Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/60c89335-41cc-407d-8ffe-34cda7e66bb7.roa
File: 60c89335-41cc-407d-8ffe-34cda7e66bb7.roa (raw, json)
Hash identifier: 9d8TUzN883Gu869OAm/03JWKi7TxB5CUTLvOQnRrypQ=
Subject key identifier: 27:76:72:49:6A:49:E2:DC:F1:58:CA:7F:50:B8:A8:10:A3:88:9F:44
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4B5BE188977FD8323559ADCE07FDDCB987C11CD4
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/60c89335-41cc-407d-8ffe-34cda7e66bb7.roa
Signing time: Sun 04 Oct 2026 00:40:07 +0000
ROA not before: Sun 04 Oct 2026 00:40:07 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.96.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:5b:e1:88:97:7f:d8:32:35:59:ad:ce:07:fd:dc:b9:87:c1:1c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:07 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=6c1b334aa8c091fb94ada278546f7e27d0930f8cf333cddd831b24c97ae08fb9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:f8:ec:aa:aa:11:f5:ce:12:1f:f9:9d:d0:
bf:66:a0:4f:51:4b:5a:fd:31:8f:27:7c:98:da:d4:
ce:07:2a:7b:c5:39:79:8d:d1:46:e1:4a:da:56:fa:
4a:54:e1:d7:d0:15:46:fc:c3:f6:be:1c:eb:27:db:
26:df:ce:38:25:4c:0d:4e:30:50:8c:86:90:a7:e2:
34:e2:24:40:60:fe:d4:bb:c4:b7:8a:b8:71:15:8a:
c7:33:19:9e:5a:ac:3a:92:c7:8d:5f:01:61:96:f0:
f9:81:af:d5:b2:59:41:0e:2d:11:07:cc:67:fb:86:
b6:55:f1:75:a6:03:47:e0:23:c4:9d:e7:80:22:d6:
71:19:7f:e5:36:7c:d4:b4:21:e2:9b:26:48:e8:d1:
bc:e1:2b:85:94:45:ed:e8:31:01:d9:2e:44:1e:24:
83:ca:40:c9:36:e2:08:66:00:83:bb:b7:21:f4:7c:
cd:58:1f:da:e0:1f:e4:37:ff:57:75:33:66:bf:76:
5f:c0:d3:25:f8:4e:bf:30:d6:8a:93:c8:0c:64:69:
d3:55:03:fb:ec:2e:d4:54:a2:41:88:0f:0e:57:a2:
79:c4:f8:a4:78:72:60:5f:b5:6a:e0:3e:b4:a8:1d:
92:50:3f:6e:b7:66:88:ee:91:b0:be:b0:68:ee:a0:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:76:72:49:6A:49:E2:DC:F1:58:CA:7F:50:B8:A8:10:A3:88:9F:44
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/60c89335-41cc-407d-8ffe-34cda7e66bb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.96.0.0/14
Signature Algorithm: sha256WithRSAEncryption
12:f9:de:26:a0:2a:08:d7:99:2c:2b:49:f3:ad:b5:4a:40:a3:
ce:f1:7c:44:9f:3c:d5:ba:d3:72:b0:7b:98:e4:54:b9:e3:5f:
a0:3d:fc:c1:c6:b3:7c:a0:fc:42:bb:82:83:1e:cc:ba:9d:51:
a2:2c:5f:12:f3:fb:24:54:31:0d:6c:58:19:1a:b2:50:5a:72:
7f:be:38:d4:df:8a:e8:59:d9:2b:7a:a6:74:6b:84:7a:b7:c0:
b1:15:9f:d0:f4:ef:aa:55:b7:a9:a6:fc:2b:57:59:c8:2a:d2:
61:a5:f0:48:cc:ad:64:99:73:f5:02:ea:45:fe:72:d2:4c:46:
b5:c1:02:e2:02:f7:41:66:f7:3a:d8:9c:a7:8e:d8:4b:77:ad:
89:ba:db:eb:8b:c5:04:f6:c0:00:73:88:b6:90:8d:1e:b0:cd:
65:e8:12:32:7d:ee:ca:7a:b0:08:49:c4:f7:5d:c3:64:2d:da:
92:88:8f:4d:84:cc:ec:c8:27:3f:05:40:9a:28:f0:cd:d2:d0:
c2:94:22:13:42:30:c4:34:56:62:1e:e9:bb:2e:a8:ce:08:b6:
90:e5:46:81:33:6d:02:d2:33:ec:b5:fe:ff:f2:8f:b8:ec:20:
a7:c6:74:f5:9e:3d:b3:00:d7:3e:9d:02:1d:4c:99:90:44:3f:
c5:87:27:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:35:46 2026 by rpki-client