Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6252e9a3-4fdc-4c43-b91b-deb58ca2dd7c.roa
File: 6252e9a3-4fdc-4c43-b91b-deb58ca2dd7c.roa (raw, json)
Hash identifier: oClEEkM7V88fmim4379MFQ32HMKa1/8evbSsohQc8Eg=
Subject key identifier: 43:8A:54:0E:D3:E7:7E:73:CC:CB:7D:80:F3:04:A0:3D:7A:E4:2E:1A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 70D7FCAEF87972FFCDA39B791A92E46A76CF1B9D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6252e9a3-4fdc-4c43-b91b-deb58ca2dd7c.roa
Signing time: Thu 16 Jul 2026 00:40:31 +0000
ROA not before: Thu 16 Jul 2026 00:40:31 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.46.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d7:fc:ae:f8:79:72:ff:cd:a3:9b:79:1a:92:e4:6a:76:cf:1b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:31 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=9d866b87e9676162c3b2098ea5c069bc2a964d3e7fda1e6a2eeaa7141e67d246, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:f6:f2:0b:8b:49:99:f6:a1:7c:98:c9:ac:
1b:f9:4c:0e:21:3b:ff:d9:c9:15:9c:e1:3c:67:0b:
f6:47:80:fc:a9:35:2d:e0:5a:15:ab:06:37:7b:5f:
c7:ff:09:d2:05:19:e5:a0:3e:c6:15:f5:f4:1c:e8:
fc:62:e0:a5:8d:2e:92:26:d4:e9:f3:46:9c:7f:fa:
68:93:59:78:20:67:f2:82:b2:cd:15:8e:93:77:f9:
5d:ba:c4:3b:04:01:ea:89:75:29:73:c3:05:e8:84:
ea:9c:2b:36:de:04:3f:73:8a:a0:24:87:f1:68:3b:
d7:33:53:a3:f6:d0:4b:e0:44:5c:2d:43:87:4c:63:
83:87:09:a1:c2:17:45:eb:65:58:92:ec:aa:77:69:
03:8f:1f:b5:7d:ff:f1:23:4e:6b:ed:58:0b:aa:e7:
4b:31:83:d5:52:d0:64:ea:01:56:4f:1d:03:c2:c5:
9d:46:81:1b:bd:f7:ef:eb:4c:f1:7e:16:93:2b:d4:
d9:58:43:c9:f6:19:f0:99:72:06:94:ec:c2:92:dc:
5b:84:f9:f3:80:78:24:5c:45:5e:be:ca:cd:dd:c1:
b0:3c:eb:98:d1:f8:86:08:de:0b:37:c7:be:2c:b8:
8b:89:81:9a:7d:03:da:61:6b:04:2f:6f:4a:6f:63:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8A:54:0E:D3:E7:7E:73:CC:CB:7D:80:F3:04:A0:3D:7A:E4:2E:1A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6252e9a3-4fdc-4c43-b91b-deb58ca2dd7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.46.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1d:cd:2f:0b:95:3a:00:d2:2a:91:b5:f3:2e:80:54:fd:83:c4:
2c:85:4d:86:56:a4:26:58:98:af:0a:d0:4a:bc:49:4d:1d:cf:
12:f9:c5:16:1c:60:47:0d:61:fa:b5:ef:23:08:70:a8:24:77:
77:44:f1:dc:a9:ed:03:6a:9c:9e:08:0d:40:42:5c:e9:7d:27:
b7:4e:d8:12:6a:69:4f:c3:eb:f7:a4:a7:16:f7:7a:bf:45:44:
db:a6:47:26:4d:c4:73:08:50:5b:48:6b:66:ed:a8:cd:2c:12:
62:06:a2:7e:d4:b4:5e:fc:ea:5e:1b:b5:ab:a9:c7:47:e5:a3:
3d:f6:3c:7c:e4:f5:ed:ba:11:51:2a:d7:d6:a1:67:c8:e2:c0:
6f:b7:a6:38:95:20:d9:fc:d4:c0:4b:b6:5f:c0:b6:98:98:33:
8d:e5:be:07:af:ab:d2:0d:bb:37:30:f9:b9:1b:dc:45:c3:1d:
36:cf:a6:da:48:59:1d:90:c7:c2:f7:77:19:20:2a:4c:f6:99:
0d:92:f4:53:47:89:db:50:46:1a:04:37:81:8d:0d:b2:0c:3f:
df:3b:13:06:05:77:c8:85:52:80:92:1b:48:2a:da:bd:63:6c:
86:ab:32:18:e8:91:72:e3:c8:3a:1a:da:b4:15:fa:d0:6e:96:
1d:65:e3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:11 2026 by rpki-client