Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/083704a9-bba1-4b8b-9890-6f86f3877263.roa
File: 083704a9-bba1-4b8b-9890-6f86f3877263.roa (raw, json)
Hash identifier: 9erjIFxioXOkOLIhTSw1dwo6m7sBc88xIOXYUovFPko=
Subject key identifier: BE:7B:D9:B6:05:F3:9E:E7:D1:B9:14:DF:43:B6:99:0A:13:65:99:B1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6D343190369D1D2AB0FF92DF7A7BEBD3D789F5C4
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/083704a9-bba1-4b8b-9890-6f86f3877263.roa
Signing time: Wed 12 Aug 2026 17:49:16 +0000
ROA not before: Wed 12 Aug 2026 17:49:16 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.202.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:34:31:90:36:9d:1d:2a:b0:ff:92:df:7a:7b:eb:d3:d7:89:f5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 12 17:49:16 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=9142757b766a7196d00f72e69f08880d479fc3d35268a291f0533329335210ce, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:31:cd:5e:fa:82:16:12:e7:ed:5f:93:49:b7:
18:02:5e:04:81:14:be:17:64:c4:d1:9f:d4:6c:54:
82:ff:30:7e:cc:3c:b0:87:fd:15:53:90:9b:86:7b:
01:cf:de:1f:78:e7:b3:63:ae:9d:1d:af:0f:12:62:
29:9c:f9:3e:2d:54:e8:f8:3b:7a:a7:d4:94:44:f5:
5d:33:8c:a3:8c:b7:27:4d:ee:4a:aa:35:8e:2d:5c:
c1:a6:41:04:8b:a5:a4:6e:32:0e:17:a3:26:42:91:
89:89:d5:93:26:c9:29:d2:8a:90:16:76:e7:63:04:
81:03:a7:ec:fb:a2:34:62:d8:2e:14:5b:53:f4:1b:
66:0d:25:27:f7:3e:b3:86:03:66:3d:60:67:10:32:
56:0a:ca:f3:7f:43:cd:50:fb:fc:41:4e:58:68:3e:
5d:14:6d:ba:d9:e4:dd:ce:be:b9:7e:86:fb:d4:cb:
3b:bc:91:de:fe:e8:96:23:3c:07:39:b6:55:49:ed:
dd:66:fc:23:1e:e9:13:8e:fb:0f:c7:a3:49:46:29:
56:29:e8:72:92:29:58:cf:b5:63:10:12:18:2f:02:
c8:9a:45:ec:2a:56:4b:c9:8c:bf:4a:c7:09:7a:c5:
73:42:a4:9c:a0:38:ea:c5:53:e9:f0:ae:8a:7f:ac:
92:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7B:D9:B6:05:F3:9E:E7:D1:B9:14:DF:43:B6:99:0A:13:65:99:B1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/083704a9-bba1-4b8b-9890-6f86f3877263.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.202.0.0/15
Signature Algorithm: sha256WithRSAEncryption
73:65:10:91:bd:c7:69:0c:08:53:9c:db:26:23:a6:0f:69:3e:
9d:52:f5:55:77:0c:4e:51:50:6f:1d:42:9d:e2:23:6a:6d:62:
d1:c1:39:ce:d7:93:e9:71:77:0c:88:ec:07:0c:ac:7d:07:30:
98:fc:83:eb:50:04:33:af:44:28:3a:63:0e:e5:b7:7e:f1:fb:
a0:8e:6c:ef:26:88:6a:6b:0b:75:fb:05:b1:fc:0a:8d:ec:69:
a8:76:83:82:b9:e9:ac:0a:5f:e6:4d:43:e4:3a:b0:c4:13:66:
83:08:a3:7e:79:c2:4a:79:e8:c5:f9:a4:4d:95:b4:87:72:7a:
87:03:9a:a6:a9:9c:fb:34:9f:32:5b:1a:e5:68:f6:dc:0c:5b:
59:de:bf:35:97:1c:21:53:cf:a6:65:6a:e5:a4:96:ac:52:96:
37:44:c5:6d:18:00:95:3a:97:63:c8:04:c6:b6:98:2e:ad:ab:
e4:ec:b5:3e:3f:61:06:a7:c7:78:01:78:7e:b8:e1:61:a5:4f:
de:11:8c:9e:59:5c:52:dd:f2:a7:21:98:31:67:2d:63:11:cd:
85:29:25:b3:f6:ec:93:56:ee:62:62:32:d4:dc:a0:d9:99:1b:
12:48:c3:0e:22:29:77:ff:9e:19:51:fd:0d:aa:41:51:07:c9:
fe:db:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:26:00 2026 by rpki-client