Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa448de8-896c-4773-bffc-d1e45112ba1b.roa
File: fa448de8-896c-4773-bffc-d1e45112ba1b.roa (raw, json)
Hash identifier: ytHng/Qbcp4lEvrnVnSdM6eaTYnyleLbWeWWLhapGW0=
Subject key identifier: 75:D0:28:84:34:F9:37:C0:B9:1C:BB:F0:1E:E9:B7:42:41:E3:0B:8B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4BCA0399A3EA21F944456135C8ACCDD9F46B7A18
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa448de8-896c-4773-bffc-d1e45112ba1b.roa
Signing time: Mon 21 Sep 2026 13:22:49 +0000
ROA not before: Mon 21 Sep 2026 13:22:49 +0000
ROA not after: Sun 20 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.168.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:ca:03:99:a3:ea:21:f9:44:45:61:35:c8:ac:cd:d9:f4:6b:7a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 21 13:22:49 2026 GMT
Not After : Dec 20 23:59:59 2026 GMT
Subject: serialNumber=642c5ce8523337da9d4bde970589aa57c4efc574e79a77387b558346d3084f33, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:80:51:a6:d3:a2:eb:68:81:24:00:6e:ac:
60:1d:75:ed:f3:82:30:26:98:03:06:cc:c3:31:87:
21:5d:2d:20:73:96:01:35:9f:8a:13:e9:71:3c:b8:
bd:1e:f9:4b:ed:6e:a2:d9:81:f7:da:a3:6f:93:89:
6c:2a:1d:b6:5c:d0:5b:ed:23:e0:c3:88:ff:bc:ff:
95:af:9b:8f:7c:69:86:ab:a1:c8:5a:0b:5c:90:5d:
da:b8:1e:09:cf:d3:73:8d:c9:23:0f:1c:6d:cd:9d:
10:78:d7:2b:0a:9d:b7:c8:77:39:6c:c8:ed:a5:e0:
61:7f:b8:b6:53:3b:38:a3:1d:3d:2d:55:e7:6b:b9:
5e:b1:86:17:90:51:80:30:78:2f:1f:f7:86:c4:44:
82:cf:b0:18:6e:8f:d7:67:e1:cd:e0:e2:18:c7:70:
c3:6d:7c:46:ba:73:a4:21:b3:d7:75:60:ab:07:45:
a3:76:15:40:11:fd:bd:85:bf:db:d2:ca:36:3c:48:
dd:03:86:22:cb:19:b6:a0:dd:83:04:07:87:e2:b2:
64:30:1f:98:86:92:c8:d4:e0:07:06:54:90:b9:36:
c0:ef:ad:55:6a:06:06:2f:b4:58:d5:74:d7:f7:65:
dc:62:75:fa:bb:22:67:da:68:22:47:9f:0c:ce:93:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D0:28:84:34:F9:37:C0:B9:1C:BB:F0:1E:E9:B7:42:41:E3:0B:8B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa448de8-896c-4773-bffc-d1e45112ba1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.168.136.0/23
Signature Algorithm: sha256WithRSAEncryption
25:05:da:c6:e8:d2:41:1f:74:2c:55:ff:b7:56:6c:4a:c6:84:
63:16:ae:ae:f3:eb:c0:ae:1b:7d:e7:d3:d4:d2:f2:e8:c0:54:
08:f4:02:0d:78:2f:45:0d:43:82:d3:35:5f:aa:cb:43:b1:8e:
c4:44:d6:a3:bb:4b:18:6d:7a:1f:b5:a2:72:a1:ba:b6:9c:d2:
be:1d:84:eb:ad:30:1c:31:68:5b:d2:37:bd:de:23:cf:67:a2:
87:e9:fa:d3:aa:ad:d6:d8:3e:35:c4:7e:3a:43:58:2d:42:79:
c3:8e:68:86:42:41:fb:67:cb:eb:e4:4a:8f:72:40:62:c1:16:
e6:8b:5c:f2:19:4d:86:56:84:49:8a:dc:69:b9:07:c2:94:58:
e7:a2:6f:6d:25:b3:c8:11:5e:c0:e7:db:d4:e5:c2:27:79:3c:
89:1c:7a:3d:3d:80:d6:45:ce:0e:cf:25:d1:3b:0e:88:67:67:
3b:d2:ea:3b:6b:ee:ed:ec:b6:1e:e9:24:da:66:06:90:8e:b0:
f1:71:4c:21:62:d6:a6:ce:6f:9e:87:a6:6d:4e:fd:7a:29:df:
42:30:05:d9:ac:de:66:59:13:a9:f4:a8:3c:17:4d:88:b2:a8:
82:4a:f9:5d:4b:85:f5:06:cb:09:b7:a2:7a:f1:dc:11:16:9e:
8f:d9:3e:74
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUS8oDmaPqIflERWE1yKzN2fRrehgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA5MjExMzIyNDlaFw0yNjEyMjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDY0MmM1Y2U4NTIzMzM3ZGE5ZDRiZGU5NzA1ODlhYTU3YzRlZmM1NzRlNzlh
NzczODdiNTU4MzQ2ZDMwODRmMzMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK9cgFGm06LraIEkAG6sYB117fOCMCaYAwbMwzGHIV0tIHOWATWfihPpcTy4
vR75S+1uotmB99qjb5OJbCodtlzQW+0j4MOI/7z/la+bj3xphquhyFoLXJBd2rge
Cc/Tc43JIw8cbc2dEHjXKwqdt8h3OWzI7aXgYX+4tlM7OKMdPS1V52u5XrGGF5BR
gDB4Lx/3hsREgs+wGG6P12fhzeDiGMdww218RrpzpCGz13VgqwdFo3YVQBH9vYW/
29LKNjxI3QOGIssZtqDdgwQHh+KyZDAfmIaSyNTgBwZUkLk2wO+tVWoGBi+0WNV0
1/dl3GJ1+rsiZ9poIkefDM6T6JUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR10CiE
NPk3wLkcu/Ae6bdCQeMLizAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZmE0NDhkZTgtODk2Yy00NzczLWJmZmMtZDFlNDUxMTJiYTFiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATOoiDAN
BgkqhkiG9w0BAQsFAAOCAQEAJQXaxujSQR90LFX/t1ZsSsaEYxaurvPrwK4bfefT
1NLy6MBUCPQCDXgvRQ1DgtM1X6rLQ7GOxETWo7tLGG16H7WicqG6tpzSvh2E660w
HDFoW9I3vd4jz2eih+n606qt1tg+NcR+OkNYLUJ5w45ohkJB+2fL6+RKj3JAYsEW
5otc8hlNhlaESYrcabkHwpRY56JvbSWzyBFewOfb1OXCJ3k8iRx6PT2A1kXODs8l
0TsOiGdnO9LqO2vu7ey2Hukk2mYGkI6w8XFMIWLWps5vnoembU79einfQjAF2aze
ZlkTqfSoPBdNiLKogkr5XUuF9QbLCbeievHcERaej9k+dA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:32:33 2026 by rpki-client