Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/397b5a86-52b0-4a8c-87de-e6da77812b46.roa
File: 397b5a86-52b0-4a8c-87de-e6da77812b46.roa (raw, json)
Hash identifier: EvY9dreBn3zn53mA6eDe9rQjVcUk0ZkHX39yjZS6xVw=
Subject key identifier: CC:61:F0:2A:BF:75:40:CE:F3:E6:FB:47:DA:91:F8:84:E3:30:6A:72
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 62C2AD3D20FF6955A1FB663B58248E72764E5DFB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/397b5a86-52b0-4a8c-87de-e6da77812b46.roa
Signing time: Fri 07 Aug 2026 05:50:30 +0000
ROA not before: Fri 07 Aug 2026 05:50:30 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.248.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c2:ad:3d:20:ff:69:55:a1:fb:66:3b:58:24:8e:72:76:4e:5d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:30 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=899a886f86b5aa589d2d3513c9a1dbdd56aa2a04590eac8c78e6d3864178d66e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a4:95:36:d5:f0:fb:e7:14:96:0b:b9:f6:4f:
41:51:63:f1:d2:f5:71:57:ad:fe:ed:30:1a:0f:1d:
c2:41:3f:86:cb:6a:71:8d:a6:ab:10:29:75:1b:d9:
13:a9:42:18:cd:6d:8b:e4:15:17:9f:b4:65:d2:46:
fd:48:af:13:35:39:3f:4b:6b:b4:c6:a0:6a:f6:f5:
80:a4:35:65:27:bd:fc:b6:2d:7c:8d:11:98:4f:f4:
d4:07:25:be:8d:7a:b9:ac:de:3c:d8:fc:58:ee:37:
47:d8:29:bf:45:69:8e:0a:03:47:38:18:85:4d:80:
4f:3c:a2:83:86:f0:df:b7:ec:7d:6a:ae:f1:c6:84:
52:94:f6:a6:dd:4a:5b:6c:3f:5d:9a:b8:39:60:9b:
52:d9:59:b9:91:cb:8c:24:0a:2b:6c:1c:a0:35:e4:
12:8e:20:2f:bd:21:23:72:e9:94:f5:cd:be:dc:4a:
d6:73:61:86:11:18:c9:0e:c9:73:d9:7d:75:8e:40:
5f:4e:da:75:d3:90:d5:80:19:ba:65:87:4f:2e:63:
01:50:ca:a1:19:1d:47:29:79:0f:b8:49:90:c4:21:
96:06:d6:31:5d:d1:e9:38:d6:69:68:31:f0:eb:f0:
d5:4a:ef:db:a9:94:54:aa:df:a9:e4:e2:80:ad:d5:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:61:F0:2A:BF:75:40:CE:F3:E6:FB:47:DA:91:F8:84:E3:30:6A:72
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/397b5a86-52b0-4a8c-87de-e6da77812b46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.248.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3d:2b:a5:ee:00:30:9e:d8:34:84:6e:13:7b:74:30:e4:6a:d2:
a8:3a:f4:98:e1:76:bc:bc:e9:52:b4:0c:af:cf:c5:9c:73:50:
a6:82:41:fe:06:81:0a:e0:ce:81:3a:77:8d:73:fb:aa:d1:9f:
21:02:95:0f:a1:65:c7:c9:08:ab:4a:e8:15:e0:8e:63:49:77:
26:ae:40:bb:60:2b:e3:11:f0:82:b9:63:23:cd:fd:a5:16:10:
44:3f:dc:f6:1f:5a:07:f9:c5:c8:96:30:61:f2:29:bc:b6:cd:
6f:3d:dc:02:66:ed:f8:06:87:77:82:a1:0a:3e:e0:1f:b2:5a:
fd:e9:ff:79:8a:58:74:11:40:0b:0d:28:59:08:dc:77:64:99:
90:3f:88:20:c7:96:f0:0e:48:e8:30:33:10:bc:14:97:d4:e8:
fe:32:ef:82:94:06:4e:25:e5:e0:0d:f2:bf:d6:58:a3:b4:22:
54:04:56:20:1e:37:2f:96:68:c1:ae:d2:b0:a1:6e:cd:4b:ab:
17:21:5c:75:95:fe:3c:66:5c:b6:4f:e6:f4:02:0a:4c:04:8d:
3a:35:3c:af:94:8c:14:44:72:d1:14:62:3a:d7:06:70:6d:d1:
24:e0:2f:a1:35:64:66:48:14:89:ee:fa:da:2c:97:43:47:fa:
37:d2:ff:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:08 2026 by rpki-client