Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0edc1795-89f2-4f7e-aaa7-1083ec00eb3a.roa
File: 0edc1795-89f2-4f7e-aaa7-1083ec00eb3a.roa (raw, json)
Hash identifier: +dxqUnsaImMFSXRXT4GG1AbNh6a9NQsG3SqhfnZfLBc=
Subject key identifier: CB:CA:28:6C:5A:A2:03:81:67:85:94:DC:09:5D:D0:D4:EC:42:BE:54
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 166983225B9553EEFCA0C9BF8DAFBE1FE57C8DD8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0edc1795-89f2-4f7e-aaa7-1083ec00eb3a.roa
Signing time: Sat 08 Aug 2026 01:00:08 +0000
ROA not before: Sat 08 Aug 2026 01:00:08 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.200.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:69:83:22:5b:95:53:ee:fc:a0:c9:bf:8d:af:be:1f:e5:7c:8d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 01:00:08 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=a042043694ebc6433ee094fd7049842606d28a96f28101586a5f3eba5c4db3f3, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:a7:29:50:e2:86:60:ef:2b:0d:2d:2f:8d:
38:d4:ac:95:b1:b0:f9:26:d2:ad:93:4f:94:b0:1a:
1c:d5:e9:0b:e7:03:f9:cb:d5:52:23:b5:58:b2:d6:
4e:8b:47:9e:19:17:33:aa:31:cf:1e:13:d9:af:5e:
a0:4e:60:15:b1:33:4a:50:70:69:d5:de:31:36:e4:
b6:ba:a3:60:5e:08:96:b0:c9:e6:15:c3:e4:7a:20:
60:6e:51:34:20:a1:8b:24:29:1c:b1:7a:4d:44:17:
8b:5d:13:b2:38:67:c2:8b:f2:66:90:ad:10:a5:41:
31:6b:9a:4f:5e:d3:ce:41:44:bb:d4:67:1c:e4:20:
c6:d9:09:2e:ca:62:b1:1c:75:68:f6:61:c4:a8:d8:
12:3e:05:a5:1a:39:bc:fe:57:80:d9:a5:4e:e3:e2:
3f:22:dd:61:69:b8:44:cf:91:dd:f5:46:86:88:2c:
d2:e9:90:92:11:8e:6b:b4:5b:da:51:16:41:7e:91:
0a:08:1b:cb:53:56:ea:1e:2f:c0:4b:11:4e:0c:64:
83:a4:d5:62:08:b5:ef:5c:69:2d:35:87:5b:25:2d:
58:e9:6b:99:7e:90:d9:3a:1a:de:aa:70:45:3f:ee:
4b:db:c0:26:09:cc:f2:62:e6:9c:dc:4e:7c:2e:7e:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CA:28:6C:5A:A2:03:81:67:85:94:DC:09:5D:D0:D4:EC:42:BE:54
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0edc1795-89f2-4f7e-aaa7-1083ec00eb3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:7a:5f:27:46:6d:70:db:94:77:0a:64:91:89:93:84:a0:08:
73:34:9e:31:ed:ce:47:90:dc:88:7d:75:4f:09:db:c1:5a:b0:
89:42:f0:84:df:a3:6f:28:b2:b4:66:7e:5e:fd:5d:92:dc:b0:
59:b5:68:5e:0a:8c:ce:9c:ca:d4:69:3c:89:78:d6:88:2e:b7:
cb:3d:53:32:06:23:9b:80:a8:8d:42:99:03:ce:32:4d:8b:c0:
11:46:ae:7d:af:b7:03:f9:e2:4f:23:0b:95:34:48:61:47:04:
c0:01:40:27:11:02:6d:ec:31:90:48:f8:df:05:d7:27:8b:93:
86:10:a5:43:3a:62:b8:f5:88:78:df:4a:ce:48:44:c5:17:23:
fd:cc:a9:6e:bc:dd:20:8c:5b:93:ee:9c:1a:dc:b2:a6:e4:bb:
fb:3f:bc:3b:d5:92:0e:41:70:f1:45:7b:19:15:c9:23:2f:1a:
71:08:aa:37:9d:af:09:01:b5:73:0a:97:4a:40:8e:1f:4f:42:
db:3c:d7:f4:35:4d:19:40:d7:b1:23:1e:17:34:c5:87:c8:72:
f7:2a:fd:3b:a5:c3:f6:dc:16:f4:ac:11:79:d3:bc:39:a1:ce:
ae:ff:38:ba:02:c0:d9:0e:67:9a:e9:71:4d:7d:db:d5:b1:1e:
0e:2f:31:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:27:19 2026 by rpki-client