Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c50006d0-c65f-4259-ace3-46351e9d23c5.roa
File: c50006d0-c65f-4259-ace3-46351e9d23c5.roa (raw, json)
Hash identifier: aT3yppVP8yH1Y96xX1d7DU9vLUHaWiCPdBPmX3Usj4o=
Subject key identifier: 76:38:EB:1B:01:8C:9E:17:0D:86:F0:24:C6:AC:AF:FD:F5:A8:3B:E7
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 378B7341C2198E0DF7AE11ECC11318AE20E0E9E5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c50006d0-c65f-4259-ace3-46351e9d23c5.roa
Signing time: Thu 16 Jul 2026 00:40:30 +0000
ROA not before: Thu 16 Jul 2026 00:40:30 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.84.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8b:73:41:c2:19:8e:0d:f7:ae:11:ec:c1:13:18:ae:20:e0:e9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:30 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=d11899c24520f659c8b3b12c369ed7164bbc521a120789b22230e1935d703557, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:39:1a:e6:96:8e:70:21:bc:c9:be:25:fc:36:
4d:b1:2d:fa:82:ad:3d:39:39:ca:34:84:f3:9f:be:
c1:91:d9:53:16:ad:4d:af:bd:01:04:2f:87:ee:9b:
1f:4e:09:23:8c:ca:57:d5:89:ce:fa:c7:c2:bd:09:
19:2c:fe:23:89:b4:3d:1c:59:e0:e7:c0:ac:f3:d6:
ab:38:aa:22:0a:69:9b:ac:6c:1f:e3:1f:3d:ee:5f:
dd:f7:88:23:5a:f1:3f:75:9e:08:0f:17:ed:a8:8e:
29:38:15:7d:13:e2:b0:cd:2f:38:1a:b7:3a:c7:5a:
c9:00:b3:7a:33:f5:1f:ef:7b:e8:29:c4:41:87:a0:
90:2c:9e:b7:d4:0f:e0:6b:76:c9:5c:a3:bf:de:45:
02:b4:e8:2e:c5:5f:04:18:cc:45:0d:11:76:fd:27:
82:1c:8d:fb:92:3f:64:21:61:c8:14:ba:e7:ff:cb:
36:f0:4d:4b:22:79:34:85:56:6f:19:59:76:f7:d7:
81:87:b0:c5:0e:c0:d6:9c:39:a4:06:eb:e0:46:57:
e3:d4:5f:27:76:57:75:db:94:d8:74:9e:80:32:5f:
1f:8a:ae:a4:a0:cc:4b:41:47:6f:7a:35:2a:95:62:
ff:c2:b0:9d:9f:d1:9a:40:e9:41:11:65:1f:5f:11:
6a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:38:EB:1B:01:8C:9E:17:0D:86:F0:24:C6:AC:AF:FD:F5:A8:3B:E7
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c50006d0-c65f-4259-ace3-46351e9d23c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.84.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:68:9a:e9:ef:87:c2:64:97:dd:b6:08:d1:06:99:5e:05:34:
03:f8:bf:19:84:8c:f0:52:0c:89:e7:df:22:7c:03:2e:b9:23:
80:55:0f:87:b9:c3:b8:f4:70:f3:96:48:0b:5e:eb:f9:5e:89:
fd:a1:80:55:20:67:8e:94:e5:b3:62:d8:d2:c4:00:4c:52:8c:
48:ee:65:e3:22:d4:76:e3:31:4b:d6:5f:ca:23:72:fc:5d:c8:
90:67:41:fe:0b:51:3a:d2:b4:89:e8:eb:33:77:b1:08:98:68:
21:71:31:0c:b4:5b:ca:21:24:b2:34:87:5f:35:5d:17:43:76:
cd:6c:4e:42:70:2b:cb:00:5d:52:2c:f4:72:e3:e2:bd:9e:23:
0d:ed:4b:e6:4a:19:16:e5:28:48:4f:d4:7b:50:f8:2a:48:84:
bc:fb:d6:6b:2a:93:6f:f7:d2:fd:36:7e:7e:b1:3b:9c:ed:0e:
50:fb:77:09:e2:27:b3:86:62:b6:3b:fc:43:c1:25:37:dc:5a:
b7:37:02:dc:ea:8c:c2:4c:6f:39:4a:77:34:c2:94:2e:28:4d:
6a:76:88:5a:81:0f:d8:99:2c:11:75:8c:63:77:2b:b0:b4:e7:
34:83:29:5c:df:13:8c:8c:62:f1:1f:f1:60:35:9d:16:4d:9c:
6d:85:c3:48
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUN4tzQcIZjg33rhHswRMYriDg6eUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA3MTYwMDQwMzBaFw0yNjEwMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQGQxMTg5OWMyNDUyMGY2NTljOGIzYjEyYzM2OWVkNzE2NGJiYzUyMWExMjA3
ODliMjIyMzBlMTkzNWQ3MDM1NTcxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPk5GuaWjnAhvMm+Jfw2TbEt+oKtPTk5yjSE85++wZHZUxatTa+9AQQvh+6b
H04JI4zKV9WJzvrHwr0JGSz+I4m0PRxZ4OfArPPWqziqIgppm6xsH+MfPe5f3feI
I1rxP3WeCA8X7aiOKTgVfRPisM0vOBq3OsdayQCzejP1H+976CnEQYegkCyet9QP
4Gt2yVyjv95FArToLsVfBBjMRQ0Rdv0nghyN+5I/ZCFhyBS65//LNvBNSyJ5NIVW
bxlZdvfXgYewxQ7A1pw5pAbr4EZX49RfJ3ZXdduU2HSegDJfH4qupKDMS0FHb3o1
KpVi/8KwnZ/RmkDpQRFlH18RahECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBR2OOsb
AYyeFw2G8CTGrK/99ag75zAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YzUwMDA2ZDAtYzY1Zi00MjU5LWFjZTMtNDYzNTFlOWQyM2M1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNUMA0G
CSqGSIb3DQEBCwUAA4IBAQBVaJrp74fCZJfdtgjRBpleBTQD+L8ZhIzwUgyJ598i
fAMuuSOAVQ+HucO49HDzlkgLXuv5Xon9oYBVIGeOlOWzYtjSxABMUoxI7mXjItR2
4zFL1l/KI3L8XciQZ0H+C1E60rSJ6Oszd7EImGghcTEMtFvKISSyNIdfNV0XQ3bN
bE5CcCvLAF1SLPRy4+K9niMN7UvmShkW5ShIT9R7UPgqSIS8+9ZrKpNv99L9Nn5+
sTuc7Q5Q+3cJ4iezhmK2O/xDwSU33Fq3NwLc6ozCTG85Snc0wpQuKE1qdohagQ/Y
mSwRdYxjdyuwtOc0gylc3xOMjGLxH/FgNZ0WTZxthcNI
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:31:36 2026 by rpki-client