Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49b2b5d5-46a7-42a3-9900-bcb7e3edffdb.roa
File: 49b2b5d5-46a7-42a3-9900-bcb7e3edffdb.roa (raw, json)
Hash identifier: RBVd6JOcdRw4OqCCUqVbQ+n6H2gkkRAEMdEDVCVokoU=
Subject key identifier: 85:B4:5D:E3:0E:69:FD:8E:B9:2C:C2:6B:04:31:9B:A4:9C:0F:4A:22
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 03FBD37B4DB22418C8A2823AA97BDDD0DC749FC9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49b2b5d5-46a7-42a3-9900-bcb7e3edffdb.roa
Signing time: Fri 07 Aug 2026 05:50:35 +0000
ROA not before: Fri 07 Aug 2026 05:50:35 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.192.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:fb:d3:7b:4d:b2:24:18:c8:a2:82:3a:a9:7b:dd:d0:dc:74:9f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:35 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=0c2500aebf3c642f117bc28af2dd5304667919eb136d9d367d1284b53d07d7e4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6c:27:84:ab:57:9f:69:82:d0:83:80:6a:15:
8b:28:49:38:65:ea:37:49:3a:7a:fe:95:e8:09:da:
a4:4b:1d:2c:47:4f:7b:c6:be:f6:69:b3:ad:69:78:
33:55:7d:d2:e1:7f:de:5d:0a:5c:92:2e:0a:45:13:
ba:f8:09:f5:91:ec:ac:11:50:7f:19:8a:08:57:fe:
5b:9f:13:5a:c0:7e:38:8c:28:dc:f7:0d:30:30:83:
17:dc:f1:e9:4b:c1:3b:df:1f:d9:ac:de:2d:53:f6:
19:13:ce:47:8e:f0:41:66:52:b9:a0:07:90:da:bd:
12:15:3b:ac:6f:86:fd:c9:60:4b:7b:ff:00:f4:c4:
ae:26:99:9f:9b:c4:5f:05:99:4b:a8:da:79:f4:73:
53:f4:78:8b:ca:c3:3e:b8:35:7a:7c:61:c4:35:21:
17:8d:8c:ed:90:d6:1d:a5:5f:58:67:e8:f4:2f:24:
e7:8d:1f:c9:22:69:bb:a6:fd:7d:fa:2c:c4:da:5c:
8d:33:d9:58:6e:06:2b:c6:aa:1c:01:6d:5e:5d:22:
48:94:67:96:04:3e:0b:2a:f3:43:be:27:74:03:10:
99:48:05:d2:a3:1e:e7:6a:c2:e1:cf:5d:78:c3:8a:
a1:f6:4a:9a:fc:c7:a9:cb:1c:78:bf:b6:c0:99:6b:
5a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B4:5D:E3:0E:69:FD:8E:B9:2C:C2:6B:04:31:9B:A4:9C:0F:4A:22
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49b2b5d5-46a7-42a3-9900-bcb7e3edffdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.192.0.0/15
Signature Algorithm: sha256WithRSAEncryption
bb:2c:2d:4b:df:c4:c5:eb:e0:ac:51:86:9d:de:0e:e8:ff:c2:
98:9c:c0:de:54:7d:77:8f:b7:16:51:74:2c:fe:96:de:d9:96:
a5:19:e7:54:aa:1a:29:66:ee:e9:be:74:dd:02:35:5f:53:9d:
fb:09:33:42:18:f7:d0:86:cd:39:69:56:15:f2:3a:e8:5c:d2:
44:b7:ed:97:d5:90:bb:23:fb:ca:61:30:86:87:b4:42:5d:d9:
b5:91:2d:cd:c9:b3:b2:d0:98:7d:8c:c9:43:8b:4d:11:7b:f8:
bc:62:70:e8:e4:d3:95:65:86:e2:85:e1:94:ef:e4:46:33:63:
f9:87:de:c3:ac:84:b3:c3:fa:55:a0:65:b7:c7:80:15:cd:4f:
26:34:e6:c2:32:e6:36:1a:59:42:08:29:d9:8a:6e:bc:55:b8:
4c:11:02:36:4b:32:12:11:e7:8b:4a:cf:4d:f7:38:9d:ce:fc:
53:0a:ba:57:ee:c6:47:c9:6b:79:87:ac:fa:e9:3f:28:3a:25:
94:2b:d5:5d:3c:1a:32:df:37:2e:10:6f:32:6f:ec:7e:3a:8c:
55:f0:d3:32:97:ef:5c:e1:0d:16:1a:11:3f:ce:a9:f9:b9:da:
20:47:4d:11:18:3a:4e:8d:bd:19:0a:40:a1:90:aa:27:1e:6d:
7d:d3:11:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:23:07 2026 by rpki-client