Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/51429a37-e3fd-4b49-a184-1e07ed522f97.roa
File: 51429a37-e3fd-4b49-a184-1e07ed522f97.roa (raw, json)
Hash identifier: YiXBeBXtlt/KREqICXoTQeDDl27tq83B1hhS8661HhY=
Subject key identifier: A1:12:DD:60:31:9D:49:CD:D0:D4:3E:55:45:B4:36:62:F0:E3:B6:D6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5E80FBDF01734AA944A943270402EAA090383719
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/51429a37-e3fd-4b49-a184-1e07ed522f97.roa
Signing time: Fri 07 Aug 2026 05:00:08 +0000
ROA not before: Fri 07 Aug 2026 05:00:08 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.3.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:80:fb:df:01:73:4a:a9:44:a9:43:27:04:02:ea:a0:90:38:37:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:00:08 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=99c57a654e7b35cb83d8be0d4b61df6636c1fb4086656397751f9c1144731aec, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8a:ae:d1:74:41:79:e3:ca:9b:84:aa:7a:4f:
35:b5:e2:06:94:30:12:2b:1b:8e:73:2b:86:db:e2:
09:ff:13:88:b1:c1:b2:da:cd:2f:16:d9:ec:ca:aa:
a2:2c:88:61:01:b5:f3:4e:cf:b0:23:e7:95:19:25:
6c:41:7c:1d:2e:6e:07:dd:4d:96:05:c3:c0:b4:20:
90:dc:8c:dd:a2:3d:aa:33:62:52:10:8f:57:48:e3:
0a:08:a2:ca:2f:66:e9:28:7b:71:d0:a7:76:b2:28:
70:c1:2c:bd:2c:20:49:11:07:6e:8f:1a:98:90:23:
ba:ee:39:46:26:cd:17:d3:94:6e:f0:f0:1a:b8:da:
b0:1b:b3:60:dc:60:8e:47:29:d5:7d:72:00:57:10:
60:5b:c1:4b:4b:53:2f:81:b4:7e:37:54:09:4c:60:
ae:0c:88:44:8f:c3:89:dd:6c:d2:35:ba:88:29:ca:
2f:32:c9:5b:fd:4e:f6:6d:a7:87:f1:b1:8e:8d:b8:
c2:bb:b5:b6:c9:45:06:05:4e:28:74:79:71:bf:bc:
65:91:41:cb:4a:53:da:ae:3b:cb:f8:c6:f6:97:bb:
7f:cf:a0:aa:a3:ac:c6:11:b2:67:46:b9:78:bc:94:
8d:91:4b:12:96:96:11:c8:6f:90:d9:d2:59:a0:9f:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:12:DD:60:31:9D:49:CD:D0:D4:3E:55:45:B4:36:62:F0:E3:B6:D6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/51429a37-e3fd-4b49-a184-1e07ed522f97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:ca:98:64:cf:1c:9f:6b:1c:d8:19:89:dc:67:c9:62:90:af:
88:57:99:4a:0e:8f:69:3d:2f:04:3e:3e:b4:9d:a0:14:7e:ed:
98:c5:80:e5:2e:86:51:0e:46:2a:89:ed:06:42:2c:41:41:90:
c7:db:e4:be:40:cf:8e:78:17:df:94:11:f6:12:4e:69:e5:9c:
e1:f3:37:aa:d8:7c:4c:dd:7d:12:fa:02:a0:86:ee:7a:02:a9:
00:22:db:c9:09:cf:c1:ad:40:e5:af:b7:b6:fd:70:01:70:cf:
c6:23:86:60:66:5c:b9:bb:15:cd:f4:35:e5:7d:40:bf:c8:d5:
9a:15:bf:66:0c:81:c5:9d:49:e3:9c:23:67:49:3b:92:c0:2f:
53:a1:c2:ec:85:0c:1d:9d:31:34:f5:cb:3d:75:fb:e8:7b:67:
82:0b:db:8e:7c:55:66:8b:93:37:27:f8:5c:33:ba:cf:2d:b4:
6d:a7:82:1c:a1:7c:2d:97:8d:84:8b:b4:7a:c5:72:5e:8f:42:
2f:0c:33:4c:01:92:b9:6e:96:0b:f9:56:28:42:b1:24:f5:4c:
fd:83:ee:f8:0f:5a:f0:80:e5:e0:c6:09:62:df:70:56:59:45:
70:8d:a8:e0:83:26:9f:d5:4b:19:9b:d5:3f:dc:2f:44:46:0c:
80:1b:bd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:09 2026 by rpki-client