Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bfa25dd-319f-4f2d-b786-8ab19d58e811.roa
File: 0bfa25dd-319f-4f2d-b786-8ab19d58e811.roa (raw, json)
Hash identifier: EKQUqSQZR65pT8OKrbZM5hufxO0uiaYMvFQH98G4RAg=
Subject key identifier: 2C:60:78:FD:74:09:EC:FF:60:31:DB:EB:80:CF:09:80:5C:7B:76:5B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4862CD748187ABE9729B9012AC6A80D1E76077C1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bfa25dd-319f-4f2d-b786-8ab19d58e811.roa
Signing time: Fri 07 Aug 2026 05:50:15 +0000
ROA not before: Fri 07 Aug 2026 05:50:15 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.100.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:62:cd:74:81:87:ab:e9:72:9b:90:12:ac:6a:80:d1:e7:60:77:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:15 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=017b792270e96d5ea36ed9f9e5d6bd9432f340372febdc9cc6689ad050a1f0c4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:a9:5e:d6:37:16:4a:98:df:a1:f7:b2:74:
cb:87:a5:6f:8e:86:42:5e:35:96:27:4c:c6:34:20:
17:e5:28:b5:fa:f0:fe:04:2d:62:4f:be:87:b4:a6:
60:36:b1:0e:17:37:a9:f4:79:9d:e7:78:5a:cd:00:
4d:7c:4d:44:8e:85:29:91:1c:eb:da:f7:ba:96:69:
46:2a:6e:e5:28:77:91:00:48:d6:1f:92:63:42:e6:
33:25:ce:d4:87:ef:b8:9a:42:50:75:05:2b:84:fd:
e1:bb:04:8c:59:ff:08:52:72:b6:50:44:d3:0e:ad:
b3:a7:46:26:48:c5:3c:86:09:3f:bd:f5:df:31:89:
a4:09:03:42:74:94:d5:73:55:11:f7:7d:7e:3d:71:
c6:7e:21:7b:6a:a5:12:34:36:2b:3c:5a:d5:75:c5:
bc:03:18:0d:76:86:75:38:c0:be:cf:02:5a:d5:0a:
0b:65:26:25:88:19:55:57:96:5f:e1:bf:c4:ea:40:
03:10:6c:6a:e5:9f:0a:98:94:6b:e7:f9:25:78:e1:
3c:9d:af:9a:f2:44:e2:bb:f1:99:cb:b4:25:e8:4c:
43:a1:ea:dd:8d:18:3a:fa:1c:5f:b6:3b:50:5c:2f:
a2:2a:8c:27:b4:6c:9e:4d:61:5d:cc:4c:47:17:c2:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:60:78:FD:74:09:EC:FF:60:31:DB:EB:80:CF:09:80:5C:7B:76:5B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bfa25dd-319f-4f2d-b786-8ab19d58e811.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.100.0.0/15
Signature Algorithm: sha256WithRSAEncryption
78:8f:44:cb:c3:ed:f0:57:80:85:7a:8a:6a:42:e7:45:35:49:
6b:d6:61:33:e6:a7:46:bb:24:5a:ae:c0:b0:b8:65:43:38:75:
7a:e8:5d:30:e5:f3:2b:db:83:72:a9:5b:69:44:63:e6:b7:8e:
5e:62:83:e8:81:c4:00:3d:c2:cf:81:7e:34:65:bf:d8:80:c2:
0e:ba:37:a1:2d:fe:d1:c6:0e:45:71:6c:c8:e4:b7:3e:13:86:
df:cc:db:87:e5:42:97:c6:02:e1:b8:d2:7c:e7:d6:27:99:ee:
70:41:13:9d:38:29:38:4f:ff:d8:0c:3f:0f:07:5a:dc:6e:48:
d0:ec:d9:1b:b0:5a:3b:89:ec:ae:fb:a0:32:45:36:58:02:9d:
65:17:9f:e0:3a:16:9b:b0:88:ff:c1:7a:0a:5b:3b:0e:0c:c7:
2f:9f:1c:7e:fb:3f:b9:49:a9:cf:0c:be:57:dc:b4:06:a9:b3:
38:13:86:25:55:40:56:9a:68:b2:0a:2c:cd:ee:1a:5b:dc:a9:
33:b8:62:29:23:25:07:0d:0e:39:d6:80:e5:f7:d2:69:04:c0:
07:75:35:95:48:23:45:40:1e:a1:15:b0:53:62:74:2f:bb:cd:
2e:14:56:5d:c9:e7:5f:36:ed:a0:78:37:9c:58:4e:45:71:b6:
21:49:60:2f
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUSGLNdIGHq+lym5ASrGqA0edgd8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDcwNTUwMTVaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDAxN2I3OTIyNzBlOTZkNWVhMzZlZDlmOWU1ZDZiZDk0MzJmMzQwMzcyZmVi
ZGM5Y2M2Njg5YWQwNTBhMWYwYzQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL76qV7WNxZKmN+h97J0y4elb46GQl41lidMxjQgF+Uotfrw/gQtYk++h7Sm
YDaxDhc3qfR5ned4Ws0ATXxNRI6FKZEc69r3upZpRipu5Sh3kQBI1h+SY0LmMyXO
1IfvuJpCUHUFK4T94bsEjFn/CFJytlBE0w6ts6dGJkjFPIYJP7313zGJpAkDQnSU
1XNVEfd9fj1xxn4he2qlEjQ2Kzxa1XXFvAMYDXaGdTjAvs8CWtUKC2UmJYgZVVeW
X+G/xOpAAxBsauWfCpiUa+f5JXjhPJ2vmvJE4rvxmcu0JehMQ6Hq3Y0YOvocX7Y7
UFwvoiqMJ7Rsnk1hXcxMRxfC7E8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQsYHj9
dAns/2Ax2+uAzwmAXHt2WzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MGJmYTI1ZGQtMzE5Zi00ZjJkLWI3ODYtOGFiMTlkNThlODExLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATNkMA0G
CSqGSIb3DQEBCwUAA4IBAQB4j0TLw+3wV4CFeopqQudFNUlr1mEz5qdGuyRarsCw
uGVDOHV66F0w5fMr24NyqVtpRGPmt45eYoPogcQAPcLPgX40Zb/YgMIOujehLf7R
xg5FcWzI5Lc+E4bfzNuH5UKXxgLhuNJ859Ynme5wQROdOCk4T//YDD8PB1rcbkjQ
7NkbsFo7ieyu+6AyRTZYAp1lF5/gOhabsIj/wXoKWzsODMcvnxx++z+5SanPDL5X
3LQGqbM4E4YlVUBWmmiyCizN7hpb3KkzuGIpIyUHDQ451oDl99JpBMAHdTWVSCNF
QB6hFbBTYnQvu80uFFZdyedfNu2geDecWE5FcbYhSWAv
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:44:14 2026 by rpki-client