Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecf71776-ef54-415b-8543-7ec55f9b1d9d.roa
File: ecf71776-ef54-415b-8543-7ec55f9b1d9d.roa (raw, json)
Hash identifier: tZQRe4edT2NkXM/D7wuYpccTsPQWWArHVylB4Evx3a0=
Subject key identifier: 8C:D4:2A:37:6A:AD:BA:F0:F2:D1:1F:43:8D:42:AD:C6:2B:9C:34:B3
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 11A396708D3AF6775E7C8E054BC77D45DCF3335B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecf71776-ef54-415b-8543-7ec55f9b1d9d.roa
Signing time: Thu 16 Jul 2026 00:40:06 +0000
ROA not before: Thu 16 Jul 2026 00:40:06 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.44.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:a3:96:70:8d:3a:f6:77:5e:7c:8e:05:4b:c7:7d:45:dc:f3:33:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:06 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=4a2cbd600e371120b5be7d4ac39b0f7ff035d301fc73783a25aae084962d08e2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:65:da:05:d2:7a:ab:57:a1:7a:e8:6a:76:
c2:ea:c1:5c:6c:89:a1:cd:75:37:18:0e:a4:8c:c5:
b1:58:84:c5:eb:fb:a5:00:83:90:3a:8f:eb:19:ab:
6a:39:0e:97:c7:55:71:58:3a:0e:43:85:b1:26:c1:
1e:55:8c:b2:6f:d1:71:c9:e3:3b:99:15:42:58:f5:
ce:32:8b:b2:5d:9a:67:e4:ca:df:f6:45:74:3e:a8:
ef:04:2d:54:a6:e0:32:b7:cd:cc:18:f4:f1:66:21:
5b:bf:9e:7f:54:5c:52:26:75:09:1d:42:42:21:52:
5a:46:e9:a2:67:4d:87:98:f6:35:53:5b:be:c8:9f:
66:17:75:b2:54:cf:0d:31:0a:42:af:c0:2a:ed:bc:
cd:cf:b1:9e:fc:b7:5c:2f:9d:b7:4f:a0:e4:18:12:
e3:f5:1a:08:2d:57:9c:cd:2d:25:38:1e:f5:11:e3:
2d:f9:f7:70:4a:7c:8b:94:93:60:67:83:50:1b:76:
b9:53:9c:4b:ad:ee:06:9b:4a:ce:72:de:19:da:03:
cb:8a:7f:e2:1c:4b:76:8f:f9:1e:4d:cc:72:7f:58:
56:02:48:3e:41:8a:e9:2a:88:5e:0f:0d:11:ee:4d:
be:98:20:4a:95:d4:c5:92:7a:17:f2:2f:96:81:76:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D4:2A:37:6A:AD:BA:F0:F2:D1:1F:43:8D:42:AD:C6:2B:9C:34:B3
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecf71776-ef54-415b-8543-7ec55f9b1d9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.44.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:d2:8b:ec:cf:68:08:1d:f1:2f:44:f3:c8:6a:29:4b:ec:36:
b2:97:ee:a9:12:11:d8:f3:6a:53:e2:16:2c:32:11:c9:09:1a:
46:59:89:4d:d9:b0:c7:17:33:f4:a1:88:e6:f0:61:3d:47:3c:
dd:34:65:63:f8:6e:be:77:47:95:00:ad:85:bb:7f:ab:17:9e:
67:75:ba:f1:4b:91:5b:9e:31:cf:39:a7:cf:60:33:22:60:06:
3f:6c:94:72:31:51:22:89:2c:bc:a6:b4:58:09:dc:30:07:aa:
f6:b5:ff:63:fb:a7:1b:0e:85:bc:9b:10:a4:d1:09:d1:0d:4e:
44:30:bc:14:9f:c0:5f:10:1c:b0:8d:0b:02:ef:34:d9:da:73:
02:71:a1:54:16:8c:88:c0:5c:88:18:93:ee:8d:0e:64:30:c1:
f3:b2:70:c2:0e:45:03:9d:36:3a:5d:23:ad:45:2a:3b:f2:bb:
eb:b2:ce:eb:26:84:e7:8c:2a:94:97:0a:fb:a0:ac:8f:af:e8:
79:4b:24:ab:cb:af:da:23:a1:ee:fb:f2:12:14:0e:18:c3:03:
9e:22:e7:d4:b8:fb:ff:f3:e7:3c:7e:25:c7:03:59:81:cf:64:
ed:73:02:53:fd:43:18:38:bd:5a:f9:4d:f6:cb:0a:65:37:63:
22:5a:66:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:31:48 2026 by rpki-client