Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b1f2e92a-59bb-45af-9b7f-630a07248560.roa
File: b1f2e92a-59bb-45af-9b7f-630a07248560.roa (raw, json)
Hash identifier: mWnvj1D2Rm6+VeBrywrQ+yj699XllZWLaf+xzjY9Xpo=
Subject key identifier: A8:FB:77:4A:79:83:CC:85:07:A2:ED:45:84:3C:8C:D8:09:3B:2E:5D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 05652ED55AC285A75C738117ED344CC91994EC23
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b1f2e92a-59bb-45af-9b7f-630a07248560.roa
Signing time: Thu 23 Jul 2026 15:30:17 +0000
ROA not before: Thu 23 Jul 2026 15:30:17 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.240.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:65:2e:d5:5a:c2:85:a7:5c:73:81:17:ed:34:4c:c9:19:94:ec:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:17 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=29d4ba8179f5be6d7de86a28459c864ba60e1b1a62794b9e5d06dc94edac90e5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:30:7e:1b:cb:8f:c5:6f:d9:c7:21:31:04:
45:53:1d:0c:37:07:a9:94:69:82:67:b5:87:57:1a:
55:7f:28:95:1e:df:41:18:fe:79:e9:a6:91:0d:d1:
be:01:da:f7:3d:a2:55:ac:59:71:e1:df:d7:ed:4f:
f7:19:bf:4f:74:ee:0c:60:e3:44:1b:01:41:e6:69:
32:a9:0b:40:cc:ad:71:87:4e:eb:62:ac:ab:4a:b1:
31:71:77:6f:8c:86:cc:82:2f:34:96:61:48:98:61:
f1:e5:ea:37:23:38:55:f2:1d:48:9a:cf:92:ff:ca:
bc:a3:9a:0d:74:9f:e7:9e:ce:66:ea:26:cf:d6:26:
13:ed:d0:47:d4:dc:3e:8d:d8:3a:d0:4a:bb:b9:6d:
aa:83:6a:83:1c:fa:00:7f:4e:7a:11:81:35:a6:7a:
3a:94:da:2e:bd:97:86:fe:ad:ab:f8:5c:6c:50:69:
dc:2a:07:c1:51:8b:bb:ce:6b:9c:19:2f:75:8d:c9:
35:85:f8:ae:ee:0c:b7:78:4d:8a:5e:3f:fc:a5:8d:
9c:98:7b:7f:75:1e:1b:04:e8:6b:10:5f:d8:f5:7b:
66:e2:54:7f:ce:c4:3c:d4:85:59:df:c6:25:5f:d2:
67:46:41:c9:6d:21:07:3f:f5:37:10:50:58:7e:1e:
08:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FB:77:4A:79:83:CC:85:07:A2:ED:45:84:3C:8C:D8:09:3B:2E:5D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b1f2e92a-59bb-45af-9b7f-630a07248560.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.240.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:e8:1b:17:c9:11:81:3f:12:5e:5d:fd:2e:f0:ac:7d:8f:4a:
2a:9d:9d:25:56:c8:bd:2a:93:5a:7b:5a:1c:fa:c5:34:a1:c0:
4c:59:3d:03:0d:02:a2:d7:bc:4c:76:81:18:c2:ef:2a:75:58:
31:82:33:95:9e:9d:54:7e:1b:d7:97:7b:77:69:5c:03:c3:ea:
3b:38:e1:ec:76:9b:2f:2d:c4:59:ed:c9:40:38:58:bf:bf:10:
0d:39:cf:1d:83:fd:9a:5e:87:85:62:d9:05:7d:62:0b:ea:8f:
51:4e:63:a6:84:9a:37:0a:5d:d3:1f:c2:e7:5b:eb:b2:c6:37:
5c:bf:63:fb:07:4c:a7:41:5b:1f:2c:da:73:8b:32:67:23:8c:
3d:e9:b8:ca:9e:e8:63:30:31:d4:38:57:75:7a:f7:e3:07:f8:
e5:31:31:ea:e2:e7:da:1a:26:1d:de:29:29:44:ee:af:45:3f:
ec:29:a9:b0:48:dd:ff:4f:bc:3a:b8:8c:07:1c:16:af:6a:4b:
35:63:73:fb:a1:9c:25:10:f1:cb:ab:03:6f:cf:19:dd:1b:df:
9c:1f:c5:fa:c8:6a:e4:2c:99:65:59:89:cc:c2:29:c5:54:88:
32:5e:42:ac:64:e5:2d:6d:ce:88:bd:56:89:66:2c:36:34:ae:
73:f6:99:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:31:47 2026 by rpki-client