Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5576ca6-a1ae-4a46-b6ed-04a48efc19c7.roa
File: f5576ca6-a1ae-4a46-b6ed-04a48efc19c7.roa (raw, json)
Hash identifier: 5mH6Of6GYlUaNxCs38xHotsUiVn/n6L9awoqkZHlq8M=
Subject key identifier: 7F:8C:52:83:12:21:32:C7:B7:62:4D:BC:65:20:41:5E:8E:0D:0C:9C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5833BE3308F053A640A7B05D7C82D9F66D113FC0
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5576ca6-a1ae-4a46-b6ed-04a48efc19c7.roa
Signing time: Thu 16 Jul 2026 00:40:31 +0000
ROA not before: Thu 16 Jul 2026 00:40:31 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.46.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:33:be:33:08:f0:53:a6:40:a7:b0:5d:7c:82:d9:f6:6d:11:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:31 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=68b2153ef38be4f25de6e899d1e98be7081587b18b54deb4bc8f2771b2238900, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:09:ea:2a:00:b0:29:4b:e7:17:cf:95:2c:
5a:0f:12:0d:f5:13:cf:a6:67:a0:5b:f2:00:9f:5d:
cc:c6:23:cd:13:18:4b:06:c7:e7:23:1e:b7:02:37:
24:64:8a:d3:3b:2b:39:23:10:e2:23:fd:be:08:a3:
6f:53:74:3f:61:9d:db:78:01:12:e0:07:44:09:e0:
e6:02:d8:fb:52:9d:e5:96:69:c8:02:bc:fc:5f:73:
9a:aa:13:b5:65:f0:02:02:d9:da:0a:19:ad:27:25:
e4:c2:c0:06:8a:d6:0f:ea:fa:d0:5c:60:7a:dd:a6:
2b:03:18:0f:ff:e8:7c:ee:2b:ec:49:46:54:0a:63:
85:8a:8a:2d:de:c5:7a:cc:6a:88:2b:28:f3:f7:eb:
c9:f2:64:3e:e4:c9:3f:41:d7:81:fa:05:fe:65:21:
15:13:39:70:66:dc:bc:9a:e4:cd:01:95:e1:f3:3f:
2d:7d:5a:f5:6e:50:e0:e4:e1:46:41:e3:a4:da:5d:
d3:04:ba:0e:64:c0:e4:19:86:62:ff:aa:b4:be:55:
ea:c4:09:4f:ac:9b:5a:dc:6b:46:92:09:70:55:e7:
51:74:64:f6:73:32:14:e8:26:cc:4b:88:2c:68:ad:
e1:d5:f9:11:bc:a0:3e:9e:1b:28:d2:ec:14:77:bd:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8C:52:83:12:21:32:C7:B7:62:4D:BC:65:20:41:5E:8E:0D:0C:9C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5576ca6-a1ae-4a46-b6ed-04a48efc19c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.46.0.0/15
Signature Algorithm: sha256WithRSAEncryption
19:4e:0d:5e:18:37:62:37:1f:f7:5b:89:8c:d8:4d:1e:47:3f:
b2:4c:5c:f8:c5:4d:2b:0f:4c:e4:a1:f0:b5:45:91:e1:bb:20:
e7:7c:9e:ef:21:17:1f:2a:ac:48:fe:b9:59:a2:f7:bc:28:25:
e7:77:35:2a:3e:ff:65:ac:b3:5f:cf:24:13:09:16:79:04:30:
7e:06:70:b0:c6:a0:77:e1:2f:80:56:bb:79:2a:6e:4f:80:65:
08:0e:4a:61:eb:8d:ef:79:72:48:7e:5f:72:33:45:68:d3:dc:
ae:82:53:0d:c6:70:f4:b6:2c:10:63:5b:b5:51:94:b7:2b:9b:
c6:62:15:4d:74:57:03:d8:cf:56:e1:be:89:f3:af:e5:1b:53:
ce:2a:eb:25:7b:90:fa:47:22:1c:5b:83:6f:8c:7c:d0:83:e8:
11:81:4e:6e:92:e9:2f:f8:ea:98:62:24:d0:03:52:9d:a1:a5:
9e:9c:2c:ce:26:1c:94:7d:a1:9f:50:cf:b4:35:15:3c:b9:7d:
93:0d:e6:c2:68:c7:d8:ed:18:3f:65:d5:25:e7:ca:57:8c:b0:
e5:93:cd:48:cf:a8:7f:3b:9d:b4:74:49:d5:8e:d7:3a:b2:24:
9f:98:66:5f:ca:58:3a:f5:13:bc:50:84:22:42:ce:cf:4a:24:
1d:3b:57:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:42:02 2026 by rpki-client