Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/94c2a36e-245b-439a-bf61-04132c5df5a4.roa
File: 94c2a36e-245b-439a-bf61-04132c5df5a4.roa (raw, json)
Hash identifier: VwdK4yNK68XC4xrsiOyxx6tLaDOG4xKAXEZ5YGyeXJk=
Subject key identifier: 1C:45:A4:55:01:3D:4B:C6:76:84:68:2A:1F:A5:58:8B:9C:BB:6B:A0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 45FC6D60DB7852E3DF1AC83A7454801EF61EB309
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/94c2a36e-245b-439a-bf61-04132c5df5a4.roa
Signing time: Mon 26 Oct 2026 05:40:17 +0000
ROA not before: Mon 26 Oct 2026 05:40:17 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.35.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:fc:6d:60:db:78:52:e3:df:1a:c8:3a:74:54:80:1e:f6:1e:b3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:17 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=ad18cc929bc674cc7fb52e13a96cb368774e1ee3ce96346009302711a77af636, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:da:53:e4:f2:d7:81:10:c9:94:4b:19:07:
4b:39:36:32:ab:f7:32:5f:22:34:3b:5d:7a:d0:e2:
93:23:20:1a:86:08:33:57:69:e1:7b:71:42:8f:a1:
fa:57:3a:4f:18:e2:f9:87:d0:9b:86:a2:5f:5e:e2:
4b:63:b0:01:6f:fe:fd:f6:56:2a:28:a3:3e:d4:52:
ea:71:55:10:e4:3d:f5:56:f1:c9:d2:79:34:71:f0:
95:f6:c9:94:19:7f:00:db:18:a4:74:5d:04:3c:1e:
bf:f5:d5:41:ca:73:e4:a8:9d:95:c2:34:2b:ab:b2:
c0:c3:c7:3b:da:db:38:09:b0:e9:86:b2:3f:64:15:
8c:41:2f:f6:60:8e:fa:4f:7a:9a:93:73:2d:92:06:
5c:c6:53:1f:84:07:83:ad:cc:3d:d9:58:44:55:94:
df:aa:b9:b2:3b:91:93:71:e6:05:85:ba:c7:9d:71:
0b:e3:ad:82:32:4d:7d:fd:6a:42:74:9b:f0:6a:d6:
f9:ad:09:cc:7d:74:60:58:54:41:9d:ac:05:20:b6:
76:92:ed:ea:79:ae:f7:aa:ef:75:4f:44:a5:65:5f:
8b:d9:cd:d8:35:df:a7:88:c4:72:36:48:19:fb:1e:
cb:3d:b2:2d:e2:2a:5c:3a:a3:37:1a:f1:a7:ae:98:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:45:A4:55:01:3D:4B:C6:76:84:68:2A:1F:A5:58:8B:9C:BB:6B:A0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/94c2a36e-245b-439a-bf61-04132c5df5a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:a4:0a:6c:58:21:fe:1c:0a:73:78:00:43:7d:8f:5f:4f:3c:
10:3a:48:1a:45:ab:4e:e8:fc:83:d1:fa:17:69:7b:29:9a:0b:
c3:4f:b5:63:86:20:81:bf:ed:ed:bc:a1:85:da:79:71:b7:e5:
69:bb:18:d1:19:6c:e2:a4:9d:07:4f:68:14:ce:d5:cd:21:ea:
48:a4:fe:a9:d4:5a:dd:e7:19:8e:be:40:1c:f6:5f:34:e0:66:
91:f0:48:0f:b1:63:55:3c:be:69:c7:ec:c6:05:09:f0:6f:05:
02:c1:d3:56:ef:90:b9:74:91:0b:2c:c9:6f:e0:5b:d0:e2:65:
fc:ec:6c:b3:40:9a:a2:e9:31:53:7c:4b:9e:27:82:a3:82:6e:
d9:8c:83:ce:a7:70:ff:8a:1f:e4:e0:9b:61:a6:15:4c:f4:cf:
db:95:72:fe:67:56:97:53:b3:f9:66:d9:fd:64:07:03:6f:7d:
f3:04:35:3b:bc:84:c7:d6:04:93:bb:43:be:d4:76:66:89:d4:
e2:93:05:8e:e4:4b:85:f5:dc:b2:90:97:21:21:e6:07:2f:d4:
77:f5:0b:ab:b1:22:61:b8:43:9f:18:50:6b:fc:3c:d5:5a:6f:
03:50:5a:2d:59:94:6b:ea:e9:67:31:3f:eb:90:4a:03:33:84:
0c:06:04:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:29:33 2026 by rpki-client