Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d51a4935-8601-4ebd-a099-1d61b0a661b3.roa
File: d51a4935-8601-4ebd-a099-1d61b0a661b3.roa (raw, json)
Hash identifier: 3LkQ7gXfP8q/KfvMvYprg843cvB1FcK7AhuLuhws8p8=
Subject key identifier: 4A:B2:6B:7D:B3:67:BE:54:E9:AE:57:EB:57:F9:93:12:80:E3:13:A9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 09A8B61747F1FAED31BA47840693E373D83CA092
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d51a4935-8601-4ebd-a099-1d61b0a661b3.roa
Signing time: Mon 26 Oct 2026 05:40:08 +0000
ROA not before: Mon 26 Oct 2026 05:40:08 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.228.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a8:b6:17:47:f1:fa:ed:31:ba:47:84:06:93:e3:73:d8:3c:a0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:08 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=dfb054f519ce587ad3986ba262bdc0a04207b80351ad6a0426544fe0abc94e82, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:39:cf:88:c4:c3:a4:eb:43:69:0d:8c:6d:
76:90:52:d4:81:dd:b9:99:60:03:c5:10:00:c1:f4:
ee:62:0f:80:36:83:e2:78:42:d3:0e:05:89:15:70:
9b:c4:f9:b3:f9:ae:24:45:5a:4b:b7:9f:da:50:3b:
82:1e:1d:d1:e6:d7:3d:b4:d1:6e:0d:7a:36:f4:d5:
77:52:28:48:67:5f:2a:60:2f:8e:0d:34:f7:b4:3d:
7c:bf:4e:3a:9d:48:f7:b4:c5:18:85:ee:ea:22:19:
da:c8:a9:43:80:43:80:b1:b3:56:90:e8:bd:5f:e1:
f1:65:d0:d9:f1:58:44:f7:5d:01:cf:91:03:44:32:
80:31:12:6d:eb:f4:ea:0b:85:3d:8b:8a:21:b4:f4:
5c:6c:16:27:07:fe:ba:ab:e6:8f:1e:a4:1f:d1:35:
ec:40:0e:27:98:b4:05:cd:3b:20:0a:5b:83:c2:96:
3f:1b:58:ef:4d:96:3e:83:1f:ea:35:60:7c:86:2b:
95:65:53:25:60:75:68:81:6a:1a:2a:38:84:c9:94:
7c:56:25:e5:f2:18:c9:dc:48:60:9c:fb:e9:86:7c:
5b:db:34:f5:cd:84:a8:d8:96:f3:95:fa:7d:d7:fa:
a6:cc:e3:59:24:fe:f2:0e:73:60:7d:4c:00:1f:da:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B2:6B:7D:B3:67:BE:54:E9:AE:57:EB:57:F9:93:12:80:E3:13:A9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d51a4935-8601-4ebd-a099-1d61b0a661b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.228.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7b:76:4c:34:c0:f0:cf:89:ff:b6:8a:2e:f6:b4:a2:4b:1d:20:
01:7c:3d:88:88:42:0c:df:03:80:96:d0:42:6b:94:a3:b0:95:
6e:6a:5c:33:2a:d3:7c:4d:d5:47:26:ff:a4:5d:e2:cb:e7:1d:
80:28:76:a8:83:b4:bf:8e:41:b5:62:bd:b5:e1:19:9d:a9:9c:
74:18:b2:d9:5f:77:a6:71:ca:0d:7b:e3:9d:93:2c:d3:9b:e8:
ab:15:86:8c:dc:83:14:9a:f3:55:3a:b1:33:dd:8f:2b:dc:5d:
d6:fc:5e:2e:8d:f5:7c:aa:a0:6b:d1:9a:bb:11:19:27:e6:4f:
3b:f8:93:8c:d6:b0:c4:5b:46:6c:b3:df:d0:12:db:48:c5:53:
0d:7f:d1:60:74:ee:78:d1:72:07:e7:a9:80:cb:3d:b9:00:36:
ac:61:52:00:80:99:17:67:9c:40:fc:b4:ce:7c:42:40:fd:f8:
a2:b6:3f:b1:98:54:ba:83:bd:28:a2:a1:0b:37:17:00:5f:ae:
38:3e:54:db:47:97:68:cb:08:bc:c2:10:c2:4e:11:c1:4f:54:
ef:17:6b:c7:bc:66:37:1a:53:6d:17:56:57:9b:fd:ea:7b:91:
8f:14:8f:88:88:ac:7f:e7:bf:09:04:98:48:be:0a:f4:a2:09:
88:df:40:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:40:29 2026 by rpki-client