Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bfa25dd-319f-4f2d-b786-8ab19d58e811.roa
File: 0bfa25dd-319f-4f2d-b786-8ab19d58e811.roa (raw, json)
Hash identifier: wfMFmmWrSEIPuf2CaUtB7TNNKzUo8GyzPlBJ7IWsnjk=
Subject key identifier: 16:A9:31:54:80:9F:FC:BF:3F:50:CF:46:35:6B:AE:25:ED:C6:3E:E3
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1F7A57304743D6E2558C1F4F5284EDE834E7493A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bfa25dd-319f-4f2d-b786-8ab19d58e811.roa
Signing time: Mon 26 Oct 2026 05:40:38 +0000
ROA not before: Mon 26 Oct 2026 05:40:38 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.100.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:7a:57:30:47:43:d6:e2:55:8c:1f:4f:52:84:ed:e8:34:e7:49:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:38 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=260b93586148d418da3f9cbb0b331565b4a9e6ab7c9566abd28410eebd517d07, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:de:9b:c5:bf:ee:6b:ec:00:a4:75:b1:c0:
d3:ff:4a:78:0f:82:14:7d:20:78:d9:5c:6c:ca:b6:
44:2f:73:14:d1:9d:c4:1e:86:cd:53:9b:c1:a7:5d:
62:7c:b1:cf:fb:25:1a:8d:d7:87:cf:88:2a:2d:41:
6c:c8:dd:7d:84:dd:17:c1:68:89:70:ef:05:14:5f:
8c:44:f6:15:55:c6:0d:55:d4:9c:1f:df:28:21:bf:
6a:26:04:ef:e0:2e:ee:29:d7:da:16:f3:e5:f7:be:
e6:0a:2b:04:fb:24:3a:4c:33:ee:bf:5e:cc:96:bd:
c0:14:c1:28:17:2b:5f:fb:e0:7a:c6:ae:5e:0c:0e:
7b:c3:a4:30:1a:ed:34:20:51:78:96:df:5b:82:4c:
04:94:7c:d5:7d:da:aa:ec:f3:f8:e3:7e:60:96:c8:
f5:6f:f8:87:5f:5d:b2:21:57:d5:e5:d9:69:22:12:
cc:24:64:39:93:fe:6b:af:52:66:d1:63:48:2b:2a:
09:e0:d4:16:74:61:a2:32:7e:a2:a7:ff:cf:02:11:
39:cb:b6:1e:2c:f0:0c:0a:da:24:c5:58:05:01:57:
d9:cb:f8:e9:46:be:68:65:a7:b3:bc:bd:25:10:20:
dc:6e:00:26:9d:1d:68:c6:00:4a:58:92:be:9f:5f:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A9:31:54:80:9F:FC:BF:3F:50:CF:46:35:6B:AE:25:ED:C6:3E:E3
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0bfa25dd-319f-4f2d-b786-8ab19d58e811.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.100.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c7:2e:c7:40:67:29:8d:9e:fd:fc:41:a0:ed:5a:89:a9:ef:64:
69:a1:b5:4d:b8:c1:24:54:a2:6d:2a:f3:01:48:ef:3e:b2:dc:
4a:6d:e5:f7:36:f9:44:36:e4:6d:39:db:02:ce:16:6e:0e:6a:
42:14:70:f4:b3:7d:ae:e0:29:46:a5:b0:2f:58:41:b7:85:01:
c4:db:63:fb:72:27:c0:53:28:58:c8:3c:44:66:4c:8a:55:d8:
b2:74:7c:72:92:59:dc:a3:89:34:ca:1b:1b:c0:66:2b:5b:bd:
12:21:a4:84:b5:2b:11:b9:a8:f0:61:81:29:63:14:5d:bf:03:
e3:2c:7b:55:07:d5:84:d9:6f:41:ff:ed:f0:c7:93:f9:73:58:
42:23:06:4c:00:1e:fc:65:52:7e:48:63:11:30:9b:5b:ce:19:
c6:2a:ff:60:a6:95:45:c8:d3:8d:d3:ff:bf:f2:d1:88:b5:79:
8a:3b:40:b3:0c:88:fc:d4:f4:7c:fe:a0:21:18:e4:be:1e:35:
02:6d:10:77:8f:4e:e0:4c:28:30:24:22:be:2f:0f:80:f9:15:
ef:cc:8e:7d:ad:aa:6d:f4:22:3e:46:ae:fa:c4:98:1d:cc:b7:
3c:7d:26:ed:56:b2:19:31:f0:c5:34:8a:69:fd:9c:80:dd:89:
70:c1:ce:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:13 2026 by rpki-client