Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
File: 226b8c83-9647-47e2-847b-1787f3d54040.roa (raw, json)
Hash identifier: AMaC4bmgNZgI4tKO2JVvyVbrKR21sVob4NZ3XEGVdTQ=
Subject key identifier: 51:98:B0:C2:EE:8D:A2:3B:AC:E7:F7:F7:01:6B:CB:D4:EC:73:72:A5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7B8DD643ABF75906B5A7A5E0C40D6358F24FC86D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
Signing time: Sun 04 Oct 2026 00:40:23 +0000
ROA not before: Sun 04 Oct 2026 00:40:23 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.94.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:8d:d6:43:ab:f7:59:06:b5:a7:a5:e0:c4:0d:63:58:f2:4f:c8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:23 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=6bf4d147e5cb3ab724e92eaaaf822cda2b18370196e7695a710749f010853a3d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:46:56:7c:83:04:15:57:59:ae:36:9d:b6:
fb:b8:9e:29:c9:f0:55:52:d2:60:6d:bd:00:cb:3e:
a6:c4:51:9f:6c:71:fa:69:54:c6:52:4d:30:09:9d:
cb:17:5d:b9:d7:29:ee:2c:e6:75:94:1c:d8:61:bd:
66:8f:f1:e2:53:ca:80:6f:ba:d9:c7:06:78:bd:d5:
27:fa:86:ab:43:cb:f3:5f:48:65:44:a2:19:f5:2e:
1c:23:75:2a:4f:48:ef:c3:68:b7:b8:a8:0b:25:05:
aa:ec:57:9d:a5:7e:a0:f5:0d:c0:24:c7:ce:bc:c4:
61:35:ea:c5:7e:08:76:73:31:1f:33:76:5a:fe:88:
89:0b:23:07:b4:f3:37:63:ea:fe:03:ae:8c:e9:ea:
cc:95:e4:bd:94:47:bf:14:41:b5:1a:eb:bf:cb:60:
56:fe:35:f1:6f:7e:84:67:b9:8a:89:e8:eb:ae:97:
b2:c5:59:b7:3c:08:55:0c:19:fa:d8:6b:d1:f0:b8:
b2:21:ba:8f:03:22:fc:19:3f:ab:d9:09:bf:de:f6:
26:c7:98:f8:c3:98:e8:51:45:95:6f:13:85:93:b2:
4a:f0:e6:fb:f1:eb:a4:78:90:8b:00:be:c9:ec:00:
5c:b5:1c:d7:73:6b:56:42:4f:19:05:7a:ae:9a:e7:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:98:B0:C2:EE:8D:A2:3B:AC:E7:F7:F7:01:6B:CB:D4:EC:73:72:A5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/226b8c83-9647-47e2-847b-1787f3d54040.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.94.0.0/15
Signature Algorithm: sha256WithRSAEncryption
97:2e:23:46:a3:cf:62:34:5f:c7:c2:98:70:4c:87:b1:8f:7f:
ca:c2:3f:34:dc:a6:31:54:c7:8d:af:cd:3d:1b:55:5f:24:df:
13:2d:cb:26:69:37:6f:d1:47:98:0b:1b:79:77:c1:60:3e:85:
c3:e2:a5:4c:d0:74:80:c5:87:2b:7e:ea:9c:00:a9:85:0f:58:
07:21:af:f4:7e:82:d3:53:9a:01:b2:ef:01:86:cd:47:52:06:
33:ea:a1:7c:f0:bc:06:14:48:db:17:c4:53:71:18:50:32:6e:
39:11:51:cd:32:54:05:ce:9e:7c:e5:ac:ed:80:33:b0:92:e6:
73:e4:ce:85:49:4a:4e:cf:4e:fb:e3:1f:84:a9:fe:9e:f8:7c:
a6:98:f8:33:2d:ea:ea:b4:c5:ed:f0:2b:82:ca:31:4a:64:13:
21:b9:32:12:73:f1:3a:a7:d2:14:06:7d:88:f2:8c:78:54:47:
5c:5a:9a:c1:56:8c:8b:54:bf:77:81:de:82:38:fd:de:48:53:
09:6c:05:cc:93:49:56:32:19:20:d8:27:ef:11:d7:1d:32:85:
b2:5e:18:bb:3c:66:36:89:98:4b:d3:10:02:26:1c:18:9b:b3:
f0:aa:0d:fd:f5:87:b0:df:1c:91:41:3b:27:f0:35:6d:6e:aa:
a6:7d:01:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:34:37 2026 by rpki-client