Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/179c664b-afae-4c21-9c97-2a2a3985d5b0.roa
File: 179c664b-afae-4c21-9c97-2a2a3985d5b0.roa (raw, json)
Hash identifier: 7Ya67qO04h4moNW91iMauZe5pWSfrnthukT9mBxs7Dc=
Subject key identifier: E5:CE:59:1F:B5:4F:3C:C2:9E:78:05:12:03:E5:87:6E:CC:4B:EA:EC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 36B175F55BCF1B755F04883F8EF80BA7E4D92726
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/179c664b-afae-4c21-9c97-2a2a3985d5b0.roa
Signing time: Fri 07 Aug 2026 05:40:12 +0000
ROA not before: Fri 07 Aug 2026 05:40:12 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.117.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b1:75:f5:5b:cf:1b:75:5f:04:88:3f:8e:f8:0b:a7:e4:d9:27:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:40:12 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=fe166e394eda5d083e1e616e9e50e9fea2b3e048c290dd5b44b81ed3d0ed8b76, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:bd:aa:64:d2:c7:32:b6:34:df:19:a0:88:
d0:ad:a1:fc:c2:72:5a:b5:4b:d0:6c:e2:25:c7:70:
96:b1:78:50:1a:e9:3c:eb:6d:08:3c:32:11:83:a3:
b3:ed:c5:9c:9e:3a:0d:63:4a:63:94:ce:86:57:b7:
f7:94:c9:7e:9c:49:f4:5d:88:8c:ae:1f:b3:5f:25:
68:8e:75:e9:3d:23:07:cd:f2:5a:6d:39:7f:49:61:
37:bf:16:51:9b:98:ec:14:33:1e:96:19:30:4d:02:
4a:eb:5e:4e:18:dc:f2:87:c5:96:56:39:c7:49:3f:
06:7b:0a:95:08:13:fa:8d:c0:a0:c3:93:80:64:40:
3e:8b:e6:c4:ec:df:18:50:76:e2:2f:af:b3:30:88:
d4:b0:91:f6:a9:0c:07:bf:bb:be:6a:12:d1:51:44:
a9:c3:07:4e:36:6b:a6:a6:9a:ee:ad:1b:d3:5b:20:
84:d7:bb:5a:69:4c:89:d4:7f:14:0b:35:6d:de:07:
0a:10:0f:6e:52:18:8a:b4:ee:19:cc:39:b2:95:f6:
38:9a:95:c2:1d:c3:17:9f:8d:f9:d5:90:f5:20:03:
19:b8:4d:7d:73:28:7f:40:a3:22:1a:65:78:b6:b4:
3a:69:04:71:ce:94:72:07:a7:e6:96:a0:9f:67:70:
a2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CE:59:1F:B5:4F:3C:C2:9E:78:05:12:03:E5:87:6E:CC:4B:EA:EC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/179c664b-afae-4c21-9c97-2a2a3985d5b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.117.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:de:3f:2c:4e:96:43:2e:cc:3b:da:99:d6:31:74:4d:96:a8:
6f:84:98:45:64:34:5e:49:35:f3:4e:32:b8:40:7e:42:29:14:
bf:81:fc:9f:90:31:f5:66:9f:ce:bb:d7:d3:1b:58:2a:a7:86:
46:66:8c:02:fc:93:94:2c:ca:2d:87:6d:94:76:1e:d5:05:3a:
0d:c9:64:95:12:e3:e5:e0:bc:18:5f:5b:31:0e:ea:77:65:6b:
25:dd:57:ba:2f:99:ae:de:b1:77:15:50:19:b0:e6:4b:0d:2a:
a0:73:07:bf:4c:f6:fb:26:fa:f7:7c:e7:03:6d:ae:b9:bb:9e:
61:14:c6:72:84:0c:2c:e7:d6:db:20:f1:dd:37:2e:2d:ed:3b:
89:2c:f1:2d:75:d1:bf:86:21:db:b0:69:b2:98:2c:8d:23:4e:
d7:50:63:45:7d:2a:a5:90:42:0b:df:2b:01:fb:fd:bf:7e:6c:
ee:fc:75:cf:02:96:63:4d:f6:84:4b:96:56:e9:67:f9:18:b0:
c9:18:db:78:e0:19:9a:70:dd:56:1e:ed:5c:4d:76:6b:fb:38:
1b:bd:ac:34:52:31:62:23:2f:df:88:f5:e5:ab:1a:b0:4b:8d:
32:6b:2f:b4:21:1a:10:b1:78:13:5e:6e:38:50:4d:93:f2:dd:
16:0e:5a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:00 2026 by rpki-client