Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2b51d415-1366-43ea-8ce9-f13b63a2c827.roa
File: 2b51d415-1366-43ea-8ce9-f13b63a2c827.roa (raw, json)
Hash identifier: /iq+rlr8UDQBBBGB83X4M0dG40x6Bo+inehCRLHwGpw=
Subject key identifier: D5:E2:EB:04:6A:ED:2B:88:50:EE:01:E9:3D:CF:58:DE:11:EA:B5:AB
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2749AD002BE0ADAA6366B479922C14AE7D624C10
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2b51d415-1366-43ea-8ce9-f13b63a2c827.roa
Signing time: Sun 04 Oct 2026 00:40:08 +0000
ROA not before: Sun 04 Oct 2026 00:40:08 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.45.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:49:ad:00:2b:e0:ad:aa:63:66:b4:79:92:2c:14:ae:7d:62:4c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:08 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=5485fd03161efb5c80fdcc8079cdd554457cb5b761a60c887beb148707e2b71a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:28:4f:f6:cc:7c:ec:a7:48:05:f7:2f:11:
c1:17:4e:87:fe:d0:a1:13:58:d4:b5:be:b1:7b:c8:
7e:85:2d:ac:54:14:c3:56:b9:e8:66:e1:e0:ee:ff:
38:06:90:79:43:8e:49:6b:53:1b:02:e4:ef:75:db:
40:1e:08:9a:c6:53:3a:bb:79:73:16:3d:53:47:53:
c7:e6:34:6c:cb:bb:66:1d:35:d3:1b:ec:d4:aa:4e:
63:49:46:e8:68:8b:28:b7:c9:65:a2:85:f6:fd:1a:
bb:2b:e8:19:fa:95:62:3a:87:72:9a:3a:f1:f6:f6:
c1:8e:a6:3a:37:43:45:9c:80:8c:31:df:16:5c:6b:
73:36:e5:d7:b5:2e:9b:2a:c4:74:a2:dc:8f:8d:e8:
b4:b8:48:7c:ef:8e:de:eb:cc:73:79:a1:52:f7:fb:
93:df:3f:3e:db:57:5f:d6:b7:fc:c7:bf:2f:85:f5:
84:6b:35:a7:0a:7d:ca:e3:b2:55:55:cb:e3:e3:2c:
1b:3d:5a:ba:61:5c:36:81:3f:d8:e1:37:cf:b7:a5:
11:de:cb:77:c3:11:0b:ed:ab:0d:f7:ec:73:1c:f6:
ba:11:c0:3b:2e:87:6b:3e:c2:7e:51:d8:a5:d3:bd:
72:af:f7:c8:28:d1:93:75:5e:ce:d0:fc:c4:b6:b5:
48:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:EB:04:6A:ED:2B:88:50:EE:01:E9:3D:CF:58:DE:11:EA:B5:AB
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2b51d415-1366-43ea-8ce9-f13b63a2c827.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.45.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:7a:d0:1c:62:90:b0:a4:6b:fe:c9:94:31:12:68:32:b4:76:
8c:3e:0b:49:7b:36:fb:cf:f3:3e:2d:ee:26:0d:c6:69:52:06:
cd:d4:56:77:29:19:db:16:74:63:a1:b6:68:24:c5:4f:e3:5d:
7b:eb:1d:87:51:0c:ae:a6:31:71:e5:b1:1b:15:d3:b7:7d:cd:
d4:50:ea:95:23:c5:2f:09:a9:17:84:fc:de:9d:ff:9b:29:d9:
6a:40:ec:dc:fb:ec:f1:da:86:0b:9f:13:f9:c9:b4:5e:ce:b6:
a6:ee:15:5e:84:1e:cd:87:b0:7e:40:7b:ed:64:0f:d2:a0:6b:
48:7c:2d:81:38:e2:f2:33:1e:93:eb:d0:dc:60:6d:33:32:56:
94:9b:2b:4f:32:fb:14:ec:ff:ad:cb:74:c1:59:75:4a:f6:cb:
e8:1a:67:7f:28:ec:39:e4:e3:62:82:46:fe:b6:27:ac:f6:fb:
33:04:68:c2:8a:f3:b5:72:2f:65:c5:5a:b0:28:04:4f:6a:eb:
85:3e:30:f6:a1:e0:98:d8:c3:d9:c0:82:b9:5a:19:f2:a5:d7:
07:09:ff:58:af:94:57:25:a4:22:b3:14:8d:1e:03:a1:e6:fb:
e3:92:f4:3a:15:47:0b:b7:e6:df:4f:df:23:f4:6f:86:7c:ec:
85:24:70:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:34:50 2026 by rpki-client