Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/286f881c-8fa0-4200-ada2-20a0cc49038e.roa
File: 286f881c-8fa0-4200-ada2-20a0cc49038e.roa (raw, json)
Hash identifier: lBSToPE5sP4kCW3MhDWiAP3sOJPfspUT6uRhbvdcm78=
Subject key identifier: 22:1D:C3:0E:A8:67:3C:F3:A8:EB:83:6C:B8:E1:C3:E4:01:30:67:16
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0523C32EE78DFDE44FBBEDBF770AF56C4FC9E10E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/286f881c-8fa0-4200-ada2-20a0cc49038e.roa
Signing time: Fri 07 Aug 2026 05:50:46 +0000
ROA not before: Fri 07 Aug 2026 05:50:46 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.166.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:23:c3:2e:e7:8d:fd:e4:4f:bb:ed:bf:77:0a:f5:6c:4f:c9:e1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:46 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=869ce68806491fcf9e8e6f53fcd2182c142f576cf351a2e1ecc6eaa6a042125b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:03:b2:52:42:82:06:91:1e:a3:4a:23:57:
21:10:ea:0f:4c:e0:bf:df:06:8e:32:09:6d:36:ea:
f6:97:19:28:0a:6f:f5:94:d7:df:39:00:ea:7c:e5:
1b:c9:df:df:37:70:b0:16:40:7e:32:8a:50:1c:97:
89:04:a4:a8:30:f0:37:d2:1c:37:03:ab:b2:44:f2:
74:8a:eb:af:ef:d5:7f:1c:45:49:5c:63:cf:29:c2:
12:50:d8:d5:82:de:d9:6b:2c:cd:2a:6d:ad:25:9d:
e2:ac:d5:7e:b8:75:91:37:30:ed:75:7a:b3:94:91:
0f:7a:83:35:86:8f:88:16:be:42:95:13:c9:9c:fa:
ce:11:af:7c:1a:e2:7d:00:54:c9:21:67:5c:3f:b2:
da:2f:8d:cf:a2:32:c7:4d:8b:ff:6f:23:26:5c:fe:
7b:ae:59:02:20:ee:e6:11:5c:5f:2d:79:26:2b:d3:
bd:bd:b9:e8:c5:0a:3b:fb:f3:05:c2:17:ef:05:85:
51:fc:bf:a8:15:ca:af:da:2e:ef:b0:6e:01:05:a2:
44:58:9f:4d:47:28:07:d6:f6:a3:f3:56:17:95:9e:
fc:89:b0:db:83:27:96:a2:18:fe:6d:ca:9d:a0:e5:
62:09:33:a2:6c:85:d5:22:ba:29:ef:14:ff:2b:f8:
24:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1D:C3:0E:A8:67:3C:F3:A8:EB:83:6C:B8:E1:C3:E4:01:30:67:16
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/286f881c-8fa0-4200-ada2-20a0cc49038e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.166.0.0/15
Signature Algorithm: sha256WithRSAEncryption
19:b7:87:5c:32:87:b3:ac:bb:c8:73:8e:8d:2d:ac:16:af:96:
fb:fe:79:18:d5:4e:80:21:97:17:77:f1:56:96:c8:e0:8c:70:
41:77:da:ab:5b:db:51:ff:44:b9:68:1f:cd:ed:63:88:ed:9a:
f6:a3:c8:9f:56:b4:5b:00:96:90:c0:97:11:89:b4:bf:11:29:
35:40:71:98:68:4d:51:34:a8:97:5e:a8:46:e6:de:f1:b5:69:
99:45:de:57:32:9d:61:c5:68:c4:3f:86:88:d4:67:6e:d8:4b:
f2:95:bf:b8:9e:13:fe:a9:8c:b3:c6:f3:41:ba:cf:44:56:02:
3d:7d:2b:36:76:1c:1d:23:76:fe:70:2f:33:73:27:5b:c4:27:
5f:fb:c4:16:a7:d6:95:ce:bd:29:f3:dd:27:eb:bd:98:37:12:
f8:4c:b5:75:52:b4:ce:98:66:57:a5:41:75:29:ab:f7:05:1b:
f4:0b:dc:50:24:43:3d:d6:fb:1f:5a:75:02:fb:dd:b6:fb:d0:
ed:88:69:b3:d4:5f:c4:88:a7:b2:6f:5c:5d:bd:b8:04:ce:90:
51:75:11:10:d8:40:49:e1:eb:2f:5c:30:dd:73:b6:db:6b:4a:
55:12:33:5a:16:4e:a5:5b:13:ed:70:eb:35:26:4f:2e:47:aa:
19:a0:71:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:01 2026 by rpki-client