Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/70bc7703-020e-4153-b340-cced3a436951.roa
File: 70bc7703-020e-4153-b340-cced3a436951.roa (raw, json)
Hash identifier: IUNp1Eqq8ohAtqXTD4JOYOL+VDp765uUfP6uDEH7lIM=
Subject key identifier: 56:80:82:D2:6C:C1:F2:8C:84:AD:DE:21:40:04:18:13:F5:C9:A9:E5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 41FAA4640D3E42AC3877D9E60930166EDCA8DF98
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/70bc7703-020e-4153-b340-cced3a436951.roa
Signing time: Thu 16 Jul 2026 00:40:09 +0000
ROA not before: Thu 16 Jul 2026 00:40:09 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.96.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:fa:a4:64:0d:3e:42:ac:38:77:d9:e6:09:30:16:6e:dc:a8:df:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:09 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=91c7a7d5ef04f947c4e456f447d6e5af2214682dbb651f174c41533b3d0910e1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:06:76:a4:c2:94:ff:ba:55:54:19:b6:93:
f5:e4:0b:99:9b:85:b7:d2:07:dc:ef:e6:d0:cd:c5:
be:6f:1a:b3:91:7b:2b:a9:58:e6:ce:35:d3:50:96:
9e:42:81:ac:b4:d0:2d:ac:7e:18:4e:83:01:5e:70:
85:18:3b:8b:ec:a9:53:b7:50:e3:b7:c7:9b:5b:ed:
32:6b:74:56:03:1a:39:4a:99:f2:04:44:6c:02:8b:
11:81:89:d9:92:c3:a6:d0:3a:f5:bf:ec:4e:7a:35:
8d:2e:07:78:21:f1:69:80:82:c0:80:ba:9a:a7:36:
95:fc:f6:79:d4:d8:c5:3c:4f:f3:d9:c3:79:f0:05:
3c:cc:e8:b3:09:ab:6d:5d:9d:52:44:54:dc:0e:ec:
62:7f:5f:09:8e:16:b0:f3:10:20:00:ed:b1:a4:25:
aa:9c:5c:e4:3f:51:a1:91:a6:3a:37:0b:e6:32:c6:
ac:6c:52:e2:f9:a3:99:6d:30:43:b1:9a:23:b4:7f:
9b:2b:f6:6f:e3:72:f5:48:73:65:7c:3d:d2:67:77:
53:63:1b:fc:36:1d:7f:40:67:ba:7c:c3:cb:3e:d7:
8a:ce:b3:31:b6:0a:31:f2:1e:9c:e7:74:86:86:78:
65:13:9e:72:f8:c4:c6:ef:3d:16:c6:96:55:75:ef:
f1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:80:82:D2:6C:C1:F2:8C:84:AD:DE:21:40:04:18:13:F5:C9:A9:E5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/70bc7703-020e-4153-b340-cced3a436951.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.96.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:6f:f6:48:cf:69:15:d2:54:39:ba:fd:f4:4a:45:cc:75:68:
cd:f1:62:e4:b0:20:f6:61:25:c6:1f:df:5e:f4:de:03:d5:3d:
3c:52:d1:aa:c8:1a:c9:26:f1:5d:aa:9a:8a:2d:f9:65:d7:ec:
2f:26:d5:a2:a0:c7:08:34:60:5f:8b:34:2c:6e:0a:91:9e:42:
66:5c:88:c6:be:40:df:94:3d:5f:15:1a:86:9c:ea:9d:48:ef:
87:e8:3e:4e:6d:26:f7:20:f1:1f:ad:14:43:1e:50:a5:f4:b3:
9c:47:2e:1c:45:57:92:b1:ed:95:ad:f0:4a:7e:3a:81:e5:fa:
48:c7:41:35:eb:3a:ed:36:15:17:81:45:fc:4a:25:01:0d:9c:
cb:69:1d:5c:b7:a7:60:f1:2f:d7:3a:e6:01:57:e3:70:80:a7:
10:f4:63:33:df:3d:c0:bf:8a:a0:7f:ea:41:bb:8a:3c:ac:87:
85:7d:99:07:b4:d4:9d:d2:51:94:ec:7f:37:2c:64:f5:75:30:
3a:f6:01:4c:db:43:eb:d6:55:85:2e:36:83:c1:7b:1a:af:bc:
f4:af:7e:f0:2c:a9:0e:f4:d7:e8:00:bf:ee:d5:ee:e0:6e:26:
e6:52:1e:60:f5:52:b3:ae:f0:7a:2d:16:87:4f:39:57:fa:1c:
a5:6b:59:f9
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUQfqkZA0+Qqw4d9nmCTAWbtyo35gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA3MTYwMDQwMDlaFw0yNjEwMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQDkxYzdhN2Q1ZWYwNGY5NDdjNGU0NTZmNDQ3ZDZlNWFmMjIxNDY4MmRiYjY1
MWYxNzRjNDE1MzNiM2QwOTEwZTExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALb7BnakwpT/ulVUGbaT9eQLmZuFt9IH3O/m0M3Fvm8as5F7K6lY5s4101CW
nkKBrLTQLax+GE6DAV5whRg7i+ypU7dQ47fHm1vtMmt0VgMaOUqZ8gREbAKLEYGJ
2ZLDptA69b/sTno1jS4HeCHxaYCCwIC6mqc2lfz2edTYxTxP89nDefAFPMzoswmr
bV2dUkRU3A7sYn9fCY4WsPMQIADtsaQlqpxc5D9RoZGmOjcL5jLGrGxS4vmjmW0w
Q7GaI7R/myv2b+Ny9UhzZXw90md3U2Mb/DYdf0BnunzDyz7Xis6zMbYKMfIenOd0
hoZ4ZROecvjExu89FsaWVXXv8cECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRWgILS
bMHyjISt3iFABBgT9cmp5TAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NzBiYzc3MDMtMDIwZS00MTUzLWIzNDAtY2NlZDNhNDM2OTUxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNgMA0G
CSqGSIb3DQEBCwUAA4IBAQCtb/ZIz2kV0lQ5uv30SkXMdWjN8WLksCD2YSXGH99e
9N4D1T08UtGqyBrJJvFdqpqKLfll1+wvJtWioMcINGBfizQsbgqRnkJmXIjGvkDf
lD1fFRqGnOqdSO+H6D5ObSb3IPEfrRRDHlCl9LOcRy4cRVeSse2VrfBKfjqB5fpI
x0E16zrtNhUXgUX8SiUBDZzLaR1ct6dg8S/XOuYBV+NwgKcQ9GMz3z3Av4qgf+pB
u4o8rIeFfZkHtNSd0lGU7H83LGT1dTA69gFM20Pr1lWFLjaDwXsar7z0r37wLKkO
9NfoAL/u1e7gbibmUh5g9VKzrvB6LRaHTzlX+hyla1n5
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:41:19 2026 by rpki-client