Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/620d46e8-bb13-40cd-8918-677590eaf682.roa
File: 620d46e8-bb13-40cd-8918-677590eaf682.roa (raw, json)
Hash identifier: +1YZqWf2VnYnparXWweJigoqOZF9vgyaYJ0nXQzIHLE=
Subject key identifier: D4:4F:3A:AD:DB:21:EF:7B:EA:E1:8A:5C:41:69:F3:54:3B:A0:30:3B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 770AB48614585039554219DFD3E15C0A8946263C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/620d46e8-bb13-40cd-8918-677590eaf682.roa
Signing time: Fri 07 Aug 2026 06:00:19 +0000
ROA not before: Fri 07 Aug 2026 06:00:19 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.226.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:0a:b4:86:14:58:50:39:55:42:19:df:d3:e1:5c:0a:89:46:26:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 06:00:19 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=bce9ad10b93abbe70489d6a0cca867554d943b8e0d69df45fe0041ef398390c0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:f8:24:e2:04:c1:0e:2a:fb:14:6a:f6:64:
84:06:ed:4a:09:2d:04:55:40:0b:06:95:c2:17:73:
3c:ed:c0:71:79:3f:96:6e:6b:fc:34:03:28:87:a3:
0f:cd:7a:1f:56:27:76:27:9d:25:97:ae:ed:1b:1a:
56:32:2c:a8:26:ad:05:e4:61:51:55:78:7f:9d:cc:
73:e8:2f:aa:85:5b:d3:9b:f9:df:52:3f:20:f0:72:
0e:90:6e:e3:ac:32:0d:af:ec:66:b3:ee:da:7e:69:
b2:9e:88:cb:1b:e1:d4:4d:3c:8b:fa:64:79:11:86:
60:da:1b:ed:e3:a7:1a:99:0e:25:0b:62:fc:ad:f4:
20:08:56:6b:2b:de:11:3e:d3:5e:17:26:f9:68:7c:
c6:90:49:ca:1b:ca:53:c1:34:eb:5d:27:08:62:9b:
4e:29:61:05:4a:6c:15:4d:ef:42:e4:e9:21:65:39:
4f:64:15:2c:8a:59:8e:2b:a5:6d:d0:a0:55:46:53:
65:70:c6:9e:a1:62:aa:c0:d1:38:51:f6:f3:11:6e:
4e:31:8c:18:cf:86:64:09:4f:7b:b8:00:8e:51:53:
77:c7:7d:80:93:bf:f3:c4:5f:f0:07:96:9a:06:ce:
ef:a3:3b:1a:3e:59:90:cd:2c:c1:b8:1d:45:be:27:
0e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4F:3A:AD:DB:21:EF:7B:EA:E1:8A:5C:41:69:F3:54:3B:A0:30:3B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/620d46e8-bb13-40cd-8918-677590eaf682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.226.0.0/15
Signature Algorithm: sha256WithRSAEncryption
62:e8:24:57:30:4a:ee:c4:9b:8f:c9:b3:e5:5c:12:82:f9:ba:
58:e7:b9:18:ec:c7:27:48:4c:5c:89:b9:e9:85:41:15:6a:37:
83:c5:a7:8b:da:c9:b5:5f:f7:27:1c:b8:2c:4c:9d:2b:a9:20:
b8:d1:e8:88:30:24:39:c3:11:4f:7e:c1:1c:cf:7b:15:44:33:
e0:41:6b:14:ca:60:a7:9b:34:91:81:9f:b6:64:43:c0:d6:94:
c0:2b:8e:d0:e1:e8:2b:d2:49:c9:26:6c:80:79:68:54:74:6f:
a9:d2:25:6d:64:31:7a:04:61:e0:bf:4f:68:3c:8b:ce:e7:6d:
fe:f3:17:d0:87:4d:fd:d7:82:e5:91:a0:c7:a4:dd:55:72:ac:
96:27:b0:6f:ab:aa:fc:34:bd:45:08:36:73:2a:a4:61:5b:2d:
39:a9:76:1b:2d:c5:8a:8a:04:28:b7:3f:cb:24:55:c4:b9:21:
f1:ac:ff:40:9e:0e:c4:5d:a1:c3:b6:84:fc:c5:a8:03:59:3a:
71:3a:ca:c6:af:60:a5:ab:05:89:06:0b:50:cb:9c:d4:e4:78:
99:bf:b6:d5:db:db:0c:ba:0c:82:31:21:97:f7:f4:b4:a6:b7:
fd:23:c9:62:9a:24:83:c7:0f:f4:55:f2:d3:ed:ba:f2:c6:29:
73:95:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:37 2026 by rpki-client