:f6:ed:a3:c1:b1:ef:e5:e0:93:12:70:
3b:79:3e:7c:36:f3:90:31:0f:a0:c4:6e:bd:b8:f4:3f:81:84:
11:01:27:00:87:20:36:3c:6e:1a:32:47:7c:eb:14:d2:34:ce:
69:39:ac:96:7e:31:de:7b:94:5d:2f:e7:50:b4:12:73:53:b9:
68:94:80:ee:fe:76:90:27:17:bb:75:00:0c:08:25:55:5d:e8:
df:62:ec:36:ec:8a:bc:df:01:33:cf:ee:ab:7b:22:ec:73:ac:
87:bd:cf:f7:54:13:a7:1e:5d:84:1f:69:fd:e0:77:ac:8f:2e:
e2:57:09:d7:58:f4:b3:18:d1:48:ee:1d:d1:76:77:fb:5e:b7:
4b:65:c9:99:20:6e:d2:02:68:e7:9d:00:72:b2:01:45:13:d0:
69:ac:77:2e
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUYUUNhDPcdgNJqJoLoqBbyQz67jMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA3MTYwMDQwMjhaFw0yNjEwMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQDUxMjIyZDdlYWNlMzIyMjViNTZhZjMzOGIzYjgwMTcyMTIwNmM3MDk0NzU5
NDgzOGU5Zjg5MDBhNzJlOWEyMDUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMh1b/5GYd0+FaYAq5KCVLNoEp6xOdPQc14oad9f3/+Olx3uSPkPV7jJcC1i
ET2loV3rociDr9j+bfQMkx/Oh5GT2UXaE9N4sOm8VUfxYEwVZsiACHOD7Y+Z/YLO
vud1SbdpCuhRzssgBllMb7a1vgFXNP+dXVansT8Moc4qam8o2JEVLPJVaMg1e0Yv
d6HL+ZOraQno4I+SMwVDtSOuXNO9PR6rbClIkyYO7zr4tceUfsGHLhc8f0bJ7Gk7
1iI9d9ZQ2c0+F3qsoftoc645w9ZX5oVC1ercadzp9ZjoIKuySUwtmnX29JLGpvxb
aO0ay80aO/r/pUPH2tZUqmBXlP8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQYEEnt
iQB1cXPzcswxleWfdJy0/DAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NjBjMTI2OTMtMTUyNi00NmFlLWFhNDUtZDUyNzZhMGMwZjc5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATNWMA0G
CSqGSIb3DQEBCwUAA4IBAQBmKuRnh/kY3ClwokkydT1ImbdsU17dVDijMNxO5JWH
v8PfpG2n8dRGoA6x0diNUou74bGCWyHFug7CPzC3jt89smShoF25SB3qvqAUAm4+
vsMTgAkoyG4whqK+pLqDauH09u2jwbHv5eCTEnA7eT58NvOQMQ+gxG69uPQ/gYQR
AScAhyA2PG4aMkd86xTSNM5pOayWfjHee5RdL+dQtBJzU7lolIDu/naQJxe7dQAM
CCVVXejfYuw27Iq83wEzz+6reyLsc6yHvc/3VBOnHl2EH2n94Hesjy7iVwnXWPSz
GNFI7h3Rdnf7XrdLZcmZIG7SAmjnnQBysgFFE9BprHcu
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:41:01 2026 by rpki-client