Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3b67bb62-9bcf-4daa-99b5-5374c3285177.roa
File: 3b67bb62-9bcf-4daa-99b5-5374c3285177.roa (raw, json)
Hash identifier: TdKPdJ1JNgNRhz1F4BFNfLjqY+/xqzS9wtxX9lhI6Hg=
Subject key identifier: 95:4C:B7:C4:89:F2:51:99:18:49:81:FF:2A:11:C7:89:80:97:10:1C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 667F47675A9C469131EC01FA7776DE679EE03F95
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3b67bb62-9bcf-4daa-99b5-5374c3285177.roa
Signing time: Fri 07 Aug 2026 06:00:22 +0000
ROA not before: Fri 07 Aug 2026 06:00:22 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.48.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:7f:47:67:5a:9c:46:91:31:ec:01:fa:77:76:de:67:9e:e0:3f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 06:00:22 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=4b7e1d0ac3a058ee188157d2bdf4ac501c03e5c801ea7fb99d4066e46641dc0e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:9b:0c:b1:f5:ee:35:ef:ac:6b:91:48:d5:
5c:4e:5b:a8:79:1c:28:fa:f8:2a:bb:23:63:80:3b:
a7:57:57:4e:c3:ce:13:52:09:36:74:a3:28:c0:fb:
65:76:44:b3:a0:a5:f0:5f:bc:f8:18:fe:7d:44:c8:
ce:19:b8:73:05:c6:84:83:64:90:ac:51:3f:93:eb:
c9:17:42:49:d2:55:98:cd:82:82:2d:83:c1:a7:b8:
17:23:09:42:b0:ca:7b:9e:9e:cc:8b:43:31:1d:e9:
f8:ef:a7:b0:11:f5:16:8c:d3:c4:45:9b:03:35:9d:
0b:a6:64:d3:80:1d:8b:2a:6d:3f:b1:0f:46:3d:69:
fc:2e:2c:ed:31:9c:03:a5:a8:bc:b4:68:de:7e:4e:
bf:13:18:fa:48:19:8f:29:24:e7:ca:55:10:a1:5c:
9e:27:37:89:04:fa:5d:48:bc:77:67:e6:78:a8:c6:
a6:c6:f2:fc:87:e5:e3:b5:2b:44:26:99:f8:a0:94:
30:94:2d:b9:1b:6b:23:02:ed:3d:04:67:35:5b:3a:
8e:55:86:06:3f:f4:bc:69:1a:e6:c8:86:bb:68:32:
e1:ec:e3:58:be:04:17:b5:f9:4d:01:90:54:73:eb:
42:e1:33:80:3f:aa:b4:e8:00:68:1c:ce:b8:46:ba:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4C:B7:C4:89:F2:51:99:18:49:81:FF:2A:11:C7:89:80:97:10:1C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3b67bb62-9bcf-4daa-99b5-5374c3285177.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.48.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1b:1c:76:0c:c5:4b:21:a2:dd:50:58:66:b8:0d:54:81:ee:d3:
89:76:21:68:8c:28:5c:4b:a4:44:b1:2e:45:85:4e:fa:ee:60:
86:65:b4:14:b9:dd:06:66:df:27:f6:25:04:65:03:d0:be:c1:
14:ed:76:07:7b:3e:5a:4d:59:5c:9f:c3:4d:f0:73:5b:94:87:
4e:75:c2:4f:a2:54:eb:7e:aa:e1:3e:d3:b4:98:6d:5e:b4:60:
79:8f:5f:26:88:69:d9:ae:9b:21:11:61:6b:27:e1:ba:c3:74:
7d:57:7a:80:b8:d1:09:9e:05:ab:37:60:ab:b4:da:6e:27:e7:
6e:ac:ef:8e:96:c9:40:22:aa:14:16:bc:39:e5:f5:9a:01:f2:
d5:b6:e3:d7:bc:1f:65:19:bc:69:91:e8:e6:d9:71:c5:91:06:
52:3a:dc:88:1c:22:e5:fa:b8:8a:a5:31:39:23:42:70:4e:c4:
51:e4:ff:af:a3:e0:63:bf:59:47:d8:f0:ee:11:56:c8:b9:fb:
e0:78:88:47:de:d8:e2:37:b5:fd:6f:97:8b:d3:3c:23:48:a3:
6e:40:01:c2:ce:3e:58:a8:ee:8d:be:62:37:5d:07:29:47:c7:
67:25:28:14:08:66:33:56:a7:38:7a:72:19:69:60:59:26:2a:
0a:94:96:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:04 2026 by rpki-client