Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2274bb17-af22-495a-a451-ba0ed5fd0a92.roa
File: 2274bb17-af22-495a-a451-ba0ed5fd0a92.roa (raw, json)
Hash identifier: FfUv7SI7JWas6n0HbEZT6wsvbBZbw91fY1FXx0nui2o=
Subject key identifier: 9A:AE:A9:CF:FD:E4:ED:64:5F:50:33:95:BB:CD:85:02:86:11:B2:CD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6CB86684BF2C00B925D7977D7796DAD2C13FE36A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2274bb17-af22-495a-a451-ba0ed5fd0a92.roa
Signing time: Wed 12 Aug 2026 17:49:15 +0000
ROA not before: Wed 12 Aug 2026 17:49:15 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.202.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:b8:66:84:bf:2c:00:b9:25:d7:97:7d:77:96:da:d2:c1:3f:e3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 12 17:49:15 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=ee35592986d81e231d8e59078d1cab3d3a1cd311d3602fbdac14307ba91eec7d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:83:a1:93:be:1f:00:28:d7:31:38:b6:c0:
1a:1f:56:e4:c4:44:b3:fa:cd:00:ab:e2:ed:99:fc:
07:e8:85:bb:10:eb:c0:02:e6:6f:c5:c1:8f:06:ab:
a4:7d:a5:f7:7d:69:f5:45:f3:db:9f:b8:a3:1f:ed:
ad:93:4b:3e:9d:96:6c:1f:32:0c:6c:b4:71:98:7f:
6d:63:1b:4d:96:d9:03:fa:4e:60:b4:86:45:27:da:
b2:c7:15:0c:cb:d0:9a:18:34:7c:dc:59:ba:39:db:
fd:77:4f:0a:1c:ef:1c:f2:cf:ee:e2:f0:ef:33:7c:
fc:09:fd:5c:cc:31:9b:1f:80:e6:e5:3c:c2:b4:3c:
45:1c:04:dc:60:3f:22:14:06:4f:39:70:5c:e8:07:
ad:b2:c6:4d:27:34:8b:38:c0:8a:7b:dd:84:86:d1:
68:a9:9b:21:84:6e:da:55:75:d9:9b:a1:05:53:16:
9a:c1:69:cb:52:8c:f1:fb:bd:fd:6c:39:48:b4:a6:
2a:01:37:97:e5:dc:34:51:58:e9:6e:2e:05:3f:74:
b3:4b:5b:52:8d:6d:ce:2b:37:1f:20:1b:99:e8:ef:
aa:b2:29:f3:3e:3c:29:5d:8c:5e:51:b9:20:ee:cc:
fd:4f:20:12:25:2a:a0:95:4d:2a:49:3d:64:02:d5:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AE:A9:CF:FD:E4:ED:64:5F:50:33:95:BB:CD:85:02:86:11:B2:CD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2274bb17-af22-495a-a451-ba0ed5fd0a92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.202.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9c:8c:ab:ac:51:e3:8c:88:09:35:d2:d8:97:10:5b:90:bc:96:
80:6e:4f:ae:17:d6:c3:83:a1:30:40:dc:ca:f3:79:34:c3:bd:
ea:7f:26:65:de:f8:87:79:8d:db:7e:e3:f4:4b:c1:23:e7:45:
d0:48:22:ce:ff:90:95:82:96:f5:be:e6:1b:da:c5:63:8e:2e:
2a:77:01:9f:5d:d0:d5:b1:2d:63:b4:e5:cf:ce:2b:d1:3e:47:
72:41:ce:f2:ce:32:f7:7d:db:fd:43:ec:b8:5e:d2:68:0f:9b:
58:49:d1:1a:ad:77:f6:22:2e:40:33:e2:99:95:52:a6:02:14:
85:79:75:19:57:a6:91:ce:e7:3c:6b:20:60:82:d2:c9:8f:8b:
d2:75:4f:1c:e7:7c:2b:ec:14:fc:eb:c8:5f:5d:ab:2b:c5:9a:
ac:6d:02:5d:a0:7b:ae:f5:2b:22:bb:2d:8e:2a:3f:c4:76:dd:
98:0e:62:33:93:7a:d7:18:f4:dc:24:51:0b:44:95:01:4b:a4:
df:d3:3a:0c:f5:aa:cc:c5:2f:c0:e1:83:80:7a:4b:5b:b4:87:
c3:44:70:2e:c3:1c:76:c6:85:b2:62:8e:ad:bd:c4:e3:f4:73:
a4:0d:10:25:f3:cf:e6:31:e4:c4:ce:39:d2:04:de:7b:53:9e:
ef:46:ab:6f
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUbLhmhL8sALkl15d9d5ba0sE/42owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MTIxNzQ5MTVaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGVlMzU1OTI5ODZkODFlMjMxZDhlNTkwNzhkMWNhYjNkM2ExY2QzMTFkMzYw
MmZiZGFjMTQzMDdiYTkxZWVjN2QxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKPGg6GTvh8AKNcxOLbAGh9W5MREs/rNAKvi7Zn8B+iFuxDrwALmb8XBjwar
pH2l931p9UXz25+4ox/trZNLPp2WbB8yDGy0cZh/bWMbTZbZA/pOYLSGRSfasscV
DMvQmhg0fNxZujnb/XdPChzvHPLP7uLw7zN8/An9XMwxmx+A5uU8wrQ8RRwE3GA/
IhQGTzlwXOgHrbLGTSc0izjAinvdhIbRaKmbIYRu2lV12ZuhBVMWmsFpy1KM8fu9
/Ww5SLSmKgE3l+XcNFFY6W4uBT90s0tbUo1tzis3HyAbmejvqrIp8z48KV2MXlG5
IO7M/U8gEiUqoJVNKkk9ZALVyIcCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSarqnP
/eTtZF9QM5W7zYUChhGyzTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MjI3NGJiMTctYWYyMi00OTVhLWE0NTEtYmEwZWQ1ZmQwYTkyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPKMA0G
CSqGSIb3DQEBCwUAA4IBAQCcjKusUeOMiAk10tiXEFuQvJaAbk+uF9bDg6EwQNzK
83k0w73qfyZl3viHeY3bfuP0S8Ej50XQSCLO/5CVgpb1vuYb2sVjji4qdwGfXdDV
sS1jtOXPzivRPkdyQc7yzjL3fdv9Q+y4XtJoD5tYSdEarXf2Ii5AM+KZlVKmAhSF
eXUZV6aRzuc8ayBggtLJj4vSdU8c53wr7BT868hfXasrxZqsbQJdoHuu9Ssiuy2O
Kj/Edt2YDmIzk3rXGPTcJFELRJUBS6Tf0zoM9arMxS/A4YOAektbtIfDRHAuwxx2
xoWyYo6tvcTj9HOkDRAl88/mMeTEzjnSBN57U57vRqtv
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:11 2026 by rpki-client