Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f7195fd-bf95-4b3a-81b1-908a89b8b4b1.roa
File: 7f7195fd-bf95-4b3a-81b1-908a89b8b4b1.roa (raw, json)
Hash identifier: bmNFX2H4gRlRRKtGunPSN2Cr/qEHFEQQ6vqLxbg2Yjc=
Subject key identifier: AD:66:B7:B2:20:41:2B:CD:1F:A6:DA:31:28:62:2B:F0:E6:75:7B:27
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5079A2F83A5F65465732B26AD030A6D18F19FD5E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f7195fd-bf95-4b3a-81b1-908a89b8b4b1.roa
Signing time: Thu 16 Jul 2026 00:40:08 +0000
ROA not before: Thu 16 Jul 2026 00:40:08 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.93.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:79:a2:f8:3a:5f:65:46:57:32:b2:6a:d0:30:a6:d1:8f:19:fd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:08 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=df5d91b397cd06f567135e2ee029ca4e5b84acb6719fac07c317b9b9ff09f4b6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c3:30:3f:90:3c:28:fd:2a:2b:3f:24:f7:83:
ef:2f:03:87:f4:10:e3:8d:61:a2:49:aa:66:34:7a:
02:ee:cf:1c:28:56:65:c3:3d:40:4e:c5:97:1a:24:
86:84:8a:a1:63:c1:79:15:d7:6d:33:e2:cf:14:21:
e3:4a:23:39:5c:3a:11:a2:66:7d:46:f6:9c:ad:1a:
a5:43:b6:82:ac:2c:4a:23:93:26:04:a6:b6:37:6c:
4c:63:aa:e6:9b:62:eb:f5:87:61:54:ea:f6:73:40:
be:4a:f4:f8:85:ed:84:0c:5c:97:9b:25:1b:a2:f1:
38:6e:5d:58:10:5d:7b:40:5f:b6:ae:c5:8f:31:25:
a5:e8:e5:fa:d0:65:70:89:16:65:e2:35:21:fd:d6:
b9:3b:a8:c4:f5:f8:fd:73:82:02:52:75:17:16:c5:
2f:1e:fb:46:02:03:6a:95:02:49:79:06:c7:38:36:
56:59:f9:0a:5d:47:79:fc:90:c8:9b:6f:85:a5:23:
bc:6d:ae:fb:06:96:26:f8:b7:f6:30:ad:b2:1d:24:
41:d2:b6:3a:20:18:db:cc:ba:4f:69:89:c2:72:e1:
32:7e:61:71:3d:53:72:a8:6d:64:51:bb:47:04:e6:
5b:c2:6b:86:60:fc:fc:8b:54:74:ef:02:7f:79:e4:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:66:B7:B2:20:41:2B:CD:1F:A6:DA:31:28:62:2B:F0:E6:75:7B:27
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f7195fd-bf95-4b3a-81b1-908a89b8b4b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:04:c0:db:d9:80:4f:07:ac:c6:1c:46:5e:f7:fb:8f:fa:85:
84:7d:6c:c9:19:f4:5d:09:6b:40:cb:a1:07:6f:40:af:39:23:
12:6b:3d:e6:98:22:9b:79:ab:e8:5e:52:6a:53:74:c4:27:62:
ee:0e:ae:0c:1f:80:bf:b8:f2:3d:c5:6c:88:6a:70:4f:88:1e:
dd:06:cb:93:f4:2c:e1:35:0a:41:5e:d3:92:a2:24:be:6f:bb:
c0:c7:c8:67:e8:97:87:9c:7a:e1:6d:d0:24:2c:1e:af:ba:57:
c3:30:60:5f:aa:a4:f6:6a:cd:b6:76:d4:9d:77:68:c5:88:5b:
e2:e1:bb:94:a8:18:7e:fd:73:e1:cd:53:21:cc:4e:aa:f2:68:
dc:9b:65:33:e3:5e:8a:db:24:94:69:dd:38:8a:39:74:cc:b1:
e8:9c:4c:47:4f:82:90:ef:d2:aa:55:29:3f:5d:24:bb:04:dd:
c0:0c:31:a5:7a:c8:50:0c:cf:9c:a4:fd:ed:99:27:9a:c3:aa:
75:4f:c8:52:ac:ff:79:94:d1:ee:bf:10:1d:31:34:5f:1f:fe:
1f:65:15:3c:75:f1:d2:2c:d3:d1:63:35:dc:6b:97:e6:87:2b:
d5:dc:ad:ec:c3:94:3f:0a:0a:4e:27:8e:bc:b3:68:1e:39:22:
be:05:73:8d
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUUHmi+DpfZUZXMrJq0DCm0Y8Z/V4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA3MTYwMDQwMDhaFw0yNjEwMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQGRmNWQ5MWIzOTdjZDA2ZjU2NzEzNWUyZWUwMjljYTRlNWI4NGFjYjY3MTlm
YWMwN2MzMTdiOWI5ZmYwOWY0YjYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKLDMD+QPCj9Kis/JPeD7y8Dh/QQ441hokmqZjR6Au7PHChWZcM9QE7Flxok
hoSKoWPBeRXXbTPizxQh40ojOVw6EaJmfUb2nK0apUO2gqwsSiOTJgSmtjdsTGOq
5pti6/WHYVTq9nNAvkr0+IXthAxcl5slG6LxOG5dWBBde0Bftq7FjzElpejl+tBl
cIkWZeI1If3WuTuoxPX4/XOCAlJ1FxbFLx77RgIDapUCSXkGxzg2Vln5Cl1HefyQ
yJtvhaUjvG2u+waWJvi39jCtsh0kQdK2OiAY28y6T2mJwnLhMn5hcT1TcqhtZFG7
RwTmW8JrhmD8/ItUdO8Cf3nktYUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBStZrey
IEErzR+m2jEoYivw5nV7JzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
N2Y3MTk1ZmQtYmY5NS00YjNhLTgxYjEtOTA4YTg5YjhiNGIxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNdMA0G
CSqGSIb3DQEBCwUAA4IBAQBuBMDb2YBPB6zGHEZe9/uP+oWEfWzJGfRdCWtAy6EH
b0CvOSMSaz3mmCKbeavoXlJqU3TEJ2LuDq4MH4C/uPI9xWyIanBPiB7dBsuT9Czh
NQpBXtOSoiS+b7vAx8hn6JeHnHrhbdAkLB6vulfDMGBfqqT2as22dtSdd2jFiFvi
4buUqBh+/XPhzVMhzE6q8mjcm2Uz416K2ySUad04ijl0zLHonExHT4KQ79KqVSk/
XSS7BN3ADDGleshQDM+cpP3tmSeaw6p1T8hSrP95lNHuvxAdMTRfH/4fZRU8dfHS
LNPRYzXca5fmhyvV3K3sw5Q/CgpOJ468s2geOSK+BXON
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:25:09 2026 by rpki-client