Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/07a0a2d7-7de7-4807-863f-fcbe7f8106e1.roa
File: 07a0a2d7-7de7-4807-863f-fcbe7f8106e1.roa (raw, json)
Hash identifier: ZUsBgZEW/OxPycre8TNDFoNy22Hpy745JHDI0tZkLjM=
Subject key identifier: 55:84:4D:AB:04:98:18:03:09:4C:21:57:EB:1C:99:1F:E5:1D:E9:7F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7FC97D34A98C64C314B23FC646ED1F9B9E8504E7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/07a0a2d7-7de7-4807-863f-fcbe7f8106e1.roa
Signing time: Fri 07 Aug 2026 05:00:08 +0000
ROA not before: Fri 07 Aug 2026 05:00:08 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.35.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c9:7d:34:a9:8c:64:c3:14:b2:3f:c6:46:ed:1f:9b:9e:85:04:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:00:08 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=cbeff0f0464bd7b18961f0b087ac89d06bb33fadd97af4d79e8ad99ee46ed389, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:50:ea:03:9b:a9:2e:34:94:ba:93:6f:a1:
a7:13:d1:32:15:f2:ab:77:46:3b:76:32:1c:a8:e2:
b6:e3:3f:37:04:5d:13:23:f8:e2:80:e1:a9:a2:97:
5c:c9:2e:dd:29:e7:30:1e:39:62:e8:d1:df:bb:10:
29:06:fc:b5:39:62:c2:49:af:a5:ab:17:83:98:14:
0f:fb:d7:29:12:06:ae:ad:5e:18:91:82:0e:29:50:
ea:7f:6e:c6:1a:fa:54:4a:81:55:38:a0:1a:c9:e2:
b9:dd:a9:6b:74:e3:63:a0:98:8b:6d:49:81:44:e8:
c8:ac:05:67:0a:16:f0:a1:18:3b:19:0b:94:f0:79:
d4:7f:dc:e3:b3:0d:ef:7e:5b:47:b3:7f:42:03:57:
b0:b5:5e:c5:dd:47:16:58:53:d7:b1:6d:4b:63:02:
47:22:55:78:02:f6:9d:af:40:90:c5:71:23:fc:ad:
64:1c:47:43:15:1c:9a:52:ab:5d:d3:d9:a2:49:6e:
48:64:09:c4:01:e2:b6:c1:c7:77:0f:71:53:8d:2e:
c2:63:50:15:a7:ab:c0:f4:38:59:e4:74:f1:33:4f:
3e:86:b0:72:78:e4:11:fc:ea:b3:b4:1d:2a:2e:9f:
ef:e7:96:90:c5:b5:37:45:9b:a6:18:0e:00:36:94:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:84:4D:AB:04:98:18:03:09:4C:21:57:EB:1C:99:1F:E5:1D:E9:7F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/07a0a2d7-7de7-4807-863f-fcbe7f8106e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:72:3a:ee:ff:0a:e1:6e:7c:fd:78:91:8c:02:fc:f6:bc:b2:
22:82:3b:36:3e:56:6d:21:c5:c1:6c:0f:56:11:18:ed:fb:fb:
2b:76:6b:ed:72:97:ab:ed:f4:0f:ac:86:51:0f:f3:33:3a:ee:
55:4b:08:63:cb:ee:a6:4d:c6:32:a5:bf:7f:e0:e5:56:29:60:
00:39:a2:cf:25:7e:04:4f:6d:b2:e1:98:93:64:98:5c:50:96:
67:a5:6f:60:f7:14:2c:87:c3:b2:25:15:ee:75:9a:58:d2:89:
e5:09:ba:2e:6e:7e:64:d4:57:e4:ec:33:6c:78:af:48:e5:b2:
39:fc:c7:9d:ca:78:5b:fa:96:d1:1b:95:fb:70:9b:ab:91:3d:
41:c7:9a:08:58:65:af:e3:47:a1:94:46:59:b0:55:a5:df:a8:
82:17:27:2b:4a:97:fa:5f:19:69:ea:8e:ad:82:d4:ad:f2:f1:
0d:94:1c:15:82:f6:b2:16:3e:01:eb:84:33:ad:53:a4:18:fc:
cc:77:08:df:2f:2b:0c:b3:53:82:f0:a6:58:64:95:d1:ff:3e:
e2:4a:15:55:b4:cc:30:f7:e4:34:eb:47:1e:44:f8:e7:1f:8a:
6a:b9:5c:ad:0f:82:21:4d:d3:98:11:b8:c8:0f:ff:96:a3:73:
35:0b:9d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:54:57 2026 by rpki-client