Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/de83ab0d-730e-4ba0-9d22-af2c8b7fd8f7.roa
File: de83ab0d-730e-4ba0-9d22-af2c8b7fd8f7.roa (raw, json)
Hash identifier: hT/IkWyjm9kXbPFelezorTLbp5q/KygQlZAk4BiQ6Z4=
Subject key identifier: E7:B5:FD:E3:54:36:37:EE:7A:F7:62:D1:C1:95:52:0F:69:6B:37:E8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2DD872842C49DE1F31D1380C8C6E223B52BDEC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/de83ab0d-730e-4ba0-9d22-af2c8b7fd8f7.roa
Signing time: Mon 26 Oct 2026 05:40:37 +0000
ROA not before: Mon 26 Oct 2026 05:40:37 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.40.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d8:72:84:2c:49:de:1f:31:d1:38:0c:8c:6e:22:3b:52:bd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:37 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=ee8a01a87e072d6c91f0a016c5f7bad47c6947806069a2cd029ccbc51fa6c60f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:ae:55:b2:1b:28:bd:67:fa:30:63:7e:b8:
32:07:07:d7:b3:e9:92:fa:96:7a:cb:29:ae:06:de:
a2:ff:ec:0f:37:d5:5e:52:e1:67:0a:5a:8c:02:ae:
66:f4:da:fb:42:13:61:2e:39:e4:e0:8d:0a:9d:ee:
c8:23:20:81:42:ff:91:50:a0:37:94:ab:3e:55:48:
44:ab:cb:a1:8f:2e:74:75:20:01:a4:0a:4e:e6:b4:
df:93:82:8f:41:92:0e:62:49:a0:3f:27:69:13:fa:
42:2b:e3:38:2a:46:97:b6:42:c1:d1:02:34:76:e5:
04:15:03:f5:ab:15:4c:56:91:9e:69:52:48:06:c3:
00:b1:09:53:1a:12:bf:aa:43:c4:8b:5d:5c:0a:45:
48:ac:06:f7:85:aa:65:9e:2b:7d:10:31:0f:aa:03:
d3:20:0f:82:7e:d9:7f:70:c5:72:35:f5:bf:6d:29:
16:2a:2a:b5:ed:26:9d:0f:e0:a0:84:6b:a2:51:61:
89:58:91:f2:b6:74:66:62:15:b8:7a:4b:28:34:f3:
76:9f:54:56:a2:c2:06:14:21:e7:2f:67:17:ce:4f:
3b:62:94:c2:a7:4b:d1:66:f3:db:ff:ed:8d:91:c3:
ae:f9:55:7c:27:50:5a:3b:ed:f5:1f:fd:67:63:46:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B5:FD:E3:54:36:37:EE:7A:F7:62:D1:C1:95:52:0F:69:6B:37:E8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/de83ab0d-730e-4ba0-9d22-af2c8b7fd8f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.40.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:a3:93:5c:12:93:91:3f:be:1a:6c:cf:ca:22:8e:c1:52:c9:
ae:3f:29:09:57:58:d2:5c:3c:9e:ac:a0:02:95:41:d6:cb:36:
3f:f8:42:69:82:8f:0b:04:66:6d:79:dd:6c:97:d7:4e:ea:69:
b1:01:4f:6c:73:c9:24:a5:2d:e9:8e:57:55:96:ce:71:09:a1:
e1:78:2f:f5:cf:4b:78:30:27:d8:2c:29:14:fa:f8:00:49:c9:
30:12:46:55:9e:58:85:dd:ea:5c:17:d9:ed:77:98:6b:c0:e2:
74:89:dd:a6:5d:e6:85:d1:6b:d0:43:93:fc:98:2a:19:01:76:
47:d6:4c:ce:86:57:92:dc:f2:5d:7f:65:8e:b3:ec:ce:be:02:
8c:3d:4d:fa:67:44:4c:2b:f0:7b:f7:6d:08:0a:1c:06:1f:93:
14:5b:e2:a2:9f:32:bb:f7:ab:cf:7d:8d:1a:b5:e7:c4:31:36:
30:99:f9:7c:38:af:3e:87:63:28:58:45:f8:9b:18:1c:51:93:
c3:ed:6c:fd:72:96:9f:fd:a6:88:b3:ea:bf:12:2e:65:af:f4:
ee:74:08:de:66:30:27:73:01:46:d4:62:42:c8:c2:e1:7a:6c:
0e:56:c0:27:f2:0e:c2:ba:22:a9:85:7c:3d:a5:0a:9b:f0:7a:
bf:20:6c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:51:06 2026 by rpki-client