Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/277d74fd-3101-4a9b-8f2a-9bfd9dc55230.roa
File: 277d74fd-3101-4a9b-8f2a-9bfd9dc55230.roa (raw, json)
Hash identifier: jRywSOSVdjbAgQ5Qq3ETizqI9P+cf7U7bk3iqDTDnh8=
Subject key identifier: DA:83:CE:9C:59:EA:22:C7:38:B2:D2:71:E6:FB:B5:0C:EC:05:D5:F2
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 61661B7AB8DC179595DA3524319A968A15D6B647
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/277d74fd-3101-4a9b-8f2a-9bfd9dc55230.roa
Signing time: Sun 02 Aug 2026 01:40:08 +0000
ROA not before: Sun 02 Aug 2026 01:40:08 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.118.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:66:1b:7a:b8:dc:17:95:95:da:35:24:31:9a:96:8a:15:d6:b6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 2 01:40:08 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=8ba120424834c6358cc6df4562b8e7f3c4b4fa01721fe8fe9212dfb53bfdefee, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:09:3e:5d:a1:01:9d:f8:7d:84:5a:58:f6:
16:ef:20:54:b4:49:0b:91:42:15:d7:31:bf:70:36:
9c:38:6e:51:fb:fc:7b:41:8f:92:c2:5e:89:76:19:
8f:c5:25:f4:72:c4:1f:8d:4b:fb:8f:d7:61:87:8b:
50:01:0c:3b:79:b2:e9:af:1e:cf:e9:73:8b:2d:50:
7b:7a:fd:89:81:b8:1b:8c:c8:b4:5a:a3:0e:8a:de:
3d:82:33:4c:0a:72:c3:7c:9d:4c:c4:01:bb:45:fd:
73:f5:5a:44:04:24:53:9d:0e:f0:df:6c:38:9f:ac:
72:14:c0:25:e1:4f:49:dc:4b:74:b2:33:2b:31:24:
c7:54:2b:cf:91:5a:ad:d8:91:ca:4a:7c:34:80:e2:
e3:c0:d3:dc:51:b5:47:2a:a2:bc:18:92:d2:84:78:
3f:6d:e2:6a:81:54:65:05:3c:dc:84:73:1b:92:1c:
48:6d:3a:6b:61:e8:1a:90:08:2a:84:e0:f2:0a:ad:
dc:34:b2:00:ba:23:47:40:2e:6d:d2:56:ca:c1:6f:
6f:9e:af:21:f2:af:a9:83:f5:d2:62:a0:fe:01:6b:
fe:b2:2e:09:3c:b6:25:34:72:e8:b5:60:6f:31:87:
99:38:1f:f4:bc:02:86:52:f8:c6:e5:25:12:d1:fc:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:83:CE:9C:59:EA:22:C7:38:B2:D2:71:E6:FB:B5:0C:EC:05:D5:F2
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/277d74fd-3101-4a9b-8f2a-9bfd9dc55230.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.118.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:b4:a1:3d:f3:16:4f:4c:3a:6c:41:39:93:74:db:ea:c9:fd:
31:ce:c2:2d:12:d7:cb:80:01:f9:25:27:eb:cb:9e:24:76:42:
fd:8f:98:ea:32:84:66:ff:5c:aa:5e:7b:be:9f:7e:5d:4e:7a:
fe:08:14:42:1a:95:19:19:51:bd:11:3e:51:10:c6:2d:d0:37:
61:61:3a:a9:82:e2:ed:70:ab:c2:75:c3:cb:e7:c5:e3:b8:9d:
2c:18:b7:9d:06:ab:19:ac:0b:b1:1c:3f:bd:8f:11:2d:fe:c7:
a6:05:67:a2:93:87:16:16:0e:8b:2e:11:72:1c:e6:69:19:3d:
68:47:eb:7b:c7:7c:cc:57:9f:7f:a3:3f:66:61:05:aa:b8:1f:
9a:41:3c:6c:45:8d:88:df:fc:8c:9a:17:a3:be:08:b0:2c:80:
ed:7b:9d:4d:c2:88:9e:62:ef:2f:54:0a:21:e6:9f:35:4a:5b:
5b:f6:e9:c6:b7:d7:c6:b4:f1:40:a5:42:dd:22:6f:96:9f:03:
b5:96:1d:85:3d:10:1a:9c:c9:77:d8:85:51:64:24:cd:4c:3f:
40:f5:a9:1a:d0:87:0e:c9:8f:a4:30:ed:fe:7a:ae:c0:5e:92:
16:f7:66:25:d3:aa:7c:d3:f2:e4:8a:a2:e0:21:bf:6e:fd:72:
ba:e8:97:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:03 2026 by rpki-client