Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16466217-dced-4a5a-a70d-36ae6ab6acbe.roa
File: 16466217-dced-4a5a-a70d-36ae6ab6acbe.roa (raw, json)
Hash identifier: 7xRyB6zJeE+PBMZy3jRSAywud/mCRk1yzXdY5TSlN/w=
Subject key identifier: A0:84:6A:F3:30:D5:D8:E2:E7:58:CE:92:FC:E6:36:FD:2C:3C:4B:A7
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1937E1247A8828CDC1708D710CD7ACA88B61512A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16466217-dced-4a5a-a70d-36ae6ab6acbe.roa
Signing time: Sun 04 Oct 2026 00:40:05 +0000
ROA not before: Sun 04 Oct 2026 00:40:05 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.92.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:37:e1:24:7a:88:28:cd:c1:70:8d:71:0c:d7:ac:a8:8b:61:51:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:05 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=e454d385676070938e6aacd5708308c6d98f48abb7e0244e0a8291623527c367, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:91:9d:ac:d0:72:58:40:6b:20:2a:01:03:bc:
39:8c:67:ea:de:b2:4b:e4:9e:2b:c1:dd:1f:ac:3f:
ec:00:4b:90:ac:e3:e3:2d:e8:dd:5f:58:a9:29:de:
c4:a9:91:3e:c8:77:95:e1:69:0e:d8:99:51:7f:7e:
7c:85:42:36:d6:80:ee:b6:a0:5f:2a:0a:9d:e4:31:
49:09:c8:d6:ae:97:7f:e5:76:bb:b2:f9:82:a4:f9:
e4:61:eb:7b:76:2f:25:b2:83:b9:14:84:08:43:38:
6a:85:13:34:1f:45:b1:7f:dc:63:d7:02:d1:2c:7d:
39:0c:46:57:35:e8:48:89:fa:52:5a:4c:f1:b7:6d:
fd:c1:eb:a4:a9:1d:2a:c4:7e:d3:52:84:c8:cf:c3:
31:1f:8f:76:06:14:5d:04:73:60:0e:43:a6:53:67:
6a:f3:37:2c:bb:fc:39:6f:7b:6c:dc:6f:fa:04:37:
d0:cd:a8:69:2a:aa:e3:1e:02:7c:87:92:2e:99:a6:
0c:e9:b2:73:12:12:f3:db:cd:d3:bc:04:d3:dd:1e:
75:6c:6a:8c:58:2b:2d:7a:0a:3d:25:e3:da:9f:eb:
3c:47:7e:9d:91:b2:a1:b8:c6:74:8a:67:df:b1:54:
9d:89:2a:3e:a6:93:8f:49:17:87:a7:0a:7f:f4:6b:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:84:6A:F3:30:D5:D8:E2:E7:58:CE:92:FC:E6:36:FD:2C:3C:4B:A7
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16466217-dced-4a5a-a70d-36ae6ab6acbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.92.0.0/14
Signature Algorithm: sha256WithRSAEncryption
42:7e:54:03:bb:29:be:e5:e8:fa:e5:a8:15:e2:00:a1:8b:c6:
b8:4c:3a:4f:7b:96:3e:bb:33:19:63:49:70:f1:9a:c1:45:64:
85:4e:a9:6a:46:bb:bd:14:f7:77:9b:ec:a9:7f:ec:55:cd:b6:
5a:e8:5c:95:2b:e0:37:76:f1:07:d1:f8:9b:aa:0f:25:b8:9b:
09:88:4d:aa:79:74:c7:32:8f:b6:80:ca:3e:cd:11:34:0a:e8:
68:ff:e8:92:0e:00:c2:56:35:6e:be:36:ff:c5:64:33:e1:ed:
34:ca:8b:f3:49:86:a1:ae:1b:ab:2c:a7:47:39:ad:ee:dc:3c:
02:19:91:c0:cb:00:df:f4:39:eb:9d:22:f0:a3:3c:79:19:47:
1e:75:e5:5d:92:17:a7:18:17:bd:df:b5:a8:eb:7d:ad:99:63:
01:6b:b6:5c:4b:8f:de:a9:0f:11:55:ae:d4:a7:85:17:73:2e:
c4:c8:d3:be:67:39:0b:16:89:df:43:de:15:74:9d:ce:a8:7a:
f9:c9:e4:45:31:16:ef:90:b5:15:c8:08:67:da:89:f2:ee:c2:
35:30:d2:69:c8:53:b1:c3:e2:7e:92:56:56:c1:ed:5c:0c:6b:
c4:fb:83:1a:45:ec:42:83:4e:e1:eb:38:ff:cf:14:e6:6f:31:
f8:9d:62:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:48:06 2026 by rpki-client