Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fd04a54b-459a-491a-a013-59d0ed55825f.roa
File: fd04a54b-459a-491a-a013-59d0ed55825f.roa (raw, json)
Hash identifier: xeIO9PM+W5PhaLl+IJX+XwkX7CIZ+7EB9BWvEDk44WY=
Subject key identifier: 81:D8:51:02:61:63:73:31:66:09:50:30:06:23:B8:85:F7:EA:7A:33
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6AED16D35385BDE8FA35C8A00E44230FCF2994BF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fd04a54b-459a-491a-a013-59d0ed55825f.roa
Signing time: Mon 26 Oct 2026 05:40:07 +0000
ROA not before: Mon 26 Oct 2026 05:40:07 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.131.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:ed:16:d3:53:85:bd:e8:fa:35:c8:a0:0e:44:23:0f:cf:29:94:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:07 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=f8acbb26f805bedfcf8a6cb87def86d3104b0fe5a1cb7dafe6b4f2dae03a52a6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:10:2c:8c:09:5d:9a:d3:58:ae:84:6c:3c:
96:2e:88:3b:70:31:98:c0:cb:d7:5f:40:72:23:f0:
f3:c4:c1:38:36:33:7c:3c:ce:76:f8:c3:f3:d5:f7:
97:31:ed:27:d4:61:ea:f2:16:01:5d:38:c9:46:b2:
94:56:23:f8:f1:5e:62:80:bd:be:da:be:4c:ca:6e:
92:97:ee:8c:de:11:5d:f0:5c:92:70:eb:28:8d:ab:
28:1e:eb:4e:ad:24:08:b1:68:22:da:3a:13:8f:a9:
ce:d0:81:ba:cb:07:e3:46:09:e1:5d:d6:ff:23:e1:
4c:10:c7:dd:30:ee:dd:fd:62:95:c3:19:e4:8b:6c:
b7:56:de:59:71:dd:df:d1:95:af:6d:0c:65:33:d3:
36:e9:9a:1a:a5:9f:e7:df:63:60:eb:ec:42:7d:ca:
2c:d9:2a:1b:78:c9:04:7d:be:89:6e:bf:e1:c8:17:
00:56:08:c0:5a:e5:31:e2:ff:5c:80:0f:8c:34:14:
09:b2:ba:5b:6f:f5:92:12:b3:b7:34:e9:45:ce:87:
38:51:62:62:e9:e5:04:56:8b:54:08:04:a8:1c:f8:
8b:19:41:50:53:20:70:fc:8c:67:2c:fa:75:83:09:
e1:11:ab:d2:2f:a7:96:a0:fe:e4:10:76:dd:03:b6:
75:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D8:51:02:61:63:73:31:66:09:50:30:06:23:B8:85:F7:EA:7A:33
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fd04a54b-459a-491a-a013-59d0ed55825f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.131.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d4:4c:7a:5f:83:62:1d:22:73:fb:7d:26:cf:b3:2d:2d:78:8f:
2c:5e:53:f7:44:9a:21:ba:b8:50:02:7c:58:5d:16:36:63:57:
f2:75:11:91:1f:b8:12:e0:7e:cd:e1:b9:37:c9:89:a9:c8:e2:
f1:5a:1b:3e:99:c6:a8:8a:30:ba:48:d9:31:1d:3c:a5:01:77:
9f:e7:51:a1:46:48:af:38:9f:3b:33:d1:c1:5d:4b:cb:57:9f:
07:27:22:76:bd:6c:54:d8:de:81:d3:89:d8:e2:48:1d:4d:a3:
9e:f8:c6:81:ba:14:26:0d:c4:71:41:33:df:38:f4:0e:75:60:
b3:16:76:4b:70:a2:b6:28:d1:6e:48:86:de:1d:69:ca:55:76:
81:61:fd:61:28:3c:59:e9:b2:65:8b:2f:b2:6b:3a:8c:79:9e:
c7:c8:b1:07:c8:e5:61:58:76:c8:74:3c:71:91:2d:96:ef:8b:
c0:43:2e:27:e5:6e:c2:db:fb:91:74:3e:8f:41:ce:ef:49:7f:
3d:30:be:d2:aa:f0:94:66:a9:28:7e:bc:e3:66:ab:22:c1:39:
7b:02:e6:f5:ef:44:87:50:96:3b:53:81:38:12:15:e4:50:5d:
52:47:8b:80:21:3e:71:50:c9:cb:64:a4:de:9d:f1:94:3b:3b:
38:a3:a9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:31:54 2026 by rpki-client