Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/42efa1a8-f804-47c5-8a3d-6f3ea05e1a5b.roa
File: 42efa1a8-f804-47c5-8a3d-6f3ea05e1a5b.roa (raw, json)
Hash identifier: HF0FEzD8sOnkoMPG9wgL2YATOolLT968W9nwm3HpZB0=
Subject key identifier: 58:E1:DE:D0:0A:F8:DD:85:A8:0F:81:C9:69:7F:E2:21:EC:85:F0:2A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 73B266D7736E93149B95CEE14502822D7FC7E7F2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/42efa1a8-f804-47c5-8a3d-6f3ea05e1a5b.roa
Signing time: Fri 07 Aug 2026 06:00:10 +0000
ROA not before: Fri 07 Aug 2026 06:00:10 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.164.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b2:66:d7:73:6e:93:14:9b:95:ce:e1:45:02:82:2d:7f:c7:e7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 06:00:10 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=c960e2d2786e113ecb0bc55393bad43e8c506538267b05824bfba80defe4bf28, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:eb:64:dd:89:c8:ae:77:f7:89:f9:5a:21:
61:2d:9f:67:70:93:37:cb:f6:f8:7e:3f:73:5c:c8:
a5:6e:d3:f6:f9:21:7b:c0:12:0d:d9:05:4a:fc:71:
30:ee:2e:a4:fa:a6:36:63:e4:02:7e:15:9d:af:c0:
be:02:1a:6f:e5:53:e7:80:57:37:38:30:f8:f2:4f:
c2:26:43:c1:1b:09:fe:c5:bd:b3:4d:07:04:a1:96:
31:b3:1e:87:8c:f4:28:75:57:80:39:75:2b:3a:8a:
a7:79:44:69:ab:29:6a:82:81:3d:b8:cc:15:b8:ee:
72:b0:b8:a4:4f:cb:14:66:2b:ef:02:25:c6:8a:dd:
a7:2e:00:2c:54:22:43:a8:6c:7c:24:e5:62:bf:d0:
69:49:31:6e:cc:c6:a5:54:1e:4d:be:0c:05:2b:35:
7b:4b:91:22:10:41:06:0d:9a:1c:00:02:e1:40:c8:
c7:3f:89:f6:f5:f7:cb:71:79:f2:6c:e9:98:74:7b:
8b:b0:2e:75:10:b8:5b:ce:77:02:f9:5b:c4:49:d2:
5b:0d:d0:de:7a:d1:06:c7:c8:1a:06:17:c4:cf:94:
d6:11:06:91:2f:78:d9:cd:dd:a5:d1:32:65:62:e6:
d0:6c:b9:66:28:0f:a0:2f:e2:9f:9b:d2:b4:61:e9:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E1:DE:D0:0A:F8:DD:85:A8:0F:81:C9:69:7F:E2:21:EC:85:F0:2A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/42efa1a8-f804-47c5-8a3d-6f3ea05e1a5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.164.0.0/15
Signature Algorithm: sha256WithRSAEncryption
19:d0:31:e7:5f:bc:85:e6:e7:c6:6f:ce:9c:b9:96:39:df:b7:
07:37:3f:e0:f3:a0:d5:5f:44:da:62:6e:0b:1b:79:66:46:79:
aa:08:81:99:21:83:5c:9a:ab:ee:e8:e7:bf:51:89:d3:7b:2f:
d3:88:2d:23:d0:00:76:ff:3c:c2:7c:cb:f4:5b:19:74:e7:56:
35:44:4e:33:73:1e:2c:3b:7d:65:25:4f:e9:b6:38:a8:54:59:
9a:78:6e:9a:09:20:75:e5:c3:0f:ef:c6:02:9a:9e:11:37:02:
6d:6c:40:a4:b4:08:84:03:23:0f:21:ba:eb:48:d3:dc:80:df:
c0:8f:1e:40:5e:b2:b9:5f:ce:c5:fd:a0:c0:b6:1a:59:a2:83:
7f:d3:92:11:05:53:cd:55:09:8c:f5:64:8a:90:7f:25:5d:53:
c2:09:88:4a:3c:7a:33:ec:7f:42:37:7c:da:28:4d:69:9e:65:
4b:45:d7:f7:49:ac:ed:f7:75:55:d9:23:5d:64:fd:4d:15:3a:
10:9d:f7:23:0c:e7:e5:6a:05:4b:d7:f6:28:55:1c:fc:c5:eb:
42:20:c4:c1:7d:99:33:eb:c7:0e:b8:34:1f:f6:2a:ec:3a:18:
da:91:a2:1c:75:ba:3e:67:9e:d8:99:f7:32:c9:34:3d:22:a0:
4f:12:bb:bf
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUc7Jm13NukxSblc7hRQKCLX/H5/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDcwNjAwMTBaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGM5NjBlMmQyNzg2ZTExM2VjYjBiYzU1MzkzYmFkNDNlOGM1MDY1MzgyNjdi
MDU4MjRiZmJhODBkZWZlNGJmMjgxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM0l62Tdiciud/eJ+VohYS2fZ3CTN8v2+H4/c1zIpW7T9vkhe8ASDdkFSvxx
MO4upPqmNmPkAn4Vna/AvgIab+VT54BXNzgw+PJPwiZDwRsJ/sW9s00HBKGWMbMe
h4z0KHVXgDl1KzqKp3lEaaspaoKBPbjMFbjucrC4pE/LFGYr7wIlxordpy4ALFQi
Q6hsfCTlYr/QaUkxbszGpVQeTb4MBSs1e0uRIhBBBg2aHAAC4UDIxz+J9vX3y3F5
8mzpmHR7i7AudRC4W853AvlbxEnSWw3Q3nrRBsfIGgYXxM+U1hEGkS942c3dpdEy
ZWLm0Gy5ZigPoC/in5vStGHpmdsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRY4d7Q
CvjdhagPgclpf+Ih7IXwKjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NDJlZmExYTgtZjgwNC00N2M1LThhM2QtNmYzZWEwNWUxYTViLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATOkMA0G
CSqGSIb3DQEBCwUAA4IBAQAZ0DHnX7yF5ufGb86cuZY537cHNz/g86DVX0TaYm4L
G3lmRnmqCIGZIYNcmqvu6Oe/UYnTey/TiC0j0AB2/zzCfMv0Wxl051Y1RE4zcx4s
O31lJU/ptjioVFmaeG6aCSB15cMP78YCmp4RNwJtbECktAiEAyMPIbrrSNPcgN/A
jx5AXrK5X87F/aDAthpZooN/05IRBVPNVQmM9WSKkH8lXVPCCYhKPHoz7H9CN3za
KE1pnmVLRdf3Sazt93VV2SNdZP1NFToQnfcjDOflagVL1/YoVRz8xetCIMTBfZkz
68cOuDQf9irsOhjakaIcdbo+Z57YmfcyyTQ9IqBPEru/
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:42:59 2026 by rpki-client