Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/54f9687d-a273-4060-846b-ce640aca7c79.roa
File: 54f9687d-a273-4060-846b-ce640aca7c79.roa (raw, json)
Hash identifier: HNZZZ1ou8lYYIuQ/QMk/EpUY/xBgAR0U7RDZqh38UKA=
Subject key identifier: D5:BF:A4:76:A2:09:37:36:F2:3A:AD:06:1C:CE:46:93:BA:0E:CE:86
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6430CBA1812E18E78D7267FA245A284F883976B0
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/54f9687d-a273-4060-846b-ce640aca7c79.roa
Signing time: Sun 04 Oct 2026 00:40:10 +0000
ROA not before: Sun 04 Oct 2026 00:40:10 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.44.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:30:cb:a1:81:2e:18:e7:8d:72:67:fa:24:5a:28:4f:88:39:76:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:10 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=48b0ef86711e411236bd004fbf44c4934eb1afd449e5db1acd38ada53b18053a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:b6:bd:72:af:2e:e8:01:25:1e:1f:5d:b1:
fd:b4:df:42:68:c9:5e:05:3e:03:89:f2:27:99:77:
da:54:ad:99:a8:30:79:e8:5f:1c:04:0e:cd:f3:d1:
46:3d:6b:fe:fa:80:85:b1:1d:a2:c5:89:b2:74:7b:
68:a8:b5:e1:f2:95:b0:f7:98:bd:c0:22:05:54:08:
d4:9a:ad:7d:15:71:2f:7a:eb:40:b6:66:86:6b:67:
6c:2f:b2:cf:5c:d0:80:57:fa:e3:a2:8b:55:50:ac:
d2:59:0d:4a:1c:b3:4b:fd:28:58:8a:a1:fe:09:95:
1c:51:9e:eb:a4:0f:35:24:21:d7:cc:d5:c0:fa:b0:
cb:76:ae:ad:6c:a3:df:d3:ab:dc:41:15:9a:db:36:
33:7c:82:9c:34:80:1b:77:3c:ff:69:9a:c4:9c:bb:
9f:9a:5a:cb:74:01:0e:e3:1a:2a:e9:f5:c0:ff:66:
db:74:b2:b7:26:25:9b:55:44:cc:4c:ad:0a:a9:aa:
77:3c:90:4b:1c:23:a1:5b:0a:9b:fa:e7:2c:3e:dd:
0e:f1:e9:7d:42:f7:b9:72:05:ce:a4:37:0b:a3:62:
52:70:04:57:7a:90:d5:05:e5:23:2d:0a:6e:19:5d:
0c:50:1a:89:72:95:3a:6c:c2:f3:4d:82:68:de:02:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BF:A4:76:A2:09:37:36:F2:3A:AD:06:1C:CE:46:93:BA:0E:CE:86
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/54f9687d-a273-4060-846b-ce640aca7c79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.44.0.0/14
Signature Algorithm: sha256WithRSAEncryption
94:c0:d0:f7:30:05:ca:37:85:9a:79:be:b6:82:f9:9d:94:bb:
a6:0d:16:c9:22:52:91:a2:86:b9:5f:05:8e:3e:33:a8:21:cb:
12:79:d4:95:9b:3c:29:41:41:64:3b:9d:47:74:4a:ab:8b:c7:
5e:cf:be:73:aa:76:49:37:5a:10:3d:86:0f:f2:e9:8c:16:74:
ea:49:0f:d7:19:74:73:67:bf:70:f5:5e:13:4f:56:ce:d4:6b:
39:ee:77:bd:60:8d:e8:b6:ec:b1:f0:69:8f:72:a6:f7:71:e6:
5c:44:33:f1:3a:46:fd:d3:94:f2:a5:52:b0:1b:96:43:c5:35:
5e:44:b6:22:50:67:fd:e6:b0:a4:55:7b:92:8e:19:5b:46:1a:
c2:f7:ca:7a:53:17:31:3b:07:c0:46:a3:d5:af:29:5b:43:8d:
99:a3:f3:80:6f:76:92:11:ee:81:16:cf:93:1d:37:8a:d8:ce:
05:6a:bb:02:10:89:d2:01:4c:70:8f:22:a1:61:a2:53:0e:0b:
e5:b3:06:a8:74:56:62:dd:b0:7e:82:74:de:07:8f:89:51:72:
b4:99:8b:e4:ca:71:21:9a:7b:4a:58:99:fc:e6:6b:79:d5:19:
de:0e:b0:70:98:80:85:4a:f9:d6:15:1e:2b:0c:05:9c:a4:15:
0f:93:c8:62
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUZDDLoYEuGOeNcmf6JFooT4g5drAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMDQwMDQwMTBaFw0yNzAxMDIyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ4YjBlZjg2NzExZTQxMTIzNmJkMDA0ZmJmNDRjNDkzNGViMWFmZDQ0OWU1
ZGIxYWNkMzhhZGE1M2IxODA1M2ExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALa+tr1yry7oASUeH12x/bTfQmjJXgU+A4nyJ5l32lStmagweehfHAQOzfPR
Rj1r/vqAhbEdosWJsnR7aKi14fKVsPeYvcAiBVQI1JqtfRVxL3rrQLZmhmtnbC+y
z1zQgFf646KLVVCs0lkNShyzS/0oWIqh/gmVHFGe66QPNSQh18zVwPqwy3aurWyj
39Or3EEVmts2M3yCnDSAG3c8/2maxJy7n5pay3QBDuMaKun1wP9m23SytyYlm1VE
zEytCqmqdzyQSxwjoVsKm/rnLD7dDvHpfUL3uXIFzqQ3C6NiUnAEV3qQ1QXlIy0K
bhldDFAaiXKVOmzC802CaN4C+1MCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTVv6R2
ogk3NvI6rQYczkaTug7OhjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NTRmOTY4N2QtYTI3My00MDYwLTg0NmItY2U2NDBhY2E3Yzc5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAjMsMA0G
CSqGSIb3DQEBCwUAA4IBAQCUwND3MAXKN4Waeb62gvmdlLumDRbJIlKRooa5XwWO
PjOoIcsSedSVmzwpQUFkO51HdEqri8dez75zqnZJN1oQPYYP8umMFnTqSQ/XGXRz
Z79w9V4TT1bO1Gs57ne9YI3otuyx8GmPcqb3ceZcRDPxOkb905TypVKwG5ZDxTVe
RLYiUGf95rCkVXuSjhlbRhrC98p6UxcxOwfARqPVrylbQ42Zo/OAb3aSEe6BFs+T
HTeK2M4FarsCEInSAUxwjyKhYaJTDgvlswaodFZi3bB+gnTeB4+JUXK0mYvkynEh
mntKWJn85mt51RneDrBwmICFSvnWFR4rDAWcpBUPk8hi
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:34:45 2026 by rpki-client