Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f757251-175b-4b37-afbc-329713068144.roa
File: 4f757251-175b-4b37-afbc-329713068144.roa (raw, json)
Hash identifier: 0dcOvyBiCiFm9gvR4M0D91/d2+xC9xvJ9TBdVrQDzO8=
Subject key identifier: 97:8C:C2:96:C3:C4:9E:5C:22:7C:EF:3F:F9:E7:5F:D1:3C:BF:C2:CA
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0F38277A53310B0A046BE3C9A2DAC44DC1DC7856
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f757251-175b-4b37-afbc-329713068144.roa
Signing time: Sat 08 Aug 2026 01:00:11 +0000
ROA not before: Sat 08 Aug 2026 01:00:11 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.200.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:38:27:7a:53:31:0b:0a:04:6b:e3:c9:a2:da:c4:4d:c1:dc:78:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 01:00:11 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=11b9d7ede5a8d037b240ded887e394a2076e8c4bf74227e6e71a18622b716751, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:a1:1c:3c:68:2e:02:fb:5d:0e:e9:f4:e8:
9a:7d:f6:83:2d:fc:3f:5f:6e:61:a8:f6:1b:68:d5:
27:58:3b:f4:d2:9e:14:f4:75:64:d3:07:0e:ef:5e:
bb:ac:8b:3c:17:dd:5d:96:9e:59:f7:2c:7d:24:17:
b9:8a:6f:b5:0b:54:c4:4b:11:72:e3:5b:8b:9d:6e:
b5:e1:7d:d6:60:82:95:16:a2:4a:73:ff:3f:77:41:
23:b9:b0:67:3b:40:b2:6b:41:9f:91:5b:6b:15:9d:
f0:55:69:67:49:ce:de:84:92:d4:85:73:dd:7d:be:
f8:f7:0d:15:d5:24:14:50:6f:49:b9:cf:4b:39:c5:
20:b9:23:e4:04:eb:0a:c3:9e:d5:47:d7:f3:e6:a0:
17:7f:6d:a0:f0:5f:00:70:9c:2e:08:2b:39:7b:eb:
a5:c4:8f:b5:64:ef:33:93:4f:f9:62:a6:04:40:9f:
b5:b3:c4:7a:d8:0d:3d:79:c0:1a:13:3a:d8:a6:f0:
76:49:e8:54:59:d3:e3:25:6a:05:16:5e:96:e4:10:
b2:00:14:08:47:90:cd:40:49:b4:54:3b:49:21:01:
f3:f1:bc:a3:03:6f:c2:bc:3c:f5:22:fc:4c:28:85:
58:88:b4:ff:f5:b2:2b:ad:f7:d7:de:55:b0:c6:61:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8C:C2:96:C3:C4:9E:5C:22:7C:EF:3F:F9:E7:5F:D1:3C:BF:C2:CA
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f757251-175b-4b37-afbc-329713068144.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.200.0.0/15
Signature Algorithm: sha256WithRSAEncryption
2b:8d:e9:f8:29:7a:9d:40:61:8f:99:4c:e1:2c:d3:46:35:c0:
e4:61:a7:8a:09:13:29:82:18:49:4b:af:68:79:a4:f1:c0:1f:
b4:d7:b1:cb:08:06:38:5d:74:4d:70:2c:aa:4a:0b:a6:6b:72:
88:f3:36:5c:93:7c:0b:44:cf:7c:e6:6a:c5:29:cd:78:b9:d3:
97:8b:5e:a0:04:22:40:ab:8b:68:9b:af:6e:31:84:77:3e:4d:
80:f9:d9:ed:d2:f3:a7:d6:a5:7a:1d:75:30:79:47:42:cc:5d:
d2:f1:27:63:c7:1d:e7:2f:87:96:af:b8:39:f6:42:1a:76:e0:
cc:37:2c:00:61:72:3e:df:50:3b:b6:48:fe:fd:53:68:30:25:
ae:8b:43:fb:e4:ff:b6:cb:63:ec:72:38:5f:d9:b7:79:d5:ca:
4f:22:c5:cf:0f:2d:5e:b0:e7:dc:d2:46:51:10:0d:1b:0f:62:
24:21:ec:b3:7d:53:6f:f0:1c:85:ca:97:a5:7d:bf:57:92:c2:
72:9c:a4:91:f3:a6:fd:fa:b2:9d:61:76:56:0f:22:92:f7:38:
e2:90:dd:d1:ac:c6:d3:7f:46:c5:70:cd:da:55:99:19:76:69:
6d:0a:aa:97:5e:06:fe:1b:b5:91:5c:74:30:a8:21:59:bf:84:
f6:cc:f3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:13 2026 by rpki-client