Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/24601d85-ac6e-46b6-a0d2-d35342ccc951.roa
File: 24601d85-ac6e-46b6-a0d2-d35342ccc951.roa (raw, json)
Hash identifier: weUNRa3RzaPqUqTE4Cs3QUXZmA8sIJfPjEXP36FW1aY=
Subject key identifier: 8A:A8:83:28:4C:2A:59:5B:08:36:5A:ED:F9:AF:EB:B2:5E:9F:78:D3
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 397ADEDBBC58ED5A12D5193B8F41A03452671FAD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/24601d85-ac6e-46b6-a0d2-d35342ccc951.roa
Signing time: Mon 27 Apr 2026 00:40:06 +0000
ROA not before: Mon 27 Apr 2026 00:40:06 +0000
ROA not after: Sun 26 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.93.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:7a:de:db:bc:58:ed:5a:12:d5:19:3b:8f:41:a0:34:52:67:1f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Apr 27 00:40:06 2026 GMT
Not After : Jul 26 23:59:59 2026 GMT
Subject: serialNumber=a5c938f0aec74af77102f081c0ec3d35ab1da3650ca2f69fd92e00891df41789, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:46:34:25:f6:35:04:c3:a2:f4:10:4a:b0:
66:ff:09:4b:c7:06:94:f9:9d:45:9f:42:1e:fb:b7:
18:df:6b:86:8d:c3:71:e8:98:fb:29:e6:47:61:81:
eb:e9:a8:6a:e2:bf:c9:91:89:a5:3a:8a:fd:95:31:
f5:c9:ec:e2:6d:30:86:79:1b:9f:b2:07:e9:44:e5:
05:ed:90:2d:79:df:ed:06:b0:ba:51:0f:d7:ba:2b:
35:70:20:2d:4b:c9:8c:cf:30:e2:9f:f9:c5:98:bc:
0d:f5:40:39:c8:4f:0e:d8:1f:28:0d:70:7a:3c:c9:
d6:93:09:d4:da:e8:75:77:60:52:7b:ec:03:8b:21:
47:a4:8a:9c:e1:d6:07:b6:b5:d2:7e:bf:f1:95:67:
4b:6d:fc:79:80:a5:7e:4c:22:dd:ef:0f:a0:22:8d:
4f:f3:1e:7e:06:50:85:2b:bd:1b:c0:98:85:87:cd:
99:bb:71:44:1c:07:a4:b3:48:36:c4:ae:04:b0:93:
78:f0:f8:c9:d0:88:f1:a1:55:26:44:b2:8c:a3:80:
16:fd:03:f2:aa:da:20:61:48:bb:ae:53:10:fc:9f:
c8:8b:f4:3d:bc:42:f0:56:c6:af:42:1d:b4:f4:a5:
0e:2a:24:01:b4:02:40:83:7d:2b:bc:81:7d:cd:92:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A8:83:28:4C:2A:59:5B:08:36:5A:ED:F9:AF:EB:B2:5E:9F:78:D3
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/24601d85-ac6e-46b6-a0d2-d35342ccc951.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:bc:eb:9f:fb:45:dd:5f:06:2f:38:dd:d4:33:d1:62:c2:39:
cf:dd:82:ec:57:c8:02:42:b3:2e:d9:90:75:f7:b7:e5:55:f8:
82:b6:79:6b:8a:d7:c5:3d:6e:79:43:62:fa:8c:45:eb:8d:b8:
17:e3:3e:d2:45:55:07:c7:aa:f6:86:b8:3b:47:34:2d:f0:0b:
fa:dc:a4:c7:c7:87:c3:ff:91:bd:66:21:66:ed:7d:ee:f5:74:
28:63:2b:62:d0:60:47:93:2a:72:f0:07:82:ab:8f:84:1d:4a:
d3:4a:0c:0b:b5:a3:21:50:e5:6d:2b:e5:a0:9f:cc:5a:40:37:
c6:2d:1e:6a:e2:9b:fc:af:09:a6:52:eb:69:44:a7:2e:8f:96:
9a:eb:1f:19:dc:3e:55:2c:f1:22:ec:04:4b:33:5d:5b:31:31:
cf:35:71:0b:2f:ad:64:c4:8d:7e:f3:de:83:5a:96:e5:98:e1:
ad:b6:19:c6:55:75:b0:c1:a2:09:24:b4:8f:ac:d0:4a:5d:7c:
ab:a2:dd:4f:68:98:53:d9:73:d7:16:b1:cd:5a:1b:aa:e6:c9:
f6:73:3b:38:f6:1e:a4:23:d6:91:2d:8c:11:30:4b:fd:28:82:
26:9c:aa:61:b6:ee:9a:c3:8c:12:c3:b5:de:bf:57:dc:1f:87:
5f:de:22:3e
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUOXre27xY7VoS1Rk7j0GgNFJnH60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA0MjcwMDQwMDZaFw0yNjA3MjYyMzU5NTlaMHoxSTBHBgNV
BAUTQGE1YzkzOGYwYWVjNzRhZjc3MTAyZjA4MWMwZWMzZDM1YWIxZGEzNjUwY2Ey
ZjY5ZmQ5MmUwMDg5MWRmNDE3ODkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANaQRjQl9jUEw6L0EEqwZv8JS8cGlPmdRZ9CHvu3GN9rho3DceiY+ynmR2GB
6+moauK/yZGJpTqK/ZUx9cns4m0whnkbn7IH6UTlBe2QLXnf7QawulEP17orNXAg
LUvJjM8w4p/5xZi8DfVAOchPDtgfKA1wejzJ1pMJ1NrodXdgUnvsA4shR6SKnOHW
B7a10n6/8ZVnS238eYClfkwi3e8PoCKNT/MefgZQhSu9G8CYhYfNmbtxRBwHpLNI
NsSuBLCTePD4ydCI8aFVJkSyjKOAFv0D8qraIGFIu65TEPyfyIv0PbxC8FbGr0Id
tPSlDiokAbQCQIN9K7yBfc2SMSUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSKqIMo
TCpZWwg2Wu35r+uyXp940zAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MjQ2MDFkODUtYWM2ZS00NmI2LWEwZDItZDM1MzQyY2NjOTUxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNdMA0G
CSqGSIb3DQEBCwUAA4IBAQCjvOuf+0XdXwYvON3UM9FiwjnP3YLsV8gCQrMu2ZB1
97flVfiCtnlritfFPW55Q2L6jEXrjbgX4z7SRVUHx6r2hrg7RzQt8Av63KTHx4fD
/5G9ZiFm7X3u9XQoYyti0GBHkypy8AeCq4+EHUrTSgwLtaMhUOVtK+Wgn8xaQDfG
LR5q4pv8rwmmUutpRKcuj5aa6x8Z3D5VLPEi7ARLM11bMTHPNXELL61kxI1+896D
WpblmOGtthnGVXWwwaIJJLSPrNBKXXyrot1PaJhT2XPXFrHNWhuq5sn2czs49h6k
I9aRLYwRMEv9KIImnKphtu6aw4wSw7Xev1fcH4df3iI+
-----END CERTIFICATE-----
Generated at Sun May 3 15:23:02 2026 by rpki-client