Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2d24b638-b951-4333-ac88-4886c7af230f.roa
File: 2d24b638-b951-4333-ac88-4886c7af230f.roa (raw, json)
Hash identifier: N7oQ2Q6hGUIfnSyNPJ+hyY/XgMsCryr7P/H7Kked2MY=
Subject key identifier: 33:00:42:6A:02:08:FE:91:ED:99:E3:55:5E:E4:C7:1E:B7:20:96:6A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4A06F579F973369ECF805BEEE1EFFE63BA3A8F8D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2d24b638-b951-4333-ac88-4886c7af230f.roa
Signing time: Fri 07 Aug 2026 05:50:52 +0000
ROA not before: Fri 07 Aug 2026 05:50:52 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.82.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:06:f5:79:f9:73:36:9e:cf:80:5b:ee:e1:ef:fe:63:ba:3a:8f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:52 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=40a6c64e2669a79b670fa91626bc5532b4661726d24f7f6b22b895c6815d9a52, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:0f:d3:91:d8:98:dc:26:f5:4a:bc:77:54:
a7:82:d4:b3:25:82:9e:78:3c:b1:35:9a:9c:0f:2c:
28:d4:d3:d7:81:02:11:6f:59:7b:2a:8c:f7:10:e5:
17:09:96:c1:54:5d:e2:68:dc:59:08:39:0f:77:de:
0a:17:fe:b3:61:b7:53:dd:c7:8d:f5:b1:04:05:ec:
dd:ee:c1:be:a4:96:0f:c9:c9:bb:fc:39:79:45:d9:
6c:d0:8c:eb:7c:4c:5f:92:b9:1c:92:55:5f:18:45:
95:47:49:06:fc:83:57:56:02:da:f6:2a:9c:25:e8:
8a:e1:0a:53:18:9c:b4:b5:6f:ec:56:fb:8c:03:19:
16:e5:3f:21:d9:48:87:b2:28:c6:70:c2:d8:19:7d:
ea:e3:35:4b:99:30:62:97:c4:1e:6b:bf:ee:95:f0:
f9:2b:09:7d:76:dd:fe:04:15:37:e9:b4:15:91:0f:
f4:ce:61:42:e0:7c:30:a1:bf:3d:60:f9:c5:09:4f:
37:fe:39:a8:c3:66:26:f4:2e:ae:90:57:e4:38:6b:
55:94:01:e3:0a:60:3b:3c:d2:1d:b1:ef:af:53:d4:
67:43:0e:63:d7:d4:68:53:e5:00:6e:58:ec:23:cc:
34:4a:38:29:20:c9:dc:29:0f:6c:08:a2:6e:49:95:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:00:42:6A:02:08:FE:91:ED:99:E3:55:5E:E4:C7:1E:B7:20:96:6A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2d24b638-b951-4333-ac88-4886c7af230f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:63:12:d0:8f:9b:2f:82:27:23:a4:c9:47:a3:87:8d:96:17:
a2:a1:36:5e:f1:89:0c:34:a7:30:ba:c7:8c:6b:47:cf:8f:b8:
37:84:5d:8d:6a:e2:8a:32:fd:9f:8d:c5:3b:ce:7f:04:5b:e0:
b8:83:75:8b:44:df:ea:fb:d9:7b:62:30:e7:d6:e3:57:12:97:
79:3a:0a:8a:db:f6:a1:bd:04:fe:c0:c2:25:3d:01:0b:13:17:
fb:1b:1f:73:14:52:ea:f6:cd:13:d1:d3:20:69:f5:91:8c:57:
41:ce:96:67:6c:8a:4e:59:b9:3b:f3:f7:eb:4d:38:8d:08:f6:
f2:72:39:1f:7b:a2:f3:8d:54:62:92:ee:b4:74:bf:a6:6f:18:
70:49:04:f7:52:dc:10:74:f4:59:8c:52:54:58:f7:4c:c0:ac:
70:2a:ef:68:e6:9f:fc:26:72:bd:cd:49:0d:29:02:7f:ff:4f:
50:5d:df:07:ed:21:a4:d4:62:4d:22:56:e8:88:f4:a9:5d:00:
bc:6a:d1:a5:1b:3a:5c:14:ac:8b:9f:99:f5:0f:ab:cc:7c:35:
31:9d:47:26:07:a9:0c:71:61:5d:4e:8f:47:52:cf:e6:3e:a1:
ff:31:02:9e:a5:14:3e:a7:95:22:11:77:4c:1e:f4:22:21:75:
83:67:ca:c7
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUSgb1eflzNp7PgFvu4e/+Y7o6j40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDcwNTUwNTJaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDQwYTZjNjRlMjY2OWE3OWI2NzBmYTkxNjI2YmM1NTMyYjQ2NjE3MjZkMjRm
N2Y2YjIyYjg5NWM2ODE1ZDlhNTIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKZPD9OR2JjcJvVKvHdUp4LUsyWCnng8sTWanA8sKNTT14ECEW9ZeyqM9xDl
FwmWwVRd4mjcWQg5D3feChf+s2G3U93HjfWxBAXs3e7BvqSWD8nJu/w5eUXZbNCM
63xMX5K5HJJVXxhFlUdJBvyDV1YC2vYqnCXoiuEKUxictLVv7Fb7jAMZFuU/IdlI
h7IoxnDC2Bl96uM1S5kwYpfEHmu/7pXw+SsJfXbd/gQVN+m0FZEP9M5hQuB8MKG/
PWD5xQlPN/45qMNmJvQurpBX5DhrVZQB4wpgOzzSHbHvr1PUZ0MOY9fUaFPlAG5Y
7CPMNEo4KSDJ3CkPbAiibkmVwzkCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQzAEJq
Agj+ke2Z41Ve5McetyCWajAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MmQyNGI2MzgtYjk1MS00MzMzLWFjODgtNDg4NmM3YWYyMzBmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNSMA0G
CSqGSIb3DQEBCwUAA4IBAQChYxLQj5svgicjpMlHo4eNlheioTZe8YkMNKcwuseM
a0fPj7g3hF2NauKKMv2fjcU7zn8EW+C4g3WLRN/q+9l7YjDn1uNXEpd5OgqK2/ah
vQT+wMIlPQELExf7Gx9zFFLq9s0T0dMgafWRjFdBzpZnbIpOWbk78/frTTiNCPby
cjkfe6LzjVRiku60dL+mbxhwSQT3UtwQdPRZjFJUWPdMwKxwKu9o5p/8JnK9zUkN
KQJ//09QXd8H7SGk1GJNIlboiPSpXQC8atGlGzpcFKyLn5n1D6vMfDUxnUcmB6kM
cWFdTo9HUs/mPqH/MQKepRQ+p5UiEXdMHvQiIXWDZ8rH
-----END CERTIFICATE-----
Generated at Mon Aug 31 14:50:04 2026 by rpki-client