Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c8fd8c44-7514-40e6-9198-e0b6e37b4c69.roa
File: c8fd8c44-7514-40e6-9198-e0b6e37b4c69.roa (raw, json)
Hash identifier: uREJuOez2gBL32go4ucAZn2+fSkFnxbb2O014dTfWiA=
Subject key identifier: 49:FD:72:7C:8E:F3:2C:1B:0B:D1:7F:D8:F1:22:44:80:6B:7D:F2:03
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0E7424150052AD30ABAC3E72DFDBA373BD55EE36
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c8fd8c44-7514-40e6-9198-e0b6e37b4c69.roa
Signing time: Thu 16 Jul 2026 00:40:04 +0000
ROA not before: Thu 16 Jul 2026 00:40:04 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:74:24:15:00:52:ad:30:ab:ac:3e:72:df:db:a3:73:bd:55:ee:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:04 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=4d41d74eb6e0d18a4f82319e8ec12de22fcf78e56fcceb3205cde195133519c7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:c9:0a:fb:8a:8c:21:08:1b:fd:77:03:56:
74:6e:cc:2c:f1:93:f0:06:16:92:91:47:2f:1f:ae:
6b:b8:23:5e:47:22:2b:71:07:14:f4:e3:0e:0e:07:
5f:cc:22:8a:e9:a8:c1:6b:5a:19:a7:72:f9:38:ee:
b9:e6:6c:ce:16:b7:78:a7:a1:08:b8:c6:66:8b:2c:
1a:9e:d7:15:87:db:74:4d:a4:40:6a:5d:31:b4:04:
b6:24:b2:26:60:6f:f2:66:72:ac:00:63:28:51:59:
5e:f0:6d:f2:e6:dc:b0:48:87:af:0c:37:60:4b:50:
de:a3:dc:f4:7a:e3:d5:2a:3a:4c:60:e7:ba:a5:f5:
4c:06:92:3e:f6:6f:95:7a:10:c9:c6:05:ae:bd:56:
22:d8:b7:b2:1e:90:2e:86:00:16:60:fe:60:bc:31:
19:de:ef:42:de:66:9d:88:92:24:5c:9e:eb:5e:eb:
bb:ca:80:4a:31:c4:04:da:4a:f1:3c:ff:43:38:98:
e6:f6:a8:a4:30:b0:d1:24:14:d2:b6:15:15:9b:1b:
99:45:24:2a:7e:0f:6b:17:c9:b9:b8:08:07:7f:9c:
66:46:44:59:47:d4:a4:29:8c:fe:9f:6d:2b:6a:56:
34:de:6b:f3:ef:0f:83:c6:99:6a:6e:d5:d2:8f:7e:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FD:72:7C:8E:F3:2C:1B:0B:D1:7F:D8:F1:22:44:80:6B:7D:F2:03
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c8fd8c44-7514-40e6-9198-e0b6e37b4c69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.238.0/23
Signature Algorithm: sha256WithRSAEncryption
01:a1:d0:e0:8a:b5:d1:ac:8e:89:f0:48:69:0f:90:2f:7b:f1:
b6:40:ab:cc:53:b6:21:38:c5:9f:f7:97:72:72:da:95:a0:a2:
aa:96:73:93:59:f5:ca:a9:89:30:2f:37:48:6d:6f:b1:f7:8c:
13:bd:08:b2:67:51:bf:67:55:d1:e1:f4:ad:7e:9f:49:92:96:
04:b3:a9:af:14:a3:8e:ce:fd:13:48:63:5e:11:12:59:8d:6f:
40:71:25:04:6e:26:66:12:01:42:90:76:9a:ad:8f:5b:b5:58:
86:37:c5:d5:42:dd:cb:df:3b:85:5b:cb:f7:b4:53:c5:06:d3:
e9:15:20:9b:23:8f:14:5d:d0:92:7f:1e:48:37:b5:03:5c:9e:
2e:38:c9:c4:72:dd:3d:c5:03:aa:a3:ae:53:50:21:b5:0d:d8:
d3:cc:f2:04:dc:1c:94:50:be:23:b3:58:16:0a:86:4a:e7:10:
0d:34:a9:cf:d1:ef:2e:0c:c7:cc:49:97:19:86:8b:ca:c1:0a:
4c:16:c9:b0:16:cc:26:de:ad:15:d1:b1:5f:97:95:03:78:b7:
c8:01:e5:56:c8:48:08:25:22:4e:e2:c0:95:93:33:10:3d:3c:
f3:3b:c9:a2:24:dc:bb:32:e3:02:22:1b:53:41:77:3c:72:f4:
2d:0d:b7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:07 2026 by rpki-client