Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/123b20eb-4142-4c18-96e0-d1871de66fd3.roa
File: 123b20eb-4142-4c18-96e0-d1871de66fd3.roa (raw, json)
Hash identifier: lhw4BcN1zSwhPQToEq1xCqM6uo/xxW3DdJFs0mgyKJs=
Subject key identifier: F7:8A:7E:DE:13:63:46:DC:F6:30:06:88:0A:DB:73:3F:55:DD:64:C0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1D1B7D5A630106E019488F3466E6D9C40424E189
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/123b20eb-4142-4c18-96e0-d1871de66fd3.roa
Signing time: Mon 26 Oct 2026 05:50:22 +0000
ROA not before: Mon 26 Oct 2026 05:50:22 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.214.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:1b:7d:5a:63:01:06:e0:19:48:8f:34:66:e6:d9:c4:04:24:e1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:22 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=e98bb3da9097aba126c04a5ece4a77dc7a0fbf893e0c86199ebc58706fa67ea7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:32:ac:29:63:58:98:28:9a:f8:91:2f:d4:
9c:d1:9b:7a:c6:41:2e:fa:af:cb:a1:c6:49:bc:ff:
f5:db:a0:7f:b3:f9:37:0a:03:07:ef:34:7c:02:6a:
a7:45:a2:11:6f:ee:02:da:c2:8d:12:da:44:42:9a:
55:c6:ca:80:e8:c8:85:b1:7c:93:ca:9e:75:65:bc:
ac:e2:53:fb:df:12:76:1c:b9:75:46:35:f0:ec:ed:
ab:75:46:32:d2:ae:d5:9d:02:af:fb:03:01:41:a0:
c1:11:d1:0c:9a:9a:2a:1a:49:f2:74:aa:98:5e:27:
da:e9:89:5a:18:ae:63:1d:ea:69:b0:8c:f4:04:84:
e1:3e:d7:8b:c8:57:af:35:9b:56:98:f4:8b:86:ee:
4a:db:ac:a4:fa:59:fc:54:58:3b:21:95:a7:02:a2:
86:8a:a4:53:4e:b0:a0:3d:88:90:c3:a1:90:1a:78:
a6:8f:50:fa:8a:34:43:5a:cc:a1:7d:60:f2:aa:1e:
86:5c:e5:31:8c:58:fc:8b:d3:85:7b:6b:1e:9a:41:
b9:5e:bd:e2:c6:5a:96:b1:e1:28:40:2d:d0:d9:a9:
9a:c4:57:92:74:df:c7:e1:d6:5b:ca:75:8d:79:46:
43:8c:54:f0:6c:41:a4:51:66:81:82:6b:69:aa:8a:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8A:7E:DE:13:63:46:DC:F6:30:06:88:0A:DB:73:3F:55:DD:64:C0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/123b20eb-4142-4c18-96e0-d1871de66fd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.214.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b0:0c:8d:d4:c2:ac:a7:4e:22:28:55:9f:13:0a:7a:38:dc:00:
0c:84:44:e5:7c:a8:f3:84:69:04:bd:ec:e9:a2:95:37:61:83:
65:80:63:13:0e:93:8c:c4:61:a7:2e:bf:5e:65:7e:40:86:81:
59:88:ea:ec:02:a0:42:b0:a6:f1:86:aa:da:8e:c8:86:57:72:
4a:25:43:62:c7:97:00:d8:a5:cf:29:09:53:07:41:6d:67:6a:
19:0d:cd:b2:11:07:7d:63:26:58:84:1a:65:6d:1c:ec:05:ab:
18:89:16:4e:80:5a:1a:8d:67:65:d6:6c:93:31:6d:0b:a6:b5:
1f:02:2b:79:8e:f5:0d:ca:b2:4e:05:01:e3:17:e7:e9:7f:0b:
48:9e:89:26:6b:6d:1a:88:9c:e1:2f:57:7c:b1:e2:93:83:b9:
5a:fb:32:84:85:46:5f:bc:92:bf:b6:c5:d0:a2:de:97:ec:f8:
5c:b8:1b:66:fe:1e:55:21:d3:a2:d8:b5:fd:95:87:97:4b:5c:
8e:08:13:f8:c4:7e:35:90:f5:d9:4a:ff:ce:4f:b4:29:a4:1c:
1d:b3:58:00:58:98:69:ec:f9:39:94:f3:20:3e:de:51:fb:b3:
e3:88:8e:7f:d4:06:22:8c:90:fc:be:84:66:b3:d3:c1:9d:c2:
21:26:2f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:22:58 2026 by rpki-client