Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49b2b5d5-46a7-42a3-9900-bcb7e3edffdb.roa
File: 49b2b5d5-46a7-42a3-9900-bcb7e3edffdb.roa (raw, json)
Hash identifier: 2vGvbaTGvHZa5XCBjdxE2SrPpHLIqHkVBBZHFjjtHaY=
Subject key identifier: 26:FB:54:B7:44:1B:6F:24:21:5D:12:B9:8F:44:D9:6A:5A:B7:99:12
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6F56D50BAEACE0DCC2CC2968D30D7317BC425B4D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49b2b5d5-46a7-42a3-9900-bcb7e3edffdb.roa
Signing time: Mon 26 Oct 2026 05:50:07 +0000
ROA not before: Mon 26 Oct 2026 05:50:07 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.192.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:56:d5:0b:ae:ac:e0:dc:c2:cc:29:68:d3:0d:73:17:bc:42:5b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:07 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=e946958f8ed12060ce2a63b879cf1f592cf9e278649f9e9d45f6edbde79cdb2f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:6f:9d:d0:81:53:15:88:a3:14:cc:4d:48:
66:6d:53:f8:b8:a1:55:b1:89:e8:d0:0a:04:e4:be:
5c:f1:88:80:86:2d:43:38:40:4e:e6:e7:a1:df:eb:
97:16:2b:7f:74:7c:78:35:f7:1d:aa:5c:d1:ca:fc:
9b:60:52:2f:de:4a:d5:cf:e1:d8:a0:a8:5b:06:a5:
71:aa:b0:94:e5:6d:04:38:ff:90:d8:fa:59:90:0b:
7a:a0:be:57:a8:fe:92:df:af:a8:d7:44:64:08:74:
6f:36:4b:4d:d9:a0:69:e3:d9:c2:13:df:e5:a5:f3:
12:ba:1f:5e:2a:65:44:04:ff:b7:3b:8b:86:95:d6:
9d:4f:ac:48:0c:25:9f:ab:e0:ac:d9:a1:0e:cf:f6:
3d:2d:af:08:de:a3:96:39:98:cb:77:77:2b:6b:d7:
69:48:3f:08:ae:bc:14:61:40:37:74:a7:ad:5e:bf:
ee:bb:2f:9c:bd:69:97:53:8d:7d:41:41:ea:d0:b0:
37:24:11:70:f6:1f:8b:2b:1f:96:be:58:34:ef:36:
bb:ea:50:0b:69:ef:f1:e3:eb:7c:77:b3:fd:c4:2f:
a7:5c:75:00:cc:71:e7:41:25:cd:c1:14:45:80:ca:
85:67:d3:c1:0f:c1:a1:ea:a7:cb:55:2e:d0:34:02:
db:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FB:54:B7:44:1B:6F:24:21:5D:12:B9:8F:44:D9:6A:5A:B7:99:12
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49b2b5d5-46a7-42a3-9900-bcb7e3edffdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.192.0.0/15
Signature Algorithm: sha256WithRSAEncryption
92:9f:0a:db:21:1f:f8:0b:f8:75:ea:e2:a3:5b:f4:b9:eb:82:
52:d4:5c:a9:e8:5f:9d:c6:27:d7:38:b1:57:0e:e3:1f:4d:57:
ed:eb:4c:5b:b2:a6:6d:f0:89:83:c8:96:a4:45:82:49:7f:25:
5b:11:b9:1e:79:5a:6f:cd:14:14:65:3a:3b:07:85:07:7b:62:
e5:cb:b0:20:1d:84:01:d9:a9:2a:b7:a8:f2:83:3b:89:b9:d9:
74:4d:d0:f0:85:1d:5d:d8:ef:7b:77:f8:cf:19:07:37:e4:44:
23:62:0d:18:71:f2:78:b8:d7:bf:da:3c:1e:6c:7c:c1:d8:5a:
f9:ad:af:c1:d1:8e:2d:bc:c1:8e:0a:c4:94:8b:13:ab:1e:9b:
cc:10:a3:55:de:05:f9:41:08:11:cf:cd:fc:0f:63:2d:18:95:
dd:6f:d8:71:78:32:81:5a:05:e0:25:2f:33:90:4b:9f:e1:6f:
0e:24:d6:3b:b6:42:28:a4:ee:9c:4b:b6:6a:69:7e:5f:c6:9e:
80:08:ba:9d:23:1d:fa:12:0b:f7:b2:53:16:0a:76:b3:1d:8d:
be:c5:bc:ab:7a:c0:bd:3f:4f:3e:86:3b:0d:9f:38:e4:22:40:
9c:0a:88:3a:0d:31:a3:6b:53:da:90:24:b7:e1:0b:c6:60:67:
f7:10:bb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 15:35:57 2026 by rpki-client