Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c5a1a14-73c1-4c49-8b22-7d10c4379e08.roa
File: 9c5a1a14-73c1-4c49-8b22-7d10c4379e08.roa (raw, json)
Hash identifier: g+t4xajsMsE9UmnM8HIrDM6H2isK8baB5ML/0qI0OYQ=
Subject key identifier: 33:06:E3:33:10:EB:C7:CB:F8:09:CA:91:17:85:86:2D:A6:71:34:23
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 68F0671349EF2E8E2E1395F3DAAB504C8FFCF13F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c5a1a14-73c1-4c49-8b22-7d10c4379e08.roa
Signing time: Thu 23 Jul 2026 15:30:40 +0000
ROA not before: Thu 23 Jul 2026 15:30:40 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.70.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f0:67:13:49:ef:2e:8e:2e:13:95:f3:da:ab:50:4c:8f:fc:f1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:40 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=07cde4cfdf23b4aa6f2545dab51b3e2e212b8ef6037b41ccf95a6853c3694752, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:a4:9d:e6:2f:65:11:5d:69:a0:b5:0d:33:
f7:1e:6c:c9:50:e6:06:4d:15:2c:8a:f8:34:6b:63:
53:bf:ab:3b:9d:f4:57:1f:9d:69:5a:85:87:e2:e0:
3c:b3:3b:43:46:2c:2a:d2:89:81:40:0d:32:d0:28:
9c:1e:ff:a7:eb:c6:6a:a0:a4:c2:d0:a5:59:7d:0b:
8f:0b:60:3c:eb:4c:2b:4b:41:bc:84:78:08:ee:1e:
58:90:8c:fc:82:f1:b5:62:2c:c9:ee:ae:0c:6a:f3:
48:96:9e:21:c4:fc:2b:0f:66:52:bf:97:7b:dd:b3:
82:81:7a:f7:dd:7f:60:ad:ee:94:45:2e:05:66:03:
ce:11:d2:ac:ee:0b:75:04:eb:07:26:7a:a4:7f:0d:
be:d6:c9:1b:66:b4:31:31:a5:89:9a:30:57:71:27:
10:f3:1d:79:c8:f3:e4:5d:64:22:bd:43:02:7f:1a:
30:42:dc:cc:b8:90:9b:27:1a:82:69:ed:89:10:ac:
8e:94:0d:74:a1:ac:35:ae:12:eb:72:95:cf:df:6c:
d0:2b:b5:6c:1b:c8:79:97:c0:8b:65:d8:55:56:d2:
33:12:84:04:05:10:48:d3:81:35:4f:e2:b4:2e:83:
24:7b:63:f3:ab:f9:bb:9a:0f:41:a1:c8:7d:c0:61:
55:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:06:E3:33:10:EB:C7:CB:F8:09:CA:91:17:85:86:2D:A6:71:34:23
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c5a1a14-73c1-4c49-8b22-7d10c4379e08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d1:10:86:bb:15:54:9a:42:28:ab:67:a3:85:7b:97:25:4c:3e:
bf:11:24:47:23:0b:db:6d:74:72:a6:82:82:10:d2:4a:96:11:
74:1d:dc:78:ea:c9:79:1b:21:73:8b:c2:7f:3b:fd:a5:ef:d1:
3e:4b:d8:bd:1f:87:e9:3f:dd:34:4a:0b:c2:c1:f6:ce:2e:72:
d4:09:84:b3:4b:09:f8:1e:e7:c3:ff:5d:6c:aa:32:83:55:1c:
fe:1d:92:64:28:dc:00:ff:df:2a:77:46:d8:12:0a:46:90:22:
57:a1:0e:6e:63:98:25:d0:01:16:86:90:9e:2a:e1:94:95:51:
75:44:d0:55:fb:81:7d:b2:c8:20:6a:18:3f:da:6a:ac:98:ab:
3f:25:88:c5:5e:2b:1d:f2:b1:83:38:d5:9c:7d:4a:2a:ee:df:
29:da:79:c7:d8:7e:3f:81:1e:e5:ec:21:e6:e7:d7:9c:cc:f3:
dc:96:76:3e:26:31:9c:89:6a:b2:bb:97:09:67:de:0d:96:51:
d0:0c:84:ac:58:0b:e4:ec:1f:80:65:45:90:08:41:24:f8:49:
d9:3e:85:55:79:af:57:c3:3a:a5:c6:0b:20:55:16:52:2d:50:
19:4e:f5:8f:68:82:c5:1e:a5:2d:a5:41:f2:76:9b:e9:6b:68:
12:fc:44:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:40:58 2026 by rpki-client