Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b41fa9b7-d736-4d41-9fc2-9feda5a87248.roa
File: b41fa9b7-d736-4d41-9fc2-9feda5a87248.roa (raw, json)
Hash identifier: LmBtdBP2ey16eKcPOFMjYHroyYDUYcPG7a7KjzRx1JA=
Subject key identifier: 08:00:CF:CD:E6:29:4C:7A:F6:DE:1A:48:46:19:BD:D3:AB:58:41:AA
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 38A170ECD4856DFBA58193878857F698380883EE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b41fa9b7-d736-4d41-9fc2-9feda5a87248.roa
Signing time: Tue 27 Oct 2026 01:02:17 +0000
ROA not before: Tue 27 Oct 2026 01:02:17 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a1:70:ec:d4:85:6d:fb:a5:81:93:87:88:57:f6:98:38:08:83:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 27 01:02:17 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=af007f2f0cb5bbf140e56b4e866ad81ccf811e36a17deb54d95f6337391f4f6a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:ae:fe:2a:ce:cd:12:41:cb:c8:74:17:0e:
12:e5:cb:e2:06:24:3b:63:a4:3e:5e:b7:78:4c:0c:
e0:2b:d6:e9:b9:bf:3e:26:57:9e:77:ad:f5:bc:79:
0c:77:7c:19:96:8b:61:b4:70:43:44:ec:26:59:9b:
37:88:dd:8f:56:7e:63:1c:47:75:cc:ed:f5:56:cf:
33:d0:ab:58:af:aa:b8:7a:4f:c6:70:50:67:91:98:
fa:76:2e:58:86:5c:df:ec:63:cb:86:eb:01:d4:86:
e3:6c:a0:d4:c6:c7:45:3e:55:25:ca:ae:60:99:1d:
0c:76:87:e3:3d:62:43:3d:d1:4e:90:cd:56:91:7a:
66:30:0f:26:7f:f1:5b:82:ce:8e:0a:f8:fb:9b:f1:
b9:60:6d:6e:4f:32:cd:26:31:65:e9:40:40:c6:7b:
eb:99:b3:01:46:f3:0b:08:64:fa:ed:14:f8:e3:ae:
28:45:1b:7a:48:8e:bf:aa:4f:b1:f3:a9:a8:49:7b:
8a:78:7d:66:06:39:2a:84:b7:cf:91:70:04:3c:20:
3b:60:94:89:6b:29:8e:a0:5d:3f:c1:53:e8:1b:e7:
51:b5:ab:3e:85:ac:9e:0b:1a:67:00:6f:42:cc:82:
66:f9:46:38:64:5b:b8:3d:13:6a:3a:04:c1:90:8a:
3c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:00:CF:CD:E6:29:4C:7A:F6:DE:1A:48:46:19:BD:D3:AB:58:41:AA
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b41fa9b7-d736-4d41-9fc2-9feda5a87248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.255.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a6:2a:31:52:56:79:82:40:c0:e9:19:cf:a9:14:66:ca:de:
02:af:63:ec:d3:7b:b1:ae:97:92:17:3e:f7:05:1f:9c:cd:38:
cf:5f:89:0b:4e:b5:88:69:6a:f0:2f:60:74:05:3d:67:f7:eb:
68:b3:13:00:4f:bc:41:71:fb:60:6b:9c:c0:eb:05:6a:cc:ba:
70:29:06:e2:bf:d4:93:86:d5:93:5f:bb:75:6d:73:6d:ea:ab:
cf:85:77:7e:45:26:ef:9b:db:47:e4:aa:82:cf:45:0b:32:62:
a8:53:dd:14:31:7f:88:cf:33:a9:ac:9a:a7:07:c1:8b:e7:e4:
17:c3:e1:ad:41:f0:da:e1:2b:91:3a:e9:3f:46:0c:de:35:c7:
ae:0f:a5:63:55:80:bf:9e:0f:2a:cc:22:2f:62:96:9c:41:80:
8f:54:81:1f:34:75:46:fb:0c:47:c1:d5:55:97:3c:c2:a2:dd:
2d:16:17:9a:97:03:11:be:61:0a:77:0e:4e:04:99:d8:a7:de:
25:3c:47:23:c0:17:c7:34:65:e5:17:f6:63:20:ff:c0:54:38:
71:26:31:26:2b:7f:8d:00:14:cf:fe:ae:d8:e1:cb:5a:60:f4:
d0:cb:fc:6d:68:ca:da:94:60:69:be:fb:d5:1e:72:94:26:ec:
29:81:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:47:52 2026 by rpki-client