Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/09ec97ca-044e-4785-bdd4-fcf9e8d514ca.roa
File: 09ec97ca-044e-4785-bdd4-fcf9e8d514ca.roa (raw, json)
Hash identifier: ZNGWNfa9OQb5zFJ80Yda+BJ8n+HcP1NftbW3ZgicPqM=
Subject key identifier: CE:56:EE:67:AA:7B:C2:1F:59:AD:DB:A1:FC:3E:17:94:9C:A6:5E:CA
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0F89D2B48C4E9FBC85A97C3079951E88F7F08B24
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/09ec97ca-044e-4785-bdd4-fcf9e8d514ca.roa
Signing time: Mon 26 Oct 2026 05:50:08 +0000
ROA not before: Mon 26 Oct 2026 05:50:08 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.122.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:89:d2:b4:8c:4e:9f:bc:85:a9:7c:30:79:95:1e:88:f7:f0:8b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:08 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=4dda245779e4205d1903dab3003fe9a126eb84d86a552546e8dd19fb3abecd62, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:f9:2c:83:de:10:a6:55:9b:34:de:d0:4c:
d8:e0:88:86:f0:69:23:be:2a:b1:3d:a0:71:0f:ef:
d4:79:91:1e:32:47:b9:0f:f4:17:e0:55:79:1c:b8:
2d:42:f1:7f:14:11:ca:6d:54:28:8f:e3:35:8d:32:
c7:9b:30:47:5a:f6:c1:6e:93:35:e0:ed:a0:df:af:
4a:59:71:af:bc:c7:97:11:76:a1:ca:60:b8:e0:e8:
1f:5a:8d:9b:4c:b1:81:27:e3:f3:08:bf:3d:fb:76:
2c:b9:4f:29:de:f7:38:51:82:b0:a0:6f:88:a6:03:
bf:f0:f1:a7:7b:62:bf:3e:57:9d:6c:19:fa:72:e8:
f5:e7:33:5e:33:8a:d7:1e:e3:17:f6:85:8f:25:bb:
ff:81:91:e6:d7:c6:1e:d5:cd:23:48:0e:2e:dd:ec:
cb:9e:f5:e2:f4:5b:27:eb:6f:8b:10:8f:53:c1:e1:
12:86:ac:d1:54:10:f8:28:69:68:89:98:08:fc:34:
49:b2:e7:76:a4:37:5d:c5:56:e5:df:07:82:21:a1:
4c:69:ea:f7:c2:25:07:18:ba:b4:53:90:68:ef:0d:
af:c6:bd:e7:b9:fb:db:f6:b1:40:39:d1:6c:5e:ee:
70:c0:bc:11:43:eb:9b:f4:a1:71:51:b7:dd:90:20:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:56:EE:67:AA:7B:C2:1F:59:AD:DB:A1:FC:3E:17:94:9C:A6:5E:CA
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/09ec97ca-044e-4785-bdd4-fcf9e8d514ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.122.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b2:3a:18:09:7e:9e:fd:a4:f1:2d:c9:1f:7d:41:ac:30:89:00:
1b:9b:80:a2:d0:6b:90:18:66:aa:f8:bc:4f:29:e7:0b:07:f2:
30:56:61:70:0c:e2:d1:15:ae:b6:60:d6:cd:e8:bc:c1:95:09:
58:01:8f:0b:b4:be:71:d2:6c:27:ca:55:00:74:f3:49:77:c2:
62:4a:72:3a:91:68:b9:04:dd:a3:9a:71:a1:06:c1:76:96:01:
9a:fc:77:9c:02:4a:35:e7:41:65:bb:57:91:51:7c:c2:37:ee:
7d:46:53:dc:75:e0:ea:53:72:8c:d8:b1:d8:94:5d:6c:10:c2:
f8:76:74:49:16:28:8b:e3:c4:83:49:4d:3f:b6:fd:fe:a8:13:
f9:19:b9:6d:30:a3:c5:8e:77:81:34:0b:9d:34:2e:da:7b:4d:
5b:8a:87:58:98:33:28:5e:40:ab:13:a7:0d:3b:ea:d7:ef:1a:
8e:91:d9:45:c8:08:42:d8:c5:0a:d2:ed:aa:78:0b:05:18:c2:
bf:c2:74:71:fe:9d:f6:c3:20:b2:54:9f:15:1f:78:18:d0:40:
04:b1:83:08:6c:15:d0:1d:cd:9b:73:a4:a8:57:07:f6:6a:bf:
e0:ef:a2:69:29:e0:f0:6f:0c:7c:35:7f:5a:50:85:7d:35:e5:
af:be:e8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:18:45 2026 by rpki-client