Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/24601d85-ac6e-46b6-a0d2-d35342ccc951.roa
File: 24601d85-ac6e-46b6-a0d2-d35342ccc951.roa (raw, json)
Hash identifier: bflns812h0TLe7x37Xmxh7WTFrTr5Q86X7hTHA9MQCk=
Subject key identifier: AB:73:60:6E:B3:AC:6C:E7:84:E2:EE:7F:F0:4F:A9:F0:B8:2D:91:5E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3E8957C2C35E572CA80549737F53874C7BEEEEE4
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/24601d85-ac6e-46b6-a0d2-d35342ccc951.roa
Signing time: Sun 04 Oct 2026 00:40:24 +0000
ROA not before: Sun 04 Oct 2026 00:40:24 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.93.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:89:57:c2:c3:5e:57:2c:a8:05:49:73:7f:53:87:4c:7b:ee:ee:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:24 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=0a8c6dd20340937ccc0740bcef3d7fe2937a11281bf42c2be5bd2893657ebd62, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:59:fe:fd:b8:50:93:32:b6:a0:93:c5:99:
5e:71:72:21:f2:cf:5d:79:e9:ee:35:1d:15:85:46:
f4:9b:2a:3c:79:23:8f:f7:b9:42:bb:23:d6:66:5e:
1f:4c:ae:5e:d6:9c:a4:9d:f8:7d:d7:bc:e0:8f:83:
31:62:17:c5:fb:32:d6:ec:6c:2d:d9:3a:3d:95:ca:
13:e7:64:c2:e0:14:ba:3c:7d:22:ab:28:ee:75:54:
05:e0:4f:1e:49:dd:58:d2:57:68:05:fa:c3:a2:de:
cf:71:92:06:5d:7f:0c:a1:ab:a5:1b:ae:a8:a6:fe:
a7:4b:bf:07:92:e1:2a:a1:57:37:4a:fc:93:4f:70:
0c:6c:b5:3c:9c:5b:97:f4:cb:ac:df:69:2a:fc:5d:
9c:58:3c:6d:35:c9:a8:ca:2d:e3:2e:98:a6:26:97:
96:6e:f4:28:31:91:ef:c2:9c:e9:3c:c1:f0:cf:e7:
23:7d:22:bb:bf:b1:13:76:2a:2e:be:67:50:55:58:
fb:15:b4:97:14:86:cc:4e:75:02:4e:49:0b:50:4f:
39:0c:13:46:b0:49:89:c4:14:d9:37:68:16:1a:5c:
69:5e:a7:36:56:59:ee:c1:35:c6:d6:81:02:19:8d:
0c:f4:17:88:9a:9f:24:08:32:b6:d9:cb:72:28:e4:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:73:60:6E:B3:AC:6C:E7:84:E2:EE:7F:F0:4F:A9:F0:B8:2D:91:5E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/24601d85-ac6e-46b6-a0d2-d35342ccc951.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:9c:ee:e5:13:37:6c:db:f6:e2:be:35:20:97:3b:82:4a:d4:
9c:8f:41:8e:55:d3:a1:10:c5:e8:31:76:fe:16:f7:4e:01:3b:
b4:d4:2f:24:ee:ca:41:72:6e:b6:87:75:54:75:a0:34:e2:74:
6b:cf:bc:7b:dd:fa:54:2d:73:5f:5e:d6:89:3a:9a:4f:ff:b9:
f6:16:95:fc:86:8d:f7:c2:52:da:5e:33:2b:51:a1:e0:0e:86:
b2:b3:10:52:6a:10:2b:88:e7:15:c8:af:10:6b:6a:9d:53:ae:
30:77:5a:30:2a:5f:84:f9:26:48:43:fe:5f:f5:56:9e:f2:40:
07:41:f3:be:d5:98:3a:f1:9d:07:9a:f2:b7:6d:2a:ff:a8:0b:
f0:e8:76:0a:54:24:8a:d6:67:11:a5:df:49:99:7d:06:9c:3f:
47:8e:07:29:93:61:37:40:42:a8:a9:c5:6b:08:22:5e:66:7f:
08:fa:e8:58:d5:8c:e8:89:6a:0d:de:21:7b:bd:3f:0f:07:9e:
b4:ae:a3:2d:33:46:5e:c0:c1:da:83:a0:fe:a3:cd:92:41:ca:
24:23:ad:06:ec:17:22:98:60:07:94:37:8c:8b:98:bf:13:0c:
78:5c:ed:12:3f:9f:81:3d:39:ed:3c:72:f7:60:c7:f7:32:8c:
7d:fc:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:55:38 2026 by rpki-client