Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/444db014-8d2a-4c59-af9c-399bacab4f3f.roa
File: 444db014-8d2a-4c59-af9c-399bacab4f3f.roa (raw, json)
Hash identifier: ZN6hPd/HE3vwzUURwPduLHWg0Dk8WbUB0t5QqH2d0dc=
Subject key identifier: 7E:D5:34:61:D4:0F:BF:96:23:91:4B:1D:92:85:E1:CA:93:18:98:6D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 74A99D34C0EE4043A434B7BF445E27E132B19ADF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/444db014-8d2a-4c59-af9c-399bacab4f3f.roa
Signing time: Fri 07 Aug 2026 06:00:20 +0000
ROA not before: Fri 07 Aug 2026 06:00:20 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.156.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a9:9d:34:c0:ee:40:43:a4:34:b7:bf:44:5e:27:e1:32:b1:9a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 06:00:20 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=6fa0711b0fda75de6d3087e6d0ed61c92f6f35d93c38bec71016ffd4ee5f8c89, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:f5:b6:f0:42:43:59:82:46:93:3a:cb:79:
f5:23:c3:81:58:88:d0:cf:fc:08:72:1a:e7:3c:6b:
69:7e:ac:18:53:8f:59:3c:69:54:46:49:ad:9c:25:
5c:4c:8a:43:36:4b:3c:74:e9:29:1e:79:07:be:b0:
86:02:fc:fa:c2:8f:c1:58:f6:84:a9:bd:ca:6a:9a:
25:6e:7b:8b:82:f9:27:80:d9:66:84:5b:2f:06:1d:
4a:bf:dc:f3:cc:26:5c:20:c9:15:be:3e:aa:ed:21:
29:ca:78:bb:91:72:be:13:4a:a5:95:d4:b0:e9:bc:
ca:c5:b4:fd:3b:a6:c7:b9:97:3e:d2:89:44:1a:bc:
58:b8:b1:d1:8f:42:9b:66:3e:d6:08:09:87:eb:b9:
a2:39:d0:1a:39:f3:ad:d9:0d:63:c5:cd:2e:6d:dc:
f2:53:6e:d0:11:f5:90:05:62:ce:88:f5:0e:bb:c5:
2e:96:b6:3c:ce:89:6a:64:14:12:ec:57:ca:6c:eb:
23:c6:cc:b6:91:0d:08:50:79:d9:3c:8b:88:ff:96:
84:41:66:d1:26:74:4a:81:71:53:20:b7:fc:5b:d2:
bf:a9:45:d2:5c:ca:d0:56:ee:7c:03:26:6e:3a:b4:
92:9e:c1:f3:5f:f2:20:cf:c5:9f:eb:21:04:55:ef:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D5:34:61:D4:0F:BF:96:23:91:4B:1D:92:85:E1:CA:93:18:98:6D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/444db014-8d2a-4c59-af9c-399bacab4f3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.156.0.0/15
Signature Algorithm: sha256WithRSAEncryption
ae:f2:de:33:8b:21:62:ba:52:17:35:aa:c5:8f:df:0c:69:7a:
63:3f:17:1c:e4:b7:e0:d6:f6:d2:0e:ef:c9:72:c1:cf:8a:65:
6b:f3:9d:bc:e8:6c:0a:a2:f8:84:db:ab:79:6a:53:bf:d0:33:
7e:a6:87:f1:0a:ec:17:ae:f1:65:bf:38:62:9c:d4:90:09:9d:
b6:ba:cb:ca:f0:a0:6c:94:12:80:19:73:d1:fc:1c:75:27:2e:
fd:6e:f0:c0:1e:09:f7:87:b4:0a:16:84:c1:e8:38:d4:53:d3:
1e:df:b6:d5:b6:f5:ee:cc:88:25:12:e4:81:c3:04:7d:43:47:
9e:61:ca:1f:8a:20:6e:3e:21:a1:40:00:71:a0:c3:11:a0:27:
47:22:47:09:fe:b2:a0:c7:29:55:3f:59:87:bc:c9:4b:e5:58:
1e:41:e1:00:dc:9a:7c:e2:4d:a0:ce:a0:56:e8:21:ea:f9:68:
26:99:97:c3:dc:87:3a:ff:db:72:1f:ae:8e:b1:eb:16:05:7f:
65:54:20:fa:6c:cd:46:da:1c:c3:d4:ad:1f:d0:57:78:ce:4c:
b4:b0:37:fe:fd:d3:30:00:6b:c8:31:b1:2e:a1:fd:67:6f:2f:
b1:d4:04:f9:cc:e3:2e:83:62:11:35:d5:b0:61:1f:dc:48:f3:
bf:9c:c9:07
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUdKmdNMDuQEOkNLe/RF4n4TKxmt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDcwNjAwMjBaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDZmYTA3MTFiMGZkYTc1ZGU2ZDMwODdlNmQwZWQ2MWM5MmY2ZjM1ZDkzYzM4
YmVjNzEwMTZmZmQ0ZWU1ZjhjODkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKxJ9bbwQkNZgkaTOst59SPDgViI0M/8CHIa5zxraX6sGFOPWTxpVEZJrZwl
XEyKQzZLPHTpKR55B76whgL8+sKPwVj2hKm9ymqaJW57i4L5J4DZZoRbLwYdSr/c
88wmXCDJFb4+qu0hKcp4u5FyvhNKpZXUsOm8ysW0/Tumx7mXPtKJRBq8WLix0Y9C
m2Y+1ggJh+u5ojnQGjnzrdkNY8XNLm3c8lNu0BH1kAVizoj1DrvFLpa2PM6JamQU
EuxXymzrI8bMtpENCFB52TyLiP+WhEFm0SZ0SoFxUyC3/FvSv6lF0lzK0FbufAMm
bjq0kp7B81/yIM/Fn+shBFXvvQ0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBR+1TRh
1A+/liORSx2SheHKkxiYbTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NDQ0ZGIwMTQtOGQyYS00YzU5LWFmOWMtMzk5YmFjYWI0ZjNmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATOcMA0G
CSqGSIb3DQEBCwUAA4IBAQCu8t4ziyFiulIXNarFj98MaXpjPxcc5Lfg1vbSDu/J
csHPimVr85286GwKoviE26t5alO/0DN+pofxCuwXrvFlvzhinNSQCZ22usvK8KBs
lBKAGXPR/Bx1Jy79bvDAHgn3h7QKFoTB6DjUU9Me37bVtvXuzIglEuSBwwR9Q0ee
YcofiiBuPiGhQABxoMMRoCdHIkcJ/rKgxylVP1mHvMlL5VgeQeEA3Jp84k2gzqBW
6CHq+WgmmZfD3Ic6/9tyH66OsesWBX9lVCD6bM1G2hzD1K0f0Fd4zky0sDf+/dMw
AGvIMbEuof1nby+x1AT5zOMug2IRNdWwYR/cSPO/nMkH
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:44:15 2026 by rpki-client