Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/622b9899-5998-4ed0-ab52-e0333df931ef.roa
File: 622b9899-5998-4ed0-ab52-e0333df931ef.roa (raw, json)
Hash identifier: DUP+uzt03XA5765uYPezSUygpdeZtK3AOlo9rWmCpXo=
Subject key identifier: 48:D4:EB:D7:E6:BB:76:2F:EE:85:BF:76:AE:15:49:70:15:D1:B3:BD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 08AA5204F3D80534A9C45D95587E76EF7826AA16
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/622b9899-5998-4ed0-ab52-e0333df931ef.roa
Signing time: Fri 16 Oct 2026 12:42:51 +0000
ROA not before: Fri 16 Oct 2026 12:42:51 +0000
ROA not after: Thu 14 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.168.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:aa:52:04:f3:d8:05:34:a9:c4:5d:95:58:7e:76:ef:78:26:aa:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 16 12:42:51 2026 GMT
Not After : Jan 14 23:59:59 2027 GMT
Subject: serialNumber=6a606a84c8bbc5ad588d92be5d2b0ee6a92368a74e831f1e6099d07d4b716ed3, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:48:0b:a0:97:3a:72:48:22:4a:02:a3:7c:
d1:dc:f0:5a:6b:e0:ed:29:79:c2:75:07:b6:11:3b:
6a:b7:0a:06:67:e7:ba:7d:b3:ff:a8:8b:57:84:a5:
f6:a7:ce:fd:fc:5e:d3:12:3f:8b:1e:5a:ad:dd:97:
5b:06:87:d6:1b:81:61:b5:e6:cf:a7:1c:1b:0a:30:
fe:01:99:d9:b8:63:fe:eb:7e:10:c1:ee:1c:36:e5:
e5:f5:18:1d:18:2e:01:13:d7:f9:7d:95:c3:d9:15:
a5:f6:dd:9e:fe:31:36:10:9b:01:bb:fe:41:0d:60:
cd:89:2a:49:b0:aa:4c:bd:64:ad:09:e6:ff:4d:f5:
e7:bf:fd:5a:1b:c2:19:03:84:c2:bd:f2:08:63:36:
03:07:e5:5d:10:da:8f:f1:74:f2:06:e7:bc:f8:9a:
d1:f5:de:9d:b0:45:fe:19:1e:59:90:a1:77:07:19:
06:a2:93:df:c3:13:e5:82:f9:92:60:d4:e0:2b:56:
bc:27:54:a4:ec:8b:73:38:de:fe:7a:5a:0d:fe:68:
ac:cc:dc:34:ee:16:78:26:76:06:de:9b:ca:b0:ab:
ed:8b:37:85:0d:02:6b:f7:aa:f7:c0:e9:11:27:2f:
ee:2c:e6:c9:29:e4:93:e3:31:04:ea:cd:58:86:9b:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D4:EB:D7:E6:BB:76:2F:EE:85:BF:76:AE:15:49:70:15:D1:B3:BD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/622b9899-5998-4ed0-ab52-e0333df931ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.168.206.0/23
Signature Algorithm: sha256WithRSAEncryption
04:f9:bc:f3:ed:20:e5:05:9b:bd:d5:55:67:7e:8b:7e:86:11:
6e:24:53:32:99:83:b7:18:ad:70:48:17:be:38:f0:da:6a:e3:
92:10:f1:a5:84:62:97:1b:de:85:7a:78:68:7f:86:d8:16:4b:
31:f8:0d:7f:1b:8a:cd:b2:09:7d:70:c5:de:c8:94:aa:ea:be:
87:98:32:c0:48:26:ee:b2:22:25:5c:f9:27:89:c1:93:04:e0:
b3:8e:e3:7b:a9:19:eb:b9:d8:26:29:d5:2b:98:08:b2:c2:d3:
c6:84:3c:bd:ae:06:92:46:c2:0f:a7:2e:e8:14:04:f1:65:60:
cb:ae:c6:cb:00:5a:55:c4:4b:33:6d:55:55:bd:05:84:4c:70:
75:46:c2:a4:3f:96:f6:ac:fb:6a:4a:6a:e4:67:b6:6c:8d:9f:
7e:01:95:5b:d9:f6:a1:b0:bd:97:0e:aa:c4:29:4a:4f:af:77:
7f:cb:cf:f9:77:d7:36:ad:ff:f7:e2:c7:21:2c:d3:47:60:bb:
bc:26:d1:ef:eb:80:50:5f:f6:4c:b6:ac:b7:ba:9a:bf:fe:e2:
7b:8c:ea:80:b6:4e:83:a3:4a:51:03:9c:c0:15:53:b1:a1:db:
a5:dd:be:ca:f1:a4:5c:b1:4e:62:7b:54:83:b8:b1:06:9b:44:
8f:1c:68:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:32:50 2026 by rpki-client