Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/709c8cf6-9d5d-47d6-8b70-40eff8390658.roa
File: 709c8cf6-9d5d-47d6-8b70-40eff8390658.roa (raw, json)
Hash identifier: Hk+QGVYX7D+B6478OykpD/uDl2wvd3v68sUwNfqRpU4=
Subject key identifier: D1:2B:4A:31:8A:69:03:02:FE:97:D6:36:0B:34:9F:01:39:39:80:3C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2885A429DEA9DCF2FE16E9B3E34C4AF011242C9D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/709c8cf6-9d5d-47d6-8b70-40eff8390658.roa
Signing time: Mon 26 Oct 2026 05:40:21 +0000
ROA not before: Mon 26 Oct 2026 05:40:21 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.220.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:85:a4:29:de:a9:dc:f2:fe:16:e9:b3:e3:4c:4a:f0:11:24:2c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:21 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=8e4dd063ae0067579a48d9454cadf8fdd2430f4890dd613daeb02225b1d2e876, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:3c:c2:2a:ac:b1:98:1f:5d:d7:00:e2:a1:
3d:b3:aa:44:ee:36:5a:40:ea:9a:77:5f:ba:ba:06:
a2:3f:03:a1:3a:c7:2f:51:2c:38:6f:80:0b:84:cb:
7c:7b:67:72:ea:f4:14:18:5b:e7:a0:34:15:35:0c:
d6:f5:15:4c:94:dc:11:7e:12:e6:bf:61:d8:c5:b8:
15:35:c0:13:f3:90:af:fb:0f:41:8b:6c:93:95:1d:
f2:01:a8:4a:59:eb:fc:20:24:26:9b:76:db:30:c3:
45:cb:a6:97:ce:61:7a:6e:72:d6:5c:24:ea:1d:a2:
f2:32:d3:67:9b:30:d5:60:94:d4:c7:f5:10:5c:a4:
6e:a3:86:25:9c:0f:c9:1b:20:73:4a:d5:1c:c3:76:
9b:d6:dd:9c:87:55:d5:bb:3c:50:eb:31:60:ef:21:
6c:dc:d9:cf:58:09:f2:97:ad:bb:1b:9a:ec:d3:05:
23:96:6b:22:3e:0f:34:bd:b5:e6:55:b4:18:0d:28:
db:44:5c:8e:d7:16:84:a2:58:48:60:ba:89:bb:d9:
1b:2e:29:2a:b4:2e:37:30:97:d3:f5:3e:4f:47:bc:
b1:56:fe:70:a7:ab:e1:52:ba:3d:b6:83:e9:3d:f8:
53:1b:f6:b7:8e:4d:0c:2d:7a:16:cb:30:11:63:d0:
1a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2B:4A:31:8A:69:03:02:FE:97:D6:36:0B:34:9F:01:39:39:80:3C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/709c8cf6-9d5d-47d6-8b70-40eff8390658.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.220.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b9:d1:d8:9e:f1:d4:64:22:55:1b:e7:a7:2b:94:85:99:76:65:
8a:de:3c:91:50:aa:e5:d5:1a:c6:f5:87:1f:85:c3:3a:46:8e:
15:02:55:0c:50:b5:2e:b3:45:8e:2e:be:e7:49:d8:ba:e2:bf:
23:10:84:f5:1a:44:65:3c:16:20:03:d9:9e:2a:c0:e8:6c:99:
17:39:df:dc:c2:6e:e4:98:c8:a2:50:22:4f:c4:b2:c3:45:9c:
09:e8:1b:ba:07:11:b1:00:00:a2:c6:63:58:53:13:0c:c0:8d:
46:58:fd:fb:a1:e1:3e:b0:ca:21:3e:9b:ce:13:5b:a7:0c:f7:
84:0d:7d:a2:c4:07:b2:f3:2e:96:c3:c4:9a:cc:f6:00:29:fe:
61:9e:19:7c:c1:df:48:ac:35:5f:8c:fe:5c:2e:80:96:28:7e:
9b:21:cf:f2:37:fa:76:84:50:0f:14:a5:93:91:49:b9:84:da:
d2:71:c1:20:42:bb:ac:3e:a2:b6:ce:f0:29:c6:c0:eb:39:17:
80:a2:97:27:55:eb:85:49:54:bc:8d:28:86:64:9a:b8:e2:20:
45:39:d5:f5:58:20:c4:21:a6:de:cd:6f:32:43:c6:3c:d7:e5:
de:7e:44:ea:57:8e:1b:7c:ae:76:82:16:58:12:9d:3a:77:a7:
27:4b:07:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:06:27 2026 by rpki-client