Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f9c2130f-6f88-42ac-853e-f39d188adb6d.roa
File: f9c2130f-6f88-42ac-853e-f39d188adb6d.roa (raw, json)
Hash identifier: +XtpIL0sd+BDF+gquXwi+eZ5UWE6W++tbxQc+a2hdIs=
Subject key identifier: AE:97:D9:29:4A:BD:71:B3:16:CA:C7:67:7A:F9:7D:11:54:0E:B8:F0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 43EE54A2A65C3BFD69994F72B5F133E8E9AA6A9F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f9c2130f-6f88-42ac-853e-f39d188adb6d.roa
Signing time: Thu 23 Jul 2026 15:30:17 +0000
ROA not before: Thu 23 Jul 2026 15:30:17 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.232.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ee:54:a2:a6:5c:3b:fd:69:99:4f:72:b5:f1:33:e8:e9:aa:6a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:17 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=c38cff88b5dda869e688232d2041efa8a0363c71aadd6ebe082e6bd012f9d1e6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:64:d4:b5:73:e5:18:fd:60:1d:c6:eb:d7:
9d:40:9a:13:7b:fa:36:46:4e:22:70:f2:a0:8c:f5:
ab:1f:92:cf:0e:af:97:92:65:67:3f:cc:83:82:d1:
e3:55:b5:f0:fc:8e:64:92:98:ce:26:5b:e9:35:67:
04:47:7e:35:c9:04:ff:18:ab:02:f3:84:55:5d:9e:
82:ed:f3:46:27:df:b1:e3:50:bc:54:6f:c6:19:b6:
43:f9:4a:37:78:fe:e8:0d:4d:44:2a:ec:9d:22:19:
60:f6:21:6c:d3:bd:5b:39:b8:ae:36:2c:f4:ef:01:
c9:a9:5f:22:cd:75:2b:df:f3:70:40:50:59:c6:27:
c4:3e:c1:f8:f4:78:ad:af:d9:61:fa:06:18:f4:e0:
c1:47:a9:80:2c:6e:0f:0c:ce:a5:6b:0c:cf:7c:fd:
c2:f4:37:70:15:aa:b9:b7:9d:09:1a:5f:e8:ae:62:
66:b6:6a:7d:80:e3:ac:8a:ee:fe:d8:1d:d0:6d:4d:
df:9f:12:56:58:68:0d:1e:a6:6b:0d:8d:f0:de:69:
a8:67:21:88:54:dd:1c:90:3e:04:8f:0a:6e:cd:b2:
f3:12:ec:28:70:7a:8f:21:c1:71:3d:ad:54:17:1a:
aa:5f:d3:bc:37:8c:70:71:4c:28:e8:08:6b:8e:24:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:97:D9:29:4A:BD:71:B3:16:CA:C7:67:7A:F9:7D:11:54:0E:B8:F0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f9c2130f-6f88-42ac-853e-f39d188adb6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.232.0.0/15
Signature Algorithm: sha256WithRSAEncryption
4e:99:72:82:00:2d:6e:0a:c2:0d:c2:ac:4b:62:02:96:4f:87:
6e:9a:a5:ef:41:d8:95:8a:e9:ab:91:a0:53:b7:de:f6:f6:68:
ae:38:96:ba:5e:31:78:b9:32:b2:25:0b:2e:af:80:e5:18:b8:
f0:9f:f2:d7:5c:49:87:c3:36:af:88:24:01:98:f8:f0:88:2e:
54:4b:e4:c3:b1:01:49:3d:89:76:cd:ec:32:95:da:0f:78:23:
80:de:1e:d9:e0:54:a2:c1:91:3d:ef:44:90:94:d0:a3:9f:39:
ba:9a:43:f4:19:1e:cb:e4:0e:3d:89:90:d3:71:e7:37:46:d2:
bd:de:b0:eb:ae:97:08:d2:60:9b:69:be:21:1a:10:41:e7:d0:
ad:2c:ba:35:ed:53:aa:b2:58:68:fb:27:b6:ab:33:fd:a4:69:
e5:f6:ee:5b:a9:e1:48:3c:a9:0f:a8:7e:3b:7c:85:90:fd:47:
0c:fa:ac:f8:0e:08:f1:02:d1:63:9b:15:da:89:29:c8:d2:88:
ff:ab:4e:d9:00:db:01:b5:8a:42:a2:f2:f9:a3:c3:5f:25:13:
ec:f0:f5:1d:48:46:ca:61:0a:25:08:42:74:26:8e:2e:01:2b:
f0:43:d9:2c:18:9b:1b:89:9b:f6:d6:6d:88:c0:b7:b7:c6:fe:
50:a5:83:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:36 2026 by rpki-client