Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05a39f1a-73ed-434c-b9e0-b1dc5d56a0fd.roa
File: 05a39f1a-73ed-434c-b9e0-b1dc5d56a0fd.roa (raw, json)
Hash identifier: mlaveao+opyf3ej9STpLdmf1lvqFbv+0h1X99miWi+0=
Subject key identifier: FE:4B:02:35:8D:2B:7D:40:36:92:D6:86:D7:5A:6C:0C:B8:C1:D0:EC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 63C649AE983C96E1EE7E6203D3C012393DD0B0CB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05a39f1a-73ed-434c-b9e0-b1dc5d56a0fd.roa
Signing time: Wed 18 Feb 2026 21:21:54 +0000
ROA not before: Wed 18 Feb 2026 21:21:54 +0000
ROA not after: Tue 19 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.102.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:c6:49:ae:98:3c:96:e1:ee:7e:62:03:d3:c0:12:39:3d:d0:b0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Feb 18 21:21:54 2026 GMT
Not After : May 19 23:59:59 2026 GMT
Subject: serialNumber=9ca9ab871df859033ca739f165a31aad24135381b75df258d833f1a5f914eaac, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:ad:11:ef:fc:a7:69:46:21:62:f9:c8:d4:
af:10:fd:70:a6:a8:5e:16:3b:11:bb:68:d8:76:16:
f2:0c:81:5d:fa:87:0e:ed:e3:6e:7c:1d:ff:83:87:
01:f4:ff:1b:ec:63:98:28:0b:58:be:2d:07:a8:49:
86:cc:54:ae:c4:d8:8f:00:82:c3:43:c6:f8:24:e2:
f1:37:0e:70:d8:24:d6:15:f1:76:6f:bd:50:a6:68:
f6:ba:b8:f3:7b:13:ab:1c:31:a7:6a:a0:17:35:e2:
a4:b1:1b:48:25:34:f8:09:73:1b:0b:6b:74:07:86:
79:5e:1e:8a:a6:99:9a:b2:27:d1:77:db:52:92:02:
56:29:07:73:ac:80:27:29:c1:d1:a0:3d:73:a8:59:
99:ab:49:e9:21:b6:cf:01:48:29:21:59:16:41:ec:
13:f2:c3:95:bd:59:9b:de:c3:ca:97:e8:4d:01:27:
09:d8:09:56:a9:8e:f4:67:de:b9:44:2e:7b:80:bf:
64:62:e8:14:7e:3d:2c:50:70:81:0e:10:44:b5:13:
c9:61:e4:68:e1:4f:f0:4c:72:68:1d:a5:ac:65:27:
5b:6c:63:48:30:c2:9f:03:a4:36:85:1a:6f:99:38:
41:9c:92:84:b5:72:f3:b2:67:63:26:cf:c3:96:f7:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4B:02:35:8D:2B:7D:40:36:92:D6:86:D7:5A:6C:0C:B8:C1:D0:EC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05a39f1a-73ed-434c-b9e0-b1dc5d56a0fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:0e:de:9a:11:1d:1d:5c:5f:f3:9a:a2:53:fd:f2:8e:1b:7d:
f1:10:fc:7b:81:25:19:e4:38:7a:df:51:a9:dd:82:34:e1:59:
f4:67:c7:3b:4a:c1:9d:6d:38:01:4b:e5:2b:33:83:ff:86:d4:
27:5f:0a:12:c2:79:8c:41:74:ba:28:c4:25:67:b6:49:2e:ac:
ca:da:da:c8:8e:3f:ca:f9:6b:cf:7f:78:1c:8b:c1:82:f8:2d:
d4:2d:63:b8:e5:33:80:a0:55:5c:88:fb:c8:fd:c9:f0:f8:d1:
87:ed:d8:5b:41:19:9a:e1:2a:a1:82:28:50:49:f6:db:e4:b3:
85:4f:17:38:68:e7:9c:24:4e:27:7f:53:38:31:dc:5e:9d:1d:
d3:a4:dd:c2:60:9c:1c:7b:f1:34:b9:c4:4b:88:93:4e:1b:ba:
00:7a:b8:13:c9:8a:06:c4:6d:85:c2:98:b3:8a:c1:3f:14:55:
9a:10:e0:26:f4:47:da:b4:d3:77:87:c0:81:71:3d:6b:f7:24:
8f:76:58:8c:48:b9:52:34:b1:30:34:5a:b8:e2:56:18:81:69:
b7:15:27:c9:26:d5:15:28:b6:82:2e:d7:9e:ed:12:e2:89:01:
22:95:85:f7:10:28:15:c7:d6:ae:f7:81:98:ce:7b:96:f4:65:
3c:75:61:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 09:03:52 2026 by rpki-client