Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/23638404-3503-45ba-aecc-b696f08b833a.roa
File: 23638404-3503-45ba-aecc-b696f08b833a.roa (raw, json)
Hash identifier: +uXv9E+Tka4JyBxAnaPjhv3ZvPaqE8SMWyYrXQG6Eek=
Subject key identifier: 33:93:24:48:59:46:A0:5B:D6:EB:F6:DB:26:0C:66:DA:72:62:91:1D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3756D3130CA2AC4B0201DCA843E8736CB980A42B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/23638404-3503-45ba-aecc-b696f08b833a.roa
Signing time: Wed 12 Aug 2026 17:49:15 +0000
ROA not before: Wed 12 Aug 2026 17:49:15 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.203.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:56:d3:13:0c:a2:ac:4b:02:01:dc:a8:43:e8:73:6c:b9:80:a4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 12 17:49:15 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=cb50e0668472570676435fcc5af70ab42aa924f44b2f9023c233e38531404f2b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:c9:b6:a5:8d:2d:4c:07:07:ac:c2:41:9a:
15:60:ae:e4:88:e3:89:69:9e:64:3e:74:da:d2:aa:
ee:90:ed:78:2c:19:53:f2:76:76:2e:b2:73:59:0d:
45:3a:0b:cc:34:e3:11:eb:07:88:70:68:2e:17:14:
a9:30:ce:38:09:0a:a3:3e:86:cb:79:1a:52:ff:68:
6b:24:3a:bd:49:02:a4:1c:3b:8a:50:79:1d:b8:17:
d3:d6:7e:74:09:63:e6:dc:c5:7a:15:79:ff:bb:86:
bc:27:a1:19:b8:3d:4a:f2:53:34:65:b9:ad:3c:75:
ff:f9:4d:38:6a:05:aa:4a:c5:58:47:29:10:5b:fc:
22:a7:44:4a:0b:41:3a:91:e8:31:04:32:6a:18:18:
d2:ee:0a:05:27:7c:6e:3e:31:88:0b:fd:cb:dd:f6:
d2:4a:3c:75:57:4c:4d:38:ed:72:a1:23:a8:fd:bb:
02:05:71:51:be:5f:f9:18:1e:8b:bd:04:7f:a2:40:
2f:04:9e:e2:53:aa:83:37:99:35:a7:53:88:4c:85:
60:46:53:54:05:d2:94:e7:80:54:e5:6a:3e:65:9b:
38:e5:d9:11:4a:bf:f0:8e:63:ef:5c:e9:3f:a5:17:
26:aa:7e:75:27:ea:4e:10:59:27:43:24:d4:66:21:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:93:24:48:59:46:A0:5B:D6:EB:F6:DB:26:0C:66:DA:72:62:91:1D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/23638404-3503-45ba-aecc-b696f08b833a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.203.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c0:b5:b7:36:be:da:a8:60:ed:f0:35:ba:7e:8f:f5:eb:3f:65:
7a:55:7f:2f:21:06:c8:27:45:1d:02:54:a6:b3:72:30:03:4e:
b3:c2:3d:eb:7f:d6:49:9e:dc:56:35:1d:3a:80:63:0e:b6:ac:
22:77:d3:53:43:2d:3d:4b:e3:1d:03:5b:a5:d2:09:6b:d2:9c:
f5:34:ee:d6:9e:91:6e:b8:9f:29:cb:3a:8e:63:07:99:c6:21:
42:28:f0:45:b7:62:70:6a:fc:17:9a:85:39:36:18:c0:9f:7b:
fe:a8:35:eb:91:7c:ba:09:fe:0f:7e:8e:02:2e:71:45:a3:11:
3b:3f:12:80:f2:b4:dc:d7:72:94:f6:94:91:82:0b:e8:f3:39:
ea:8f:74:2f:7a:0e:76:26:a3:fd:68:af:34:8e:6a:e1:29:c6:
b7:2a:a1:b7:a0:8a:5b:63:7e:58:ab:67:f1:0c:28:f1:e7:09:
d7:c7:5b:dc:1f:27:4c:7f:38:fb:51:b9:a3:9a:d2:91:3d:eb:
67:65:c3:10:6d:4f:52:12:c2:e1:00:43:a7:9b:b1:0e:aa:5d:
48:8a:48:9d:0f:14:83:58:b4:db:5e:34:59:75:88:59:c0:04:
48:9d:0b:97:44:ce:ee:6c:40:ff:a2:e5:4d:1d:0a:76:0b:cd:
be:41:48:d0
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUN1bTEwyirEsCAdyoQ+hzbLmApCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MTIxNzQ5MTVaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGNiNTBlMDY2ODQ3MjU3MDY3NjQzNWZjYzVhZjcwYWI0MmFhOTI0ZjQ0YjJm
OTAyM2MyMzNlMzg1MzE0MDRmMmIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMd8ybaljS1MBweswkGaFWCu5IjjiWmeZD502tKq7pDteCwZU/J2di6yc1kN
RToLzDTjEesHiHBoLhcUqTDOOAkKoz6Gy3kaUv9oayQ6vUkCpBw7ilB5HbgX09Z+
dAlj5tzFehV5/7uGvCehGbg9SvJTNGW5rTx1//lNOGoFqkrFWEcpEFv8IqdESgtB
OpHoMQQyahgY0u4KBSd8bj4xiAv9y9320ko8dVdMTTjtcqEjqP27AgVxUb5f+Rge
i70Ef6JALwSe4lOqgzeZNadTiEyFYEZTVAXSlOeAVOVqPmWbOOXZEUq/8I5j71zp
P6UXJqp+dSfqThBZJ0Mk1GYhTTcCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQzkyRI
WUagW9br9tsmDGbacmKRHTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MjM2Mzg0MDQtMzUwMy00NWJhLWFlY2MtYjY5NmYwOGI4MzNhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADPLMA0G
CSqGSIb3DQEBCwUAA4IBAQDAtbc2vtqoYO3wNbp+j/XrP2V6VX8vIQbIJ0UdAlSm
s3IwA06zwj3rf9ZJntxWNR06gGMOtqwid9NTQy09S+MdA1ul0glr0pz1NO7WnpFu
uJ8pyzqOYweZxiFCKPBFt2JwavwXmoU5NhjAn3v+qDXrkXy6Cf4Pfo4CLnFFoxE7
PxKA8rTc13KU9pSRggvo8znqj3Qveg52JqP9aK80jmrhKca3KqG3oIpbY35Yq2fx
DCjx5wnXx1vcHydMfzj7UbmjmtKRPetnZcMQbU9SEsLhAEOnm7EOql1IikidDxSD
WLTbXjRZdYhZwARInQuXRM7ubED/ouVNHQp2C82+QUjQ
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:42:38 2026 by rpki-client