Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d13d26ae-36b1-4815-a7f0-4dc090d15b78.roa
File: d13d26ae-36b1-4815-a7f0-4dc090d15b78.roa (raw, json)
Hash identifier: ZNMH3WnZ415yrlrhJ+oKfpFkDdrRvYtZrSHAroo/TBA=
Subject key identifier: 18:5B:A1:B7:9D:03:CE:B1:87:C4:B7:2F:DA:C0:20:70:D7:2E:D5:D8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 104D762A4E19A82F984F4BBAE006956FFEBF65BD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d13d26ae-36b1-4815-a7f0-4dc090d15b78.roa
Signing time: Mon 26 Oct 2026 05:40:08 +0000
ROA not before: Mon 26 Oct 2026 05:40:08 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.129.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:4d:76:2a:4e:19:a8:2f:98:4f:4b:ba:e0:06:95:6f:fe:bf:65:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:08 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=07943df7e90d8cd459e1ae73ae48aeb1c3560b6a7cbcc0ac66ea01a6dd46bc97, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8e:5d:6a:87:ac:7c:b3:75:cf:c6:92:60:17:
6d:f3:85:5c:f5:bf:e0:73:40:4a:ce:6c:13:fc:ad:
13:51:c6:46:82:96:1e:4a:10:95:f2:05:9f:81:4c:
8d:46:86:ec:d4:0d:b4:b3:3b:e4:d1:12:ce:c1:fb:
fe:f2:6a:e7:84:24:d3:0e:2a:26:9a:e5:e7:60:2f:
43:90:fb:88:db:ad:1d:0e:93:9e:cc:64:b5:6d:4b:
8f:de:2c:d9:d6:8b:fc:69:3c:d1:46:08:69:56:30:
31:76:ed:c7:22:f2:b5:03:cd:54:29:02:47:03:3f:
50:13:b8:2f:50:3d:ba:6d:a5:bb:c7:8e:91:4d:52:
02:bc:02:4f:fa:32:94:2a:f7:99:c0:60:1a:dd:de:
34:ce:5a:81:2f:05:32:41:bf:2a:9e:cd:a6:53:9c:
ca:00:06:da:5e:fe:9a:e5:47:ec:61:6e:5a:34:bd:
50:24:5a:66:1d:fd:0b:96:2f:3b:ba:f6:6a:ee:eb:
63:b8:f6:40:0e:76:f6:98:dd:d0:81:cd:be:dc:6c:
d4:b4:d4:02:1b:e8:87:57:2d:41:cf:cd:fb:b0:1c:
b6:4a:c4:95:e3:3d:22:e4:9e:81:5b:b5:4a:f1:c5:
9c:cd:6b:d8:5e:74:8f:e4:06:ff:02:86:e8:bb:e0:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5B:A1:B7:9D:03:CE:B1:87:C4:B7:2F:DA:C0:20:70:D7:2E:D5:D8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d13d26ae-36b1-4815-a7f0-4dc090d15b78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:a0:b8:6c:7c:cd:15:cd:a0:75:72:25:6c:c2:74:cb:8f:73:
05:24:72:90:02:da:ce:4c:c3:9b:bb:d5:a5:fc:e7:14:07:a8:
6b:fa:8f:7a:5d:ea:36:25:fe:cd:fa:8c:3b:29:69:5f:21:f3:
49:69:1f:6f:85:f9:5d:62:2a:0f:7e:8a:da:70:86:f3:16:fa:
a8:ab:56:d3:a5:af:e0:ca:70:55:8b:97:90:86:e6:98:97:ad:
b6:ee:cc:78:b6:a7:7c:20:99:22:d2:d7:49:15:e2:a0:a5:02:
c3:c8:c4:b2:88:99:1d:0b:4e:93:0f:bd:9f:e6:d1:3d:dc:e6:
27:68:d5:8c:9e:8a:bb:ac:99:e8:26:92:4f:5f:b1:e8:2b:bd:
d9:d2:df:40:fe:62:4b:a0:b4:a4:df:06:f1:6c:ff:0d:3b:13:
a8:14:aa:83:8b:3d:47:37:37:86:0f:f5:15:f6:0c:8e:a6:15:
04:c0:c0:7b:42:f0:55:be:df:0d:5e:64:f8:2c:40:46:18:5f:
be:c7:d2:4e:97:6d:56:eb:b9:49:e7:4a:3d:23:fe:f2:d9:22:
f9:d6:c9:2b:bc:f7:68:e7:a1:f3:09:aa:ea:cb:5f:67:c5:80:
cf:c0:d0:be:bf:b6:52:55:19:e7:09:ae:a2:b2:72:fb:05:76:
16:77:2c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 06:38:59 2026 by rpki-client