Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2ce9a789-9599-4c9d-a093-ead3033f60d1.roa
File: 2ce9a789-9599-4c9d-a093-ead3033f60d1.roa (raw, json)
Hash identifier: xyEaEvPfKhSOhl3jGO3I0KYhSCdXmzxbrD+pKKxq+NE=
Subject key identifier: 1C:1E:01:7D:B8:04:A7:38:83:B2:92:37:1D:54:57:A2:92:BA:2D:20
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3C4F288517BF19C3A3EC327B11E012587A772F9E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2ce9a789-9599-4c9d-a093-ead3033f60d1.roa
Signing time: Fri 07 Aug 2026 05:50:10 +0000
ROA not before: Fri 07 Aug 2026 05:50:10 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.34.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:4f:28:85:17:bf:19:c3:a3:ec:32:7b:11:e0:12:58:7a:77:2f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:10 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=147e88c86cebe4f0206ff455173269e815667e10c2f6121d2d52b507b3a295c0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a5:96:bc:7b:a3:cc:3e:00:bc:6d:43:2f:5f:
41:b5:13:97:5d:3a:86:d7:d1:89:b9:85:19:3e:61:
a6:cd:e9:d2:bb:26:9f:9e:00:b3:70:0b:c8:c4:28:
8f:aa:ea:56:fb:ad:c8:0d:0c:e2:e0:09:64:bc:91:
cc:58:cd:bb:0f:f0:ed:15:f5:e7:0a:89:e3:1a:86:
3d:d4:08:c7:11:7f:83:cc:69:64:3b:81:f3:18:03:
cd:9e:b7:ad:98:4a:b0:c0:f7:53:a2:6c:6f:1b:33:
a6:57:24:76:a4:8e:cb:72:56:50:5a:a8:be:e8:bd:
5e:88:a9:a3:27:61:93:b9:70:32:6e:ac:fd:0e:c4:
6e:30:aa:21:e1:82:aa:88:70:0d:10:00:76:12:6f:
4e:ac:68:b0:a6:69:6e:5b:90:dc:0a:07:a2:cc:c4:
f3:91:e8:2c:5d:9b:2f:0c:f6:53:4a:cc:60:10:9b:
c8:0f:02:10:6f:ed:49:cc:64:d4:40:a7:b0:40:cc:
ea:cc:84:5c:34:ab:f3:87:af:91:89:a8:b0:72:81:
3d:d4:57:f7:00:fa:08:4d:51:0d:90:28:d8:63:77:
dd:4f:44:79:19:47:ed:f7:1c:65:05:31:5f:9c:59:
3a:88:e3:52:1c:ed:a0:83:94:37:3f:df:b8:29:52:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1E:01:7D:B8:04:A7:38:83:B2:92:37:1D:54:57:A2:92:BA:2D:20
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2ce9a789-9599-4c9d-a093-ead3033f60d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b7:e0:d5:cd:f0:e1:f8:f6:a2:e8:71:b0:ec:ff:ba:31:fe:13:
ab:98:87:b2:e6:91:bd:6d:08:96:a8:9d:54:a7:3a:17:4e:97:
88:36:92:33:bd:68:af:21:87:9a:21:74:e2:7b:66:f9:bc:42:
30:43:f1:27:08:33:bc:cf:3a:35:7c:4b:61:da:1b:ad:4c:8c:
9f:af:ed:97:3a:aa:1e:e4:3e:5c:45:44:d0:d5:df:ab:78:95:
f0:13:01:7a:33:0f:77:56:8c:b9:ef:f7:8c:ca:e2:01:47:9a:
e8:a2:c5:45:c6:a8:2c:23:42:2e:fe:25:cb:0b:22:2b:f2:2c:
75:fe:57:ba:08:d3:1f:9c:b4:76:69:68:71:ca:03:83:14:de:
b6:1b:dc:8a:fa:44:50:e7:35:c3:4e:23:c7:03:1f:1c:7b:a5:
af:be:7f:af:8a:63:ec:4f:45:c7:36:43:b7:2b:68:9b:10:7b:
a6:45:a9:2b:7a:bc:6a:ad:1e:65:40:7b:22:60:07:50:40:fa:
8a:a6:4d:89:e5:98:40:5a:ca:df:34:72:13:9c:de:79:60:d9:
c6:68:47:dd:61:36:95:a3:98:72:ce:09:98:8f:2f:47:19:f6:
f3:0b:c9:8c:97:a5:a2:41:fb:62:e4:4d:0d:e2:35:4a:91:fe:
dc:10:9a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:42:59 2026 by rpki-client