Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b39e8644-b3a5-4477-b7b6-d340235a9010.roa
File: b39e8644-b3a5-4477-b7b6-d340235a9010.roa (raw, json)
Hash identifier: xfRi+DPzL/wm585/EvZa3G0kvbhbklDb/03DY4gzeqY=
Subject key identifier: 03:F3:94:FB:3D:DA:01:26:BD:FC:C7:A8:2C:20:A5:FA:58:6E:B1:51
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 577938B4BBF2D5C78912A6C7E9CFB98752985A84
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b39e8644-b3a5-4477-b7b6-d340235a9010.roa
Signing time: Thu 22 Oct 2026 00:10:07 +0000
ROA not before: Thu 22 Oct 2026 00:10:07 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.168.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:79:38:b4:bb:f2:d5:c7:89:12:a6:c7:e9:cf:b9:87:52:98:5a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 22 00:10:07 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=261ba3bd5ee821bb38bf2060a587688538907cd609bdff38b345d5770eb2ec06, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:62:c4:01:7d:ef:63:21:ff:64:16:95:a0:fb:
8e:5c:d9:e4:ab:15:43:17:ea:09:20:4a:a5:29:d0:
2b:64:54:0b:a8:40:95:28:4d:b6:71:78:ea:77:8d:
79:76:90:8b:74:99:64:88:da:fc:dc:b5:23:cf:13:
8a:56:78:85:d3:3d:85:89:53:6f:82:ca:f5:07:55:
7e:cb:0d:28:9b:19:9f:27:45:04:65:ce:79:0a:e7:
5c:ac:81:bc:90:8e:57:22:58:08:83:7a:87:0c:04:
6f:b3:9b:f4:1e:2b:b1:32:fe:14:90:2e:69:3e:1c:
04:b3:28:c1:5c:7a:6f:07:65:1d:36:06:f0:44:9a:
bf:8d:c2:c5:99:d7:69:ff:dc:1c:8d:60:78:18:1f:
64:a1:c2:3f:9a:19:76:b0:16:66:05:32:75:27:42:
23:cd:f8:69:eb:7e:1d:3b:6f:6f:19:0f:3a:9f:61:
df:f5:ae:7d:23:28:34:20:91:5e:34:d1:be:90:26:
77:ab:25:67:6e:dd:2b:b6:b7:06:ca:fb:21:46:2f:
82:f3:da:2f:61:0b:0d:79:c4:a2:8d:25:a1:51:ed:
32:33:4d:1f:55:2f:71:5b:15:45:51:0b:cb:e1:2c:
d3:80:3f:e7:1d:48:30:c5:24:43:da:c6:c4:0c:ef:
91:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F3:94:FB:3D:DA:01:26:BD:FC:C7:A8:2C:20:A5:FA:58:6E:B1:51
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b39e8644-b3a5-4477-b7b6-d340235a9010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.168.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0e:d5:36:54:21:9b:fa:97:4d:2f:11:15:d2:b5:6f:86:a4:be:
22:76:82:4f:35:05:67:1f:bd:e3:7f:7d:7a:9b:e0:a7:74:14:
e0:67:fe:34:ea:a1:ee:ad:95:92:af:62:d5:a2:d0:e7:de:76:
91:f9:24:ca:d3:01:ff:37:9d:4f:12:0f:4d:04:fe:50:89:c5:
14:c5:e5:a7:7e:90:16:18:92:34:3e:cb:6c:0d:aa:20:54:ee:
73:12:d0:54:1e:a5:9f:74:76:44:1c:1b:d3:5f:d8:29:e0:8b:
c1:ed:6f:3d:4e:e1:e9:68:06:0e:05:31:b9:40:87:bd:15:b3:
c0:48:1e:a2:ac:24:16:c5:e1:99:93:84:d8:de:6d:a3:31:bb:
2e:16:b2:18:08:27:a8:d8:0d:c2:3d:8d:b9:79:e3:2b:3d:af:
1f:12:b3:23:32:5e:8b:6a:2f:fb:75:70:07:44:3c:af:c7:97:
45:56:00:90:23:dd:14:ee:c4:a8:33:3f:af:bc:9b:cd:14:f5:
e5:4e:6b:2b:10:15:1b:7c:aa:17:36:b8:02:e0:c6:00:c6:75:
e7:1d:0b:4a:eb:81:a8:32:83:2e:1a:ec:52:21:4c:22:2d:3b:
11:9b:e4:6c:24:a4:89:70:21:9a:7c:f6:50:b1:73:de:83:fd:
fd:8e:38:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 17:52:56 2026 by rpki-client