Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/583454ef-63b9-4b9d-893e-5f89547b11d4.roa
File: 583454ef-63b9-4b9d-893e-5f89547b11d4.roa (raw, json)
Hash identifier: mKcYMG+Bz+cDUmLQKT1PWIJuFZXpg6bdgrkBeUOTQGo=
Subject key identifier: A8:04:47:E4:86:25:6E:8C:01:3E:0D:97:0F:93:4C:AB:EB:B1:7B:56
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 101D0606895D5C11378910A0A7EDE9F15BB4A096
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/583454ef-63b9-4b9d-893e-5f89547b11d4.roa
Signing time: Wed 29 Jul 2026 23:47:20 +0000
ROA not before: Wed 29 Jul 2026 23:47:20 +0000
ROA not after: Tue 27 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:1d:06:06:89:5d:5c:11:37:89:10:a0:a7:ed:e9:f1:5b:b4:a0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 29 23:47:20 2026 GMT
Not After : Oct 27 23:59:59 2026 GMT
Subject: serialNumber=de8af81b26ab5953597471bce48a27956bf83fcfbbc941f9da6c3cc073059715, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:da:d6:c5:90:9e:14:20:78:c0:fc:db:e5:
8e:dc:ed:ec:49:7a:ca:50:07:8c:f7:3f:94:d0:5f:
27:11:76:89:34:3f:90:5e:1f:b0:44:21:4d:84:ec:
10:53:30:0f:59:e0:15:7a:7a:e4:6a:ae:eb:99:0c:
4e:4c:bb:d0:6b:6e:cc:f6:be:89:d5:92:b8:c2:ca:
2f:93:63:e0:7a:bc:11:51:67:45:c8:9b:f8:96:37:
9f:43:cd:29:a4:8e:ff:ea:51:ae:e0:65:38:0a:a2:
ce:50:7f:7f:91:2e:e5:ff:ac:0f:d9:41:99:9a:c9:
52:a8:fd:fc:93:87:7f:7f:cb:4e:91:1c:84:67:10:
1f:35:0e:25:10:0e:c3:31:83:87:46:f2:d0:7e:17:
81:a6:ef:04:73:69:14:55:4c:13:cd:24:90:71:3d:
b7:55:e8:f8:09:34:9d:7f:5d:d6:ad:a9:cd:b8:4f:
f3:75:80:42:5b:14:ae:1f:11:aa:9b:ef:9c:09:24:
1e:bb:cb:0c:5a:5d:97:52:97:94:cd:30:06:52:9a:
cf:83:db:86:ac:0e:5c:12:85:6f:c2:58:17:68:6e:
6c:32:28:3a:fc:42:f1:35:0b:34:40:03:e2:0f:f0:
b0:02:2f:8d:54:46:72:8e:56:60:37:71:3a:5f:bb:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:04:47:E4:86:25:6E:8C:01:3E:0D:97:0F:93:4C:AB:EB:B1:7B:56
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/583454ef-63b9-4b9d-893e-5f89547b11d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4e:f3:c9:6b:81:20:73:c7:9a:dd:02:e4:ae:b6:b6:4e:34:a7:
49:3c:67:22:6f:76:7a:fe:05:ab:9a:4d:59:c3:ac:f5:e5:9b:
a1:8a:55:c1:28:2d:aa:5e:13:af:f7:80:30:a3:07:fe:13:3b:
f8:93:11:10:79:b6:74:23:80:83:e3:6e:98:18:da:73:50:a0:
39:0c:5a:24:19:3d:86:7c:6e:5d:76:ee:f5:39:5b:f6:34:3e:
7c:8b:e9:03:0f:fd:b1:62:72:55:9e:70:c3:9a:75:fe:bd:48:
29:37:82:1d:2d:b5:80:ef:a3:8c:03:c0:75:09:e7:e9:3f:68:
db:ae:a9:3d:11:22:5b:42:da:82:a2:e7:35:0e:1d:c0:50:3b:
62:d9:dd:74:d9:ca:e3:6a:34:a4:23:e5:c4:73:e1:46:97:d5:
32:e8:3f:c9:d0:16:9b:9c:e2:84:bb:61:5f:c0:65:2f:2c:69:
b7:dd:63:94:43:1a:54:3c:72:d0:73:62:bc:47:75:ce:b4:d9:
86:f7:2a:94:39:61:b9:89:6b:03:f9:13:07:3a:e1:07:74:97:
67:a9:d0:77:f4:b0:ba:04:af:94:00:af:66:f1:63:17:13:2d:
16:be:8f:d6:c3:e4:fe:e8:27:58:54:8c:3c:60:fe:5a:0a:61:
7c:26:01:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:32:27 2026 by rpki-client