Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/87cbc454-e777-437d-a43a-911995d2a7ce.roa
File: 87cbc454-e777-437d-a43a-911995d2a7ce.roa (raw, json)
Hash identifier: lWc4fIyQLb1YrN3xwz039WRXO2AHDgNRQEa86Tkfy/g=
Subject key identifier: 9D:FF:1C:48:52:A7:43:20:EF:53:91:37:0E:ED:52:45:00:E6:B8:2B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3ABAE55DE81DA7F88FFB1510DF995754F93C1E25
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/87cbc454-e777-437d-a43a-911995d2a7ce.roa
Signing time: Thu 16 Jul 2026 00:40:05 +0000
ROA not before: Thu 16 Jul 2026 00:40:05 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.21.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ba:e5:5d:e8:1d:a7:f8:8f:fb:15:10:df:99:57:54:f9:3c:1e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:05 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=5574d59860096bea5a9da177640fab04381e0df85c922d3e945bad19c9c59884, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:5e:35:a6:ce:e6:27:9b:e2:88:90:3f:82:
9c:92:4f:08:75:a6:37:75:5c:05:ec:3d:08:9c:de:
de:f4:51:33:ab:43:9f:f7:d8:3d:6d:f4:53:ae:c1:
c9:57:24:8a:36:14:55:08:0b:77:ca:19:fb:e4:76:
85:2b:fe:b9:db:35:13:94:0d:08:92:6e:47:85:56:
0f:28:87:48:c1:50:60:f6:68:54:26:fd:e8:bc:e7:
f3:e8:2f:d1:70:17:12:9f:2f:e6:65:9a:f0:bc:08:
2d:d9:a5:61:49:23:9e:85:07:cb:e6:7c:9e:9f:bf:
ac:07:17:ab:3b:4c:48:59:08:bd:51:05:fa:b6:58:
50:9c:74:c0:a5:5c:67:a5:a9:1c:59:66:71:12:22:
b7:71:51:89:04:24:7f:69:f0:ff:0a:86:cc:dc:a0:
fd:c1:c8:ed:9c:00:43:57:9e:53:38:f3:a8:2b:8a:
48:bb:7a:2b:bf:8d:3c:37:b7:8f:f7:1e:60:d6:63:
d4:51:07:ae:fa:74:85:70:a7:c0:53:6f:6b:18:9f:
1f:4c:f0:3f:91:3b:30:7e:89:98:f2:4d:4f:2a:5d:
d1:42:5e:9f:3c:d3:04:37:78:8a:0b:22:74:ff:ce:
e1:6e:2a:cc:fa:5a:18:1d:ff:a3:45:00:d1:f8:43:
b5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FF:1C:48:52:A7:43:20:EF:53:91:37:0E:ED:52:45:00:E6:B8:2B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/87cbc454-e777-437d-a43a-911995d2a7ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.21.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:1b:04:ce:bf:03:b3:99:ae:36:58:2b:01:41:fa:f7:75:1d:
e6:4d:ec:35:15:d3:7f:bf:5c:bb:f2:bd:63:e6:7d:04:13:55:
14:f0:4a:e6:03:6f:75:b5:d4:34:a1:fb:e3:3c:81:66:7e:ef:
a4:1e:09:3e:db:60:e1:b5:cf:5a:64:f0:36:ef:59:2f:74:77:
33:0b:03:5d:61:5a:52:bb:bd:c1:4d:be:67:9a:a1:54:34:59:
2c:c2:a8:f5:c7:49:a3:87:54:5c:72:39:b6:2f:85:cf:58:8b:
af:e3:30:16:a0:4b:9e:67:35:0b:04:b4:37:2f:d8:b3:26:07:
6a:62:35:49:9a:46:b6:af:a6:50:c8:cb:f7:3a:b7:e8:7e:c3:
9d:03:82:d8:6f:89:26:54:46:10:1e:f0:38:6f:3d:d8:e2:7a:
b9:41:42:03:56:c5:61:bb:fa:47:e4:75:9d:e9:f0:8a:2e:ab:
0f:58:10:3c:2f:bd:2b:22:df:48:ee:10:42:4d:e7:e4:94:66:
fb:f8:d3:bb:54:0c:27:d1:72:1f:2d:47:4a:40:fd:b1:de:c6:
d1:c6:4f:e5:f4:d5:60:24:fa:2e:fd:81:c5:f0:c9:2c:ce:b9:
ef:3f:e3:a7:78:9e:c4:f5:2c:6a:9b:28:37:58:7c:d1:f8:bb:
0f:aa:15:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:14 2026 by rpki-client