Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4e6b1e-120a-454b-8ea2-2504e0f34b7e.roa
File: fe4e6b1e-120a-454b-8ea2-2504e0f34b7e.roa (raw, json)
Hash identifier: Y+2V2otcyy4iZC7JKbPKrkjLkQ3/eBNHDtcSe4GQF5Q=
Subject key identifier: 38:5B:18:CC:BA:56:A0:B5:04:88:B2:C6:C2:1E:64:3F:3A:B5:91:42
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 72B67BA4CBE9AEAD73104ED65E3C5D82E14FA61E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4e6b1e-120a-454b-8ea2-2504e0f34b7e.roa
Signing time: Thu 16 Jul 2026 00:40:27 +0000
ROA not before: Thu 16 Jul 2026 00:40:27 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.85.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:b6:7b:a4:cb:e9:ae:ad:73:10:4e:d6:5e:3c:5d:82:e1:4f:a6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:27 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=679201cdefd674c571b7a2e812dd7f99822800d11a78ee99ed50955392ddf4fd, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:8c:68:b8:c2:81:7a:8a:a8:d6:8a:63:d0:
51:98:25:70:cc:26:a7:af:6a:16:32:46:dc:f5:88:
6e:6c:87:24:33:14:bb:bd:fe:6d:6e:8b:3d:71:71:
27:98:9d:d8:ba:9e:ce:d7:81:95:57:82:25:dc:98:
ea:67:fd:14:30:38:18:da:40:54:6e:b9:da:3f:f9:
28:1b:e3:d7:d0:69:6a:8f:e5:1d:cb:d9:f0:d2:f9:
01:17:af:7c:60:b6:0d:e4:b9:4f:0f:83:c3:c7:75:
4e:3b:8e:78:8c:18:6e:97:a7:5d:b5:36:c0:a6:5f:
aa:93:ad:7e:e5:f0:58:5c:78:2d:a0:a1:c2:d4:7f:
9f:d9:05:aa:4d:a3:67:e7:73:b3:5a:f6:60:20:77:
02:05:80:52:f9:5e:e9:ed:10:b6:cd:17:a2:62:21:
c9:9a:35:2b:9c:2c:47:31:92:04:00:bc:91:ef:01:
88:e1:a4:f8:15:f0:bd:90:2a:97:3a:ea:e9:cf:fc:
65:46:a6:77:2a:08:9a:5c:f8:ac:9d:5a:0c:10:6d:
fd:d6:b7:c6:c0:9a:45:68:c1:1a:45:97:10:c0:6a:
ac:7d:89:04:36:e7:79:87:39:df:3c:15:c4:0a:36:
eb:c9:6a:8a:fd:ca:48:22:bf:f5:cd:bb:06:a3:b5:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5B:18:CC:BA:56:A0:B5:04:88:B2:C6:C2:1E:64:3F:3A:B5:91:42
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4e6b1e-120a-454b-8ea2-2504e0f34b7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:04:12:e4:86:41:19:36:c3:8b:12:4f:c1:1f:b4:39:38:f5:
d5:53:5b:83:5a:91:d2:ab:7c:1e:81:34:3b:1a:24:3f:aa:30:
a5:9b:c0:9b:0d:b6:3c:bf:df:83:39:06:9b:30:9a:f5:bf:de:
d3:da:7b:4b:5c:ea:30:8f:83:62:16:5a:f5:5f:3e:5e:79:a5:
96:13:7b:b6:4f:67:08:d5:d0:d5:d9:57:8d:7a:bd:bb:a5:29:
9f:8d:57:88:aa:67:66:ff:15:01:fe:54:5f:a6:5a:2d:53:c1:
ac:35:1f:98:10:30:5c:af:40:44:9b:e7:5c:17:e6:54:a3:7c:
79:e7:e4:66:89:59:e2:e9:43:36:ec:14:7d:ee:7d:da:9b:85:
66:30:11:9d:a4:49:44:25:86:27:f6:e8:bb:dd:e8:58:e1:a0:
5b:f0:e3:d7:10:b5:36:16:4e:8c:16:b8:97:01:a6:3d:b1:00:
7b:64:58:0b:f2:1c:b1:8d:3e:65:76:78:c6:8c:3f:af:aa:e4:
9d:fc:26:ae:e5:9d:39:3c:d2:58:de:84:35:9c:c3:88:a4:dc:
5b:07:52:47:62:e5:31:3f:6c:ab:5d:f8:9d:a9:26:d4:3f:3f:
ac:0d:a4:cc:43:9d:40:e4:c8:22:c9:f0:ee:31:90:a1:47:f1:
35:89:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:33:50 2026 by rpki-client