Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/60c12693-1526-46ae-aa45-d5276a0c0f79.roa
File: 60c12693-1526-46ae-aa45-d5276a0c0f79.roa (raw, json)
Hash identifier: Rmry8JhRT4SONWU5zXcUP3Stpfiiz+u938y6TmUJZKc=
Subject key identifier: 7E:57:7E:A8:F3:B4:68:CD:3B:44:51:37:57:7C:5D:FB:B4:B0:E2:E6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 69CB98CB3D3812C5BC73C8836AE0986748BFF98C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/60c12693-1526-46ae-aa45-d5276a0c0f79.roa
Signing time: Sun 04 Oct 2026 00:40:07 +0000
ROA not before: Sun 04 Oct 2026 00:40:07 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.86.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:cb:98:cb:3d:38:12:c5:bc:73:c8:83:6a:e0:98:67:48:bf:f9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:07 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=60c5d73776409fee1674840eab6fbc37b7e6b1adea29ce4dfffc2c6965613ac1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:cb:ed:d0:de:52:22:96:a3:cb:e0:92:1c:
0a:2c:76:2a:57:64:d7:35:78:4b:d7:2b:0e:80:46:
c4:eb:91:51:42:1a:62:d1:56:14:2e:c8:34:53:2d:
96:bd:47:b9:48:c9:16:98:ac:a0:07:60:d9:49:c3:
0c:d4:0f:2c:35:92:19:c8:be:87:0f:d8:56:56:27:
53:c0:db:99:6d:84:2f:05:68:46:3e:b8:d3:b4:02:
d0:71:9b:78:60:cb:79:07:d4:df:00:b9:4b:f4:f8:
04:2d:9c:8a:87:0f:06:b9:ee:bd:be:ac:a3:5f:45:
7f:09:1b:a0:c4:83:2b:bd:9f:7e:17:1c:e9:40:f3:
b8:e6:c4:6b:d7:f3:a3:4b:dc:f9:6e:4b:5f:a3:10:
e9:b6:62:41:fa:ba:79:de:c6:1f:20:44:69:e9:45:
3c:58:95:4a:f6:09:86:42:1e:c1:bb:57:9f:b3:9c:
2d:ff:6f:c9:96:5c:20:4e:ac:fc:b3:be:90:92:7d:
ee:28:cd:39:8f:a9:8a:b6:d0:8e:2f:1a:1f:f5:b1:
66:47:b0:46:19:e1:7e:f5:94:58:4f:55:64:23:f2:
ad:b3:b7:d4:6b:91:c7:8a:72:b1:c7:bc:2c:cb:86:
02:06:e1:61:9d:44:b1:bd:99:3e:7a:d3:d1:f9:23:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:57:7E:A8:F3:B4:68:CD:3B:44:51:37:57:7C:5D:FB:B4:B0:E2:E6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/60c12693-1526-46ae-aa45-d5276a0c0f79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.86.0.0/15
Signature Algorithm: sha256WithRSAEncryption
49:75:5b:05:a0:06:81:89:66:66:f5:c6:b1:ca:17:e8:7b:4b:
5d:52:71:30:6d:73:5c:b7:b5:2d:02:2e:16:7b:79:53:a6:c3:
0d:23:88:5e:6d:24:33:4c:1f:60:e6:79:50:48:99:24:19:bb:
7c:ec:a6:3c:86:f4:59:6f:fd:f0:ec:db:16:c7:18:ac:cf:41:
0a:fc:75:f3:9e:dd:0b:ff:5a:70:d5:dd:a2:f5:2b:3d:24:4c:
3e:d2:ef:43:77:f8:9b:1f:83:3b:06:f1:ed:6c:69:70:a9:d0:
70:51:3a:5f:54:01:44:3b:9a:66:91:8b:51:d2:e1:53:ed:67:
80:24:8e:c0:53:3d:54:3d:d5:8d:f4:ce:2b:b5:d9:14:2f:de:
1b:41:91:aa:36:e9:f5:7d:c0:05:04:2d:54:6e:32:15:8e:b2:
d2:44:69:81:79:b9:0c:ca:57:e1:c9:65:2e:43:2d:14:56:f8:
37:ae:12:ca:3b:91:f8:ec:da:0d:a5:e2:62:0f:88:77:bf:df:
b2:ec:50:0a:65:7d:c2:2a:f1:54:ff:25:af:c2:22:c2:72:93:
40:48:8a:2e:07:d1:85:6c:13:90:57:19:d1:8b:4f:c8:19:67:
a7:b1:13:98:65:3c:97:e5:0a:c9:16:b0:19:db:f3:ec:29:48:
2e:9c:d6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:34:46 2026 by rpki-client