Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6252e9a3-4fdc-4c43-b91b-deb58ca2dd7c.roa
File: 6252e9a3-4fdc-4c43-b91b-deb58ca2dd7c.roa (raw, json)
Hash identifier: aKvp8EdBS/07/TYnX1Ca8LcFl6XQv4iTkA3usv3gBaw=
Subject key identifier: 5F:8B:E6:EA:00:60:A9:8C:8E:40:25:55:B9:E0:85:32:78:BC:29:E4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 17EAA2F2E34597E43C2A62322FC152867FB68E1A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6252e9a3-4fdc-4c43-b91b-deb58ca2dd7c.roa
Signing time: Sun 04 Oct 2026 00:40:09 +0000
ROA not before: Sun 04 Oct 2026 00:40:09 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.46.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ea:a2:f2:e3:45:97:e4:3c:2a:62:32:2f:c1:52:86:7f:b6:8e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:09 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=e28b28ac21c88f552f25db198bbc8aaeff281f0f02267ea25cbfd1a61e12345d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:d0:84:49:84:54:70:7b:49:07:37:bc:6e:
c2:bf:62:c0:a5:7a:90:8c:2c:67:6f:69:85:f3:af:
7e:8f:ac:f7:c8:8c:c0:96:96:21:65:f8:88:2e:e8:
3c:12:05:cb:fb:94:05:15:24:4b:0d:c1:b4:6d:8a:
a7:e5:93:7f:75:27:8c:63:65:e4:01:de:5f:c9:b7:
21:65:ba:42:db:99:80:51:bd:3a:83:70:8c:5f:ab:
e7:73:1e:0a:22:8f:21:32:1e:15:ff:d1:60:26:88:
ca:18:6c:cb:53:3e:12:e6:81:d1:ed:da:86:2f:01:
0f:a5:4c:41:85:42:3e:29:a8:b6:59:5a:c7:22:5b:
ad:4b:53:12:7e:34:0e:5f:2e:8b:4d:56:25:4b:13:
3c:a1:f5:43:16:56:ca:64:6e:8e:4f:04:43:c7:22:
db:2d:76:5b:2e:7a:b3:a5:e1:82:82:3b:e0:46:bc:
56:b7:7c:3c:85:5f:49:c5:98:53:9e:10:dc:19:64:
da:34:02:40:8f:e4:c5:72:30:32:e6:45:74:94:54:
e6:3e:7a:fc:c3:ee:fe:e1:fa:80:a6:d8:6c:b9:44:
44:a5:e8:49:20:bc:e2:9f:cf:c1:fa:ec:a6:ca:08:
03:3c:81:cb:55:7f:bb:14:e4:cd:a7:1d:e1:0c:46:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8B:E6:EA:00:60:A9:8C:8E:40:25:55:B9:E0:85:32:78:BC:29:E4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6252e9a3-4fdc-4c43-b91b-deb58ca2dd7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.46.0.0/15
Signature Algorithm: sha256WithRSAEncryption
d0:3c:56:1f:94:25:12:fa:e1:17:54:47:e3:d9:65:1b:cd:0c:
87:28:32:1f:75:6d:77:a0:ca:f1:27:48:2a:de:71:01:76:86:
f7:5e:31:c1:8f:9d:7d:42:76:35:cf:6a:d4:59:ef:41:e7:06:
d7:85:47:67:a5:1c:b0:ea:5d:5a:dd:92:67:ec:1e:7b:f8:93:
b5:a3:ea:cb:ec:e5:cb:b0:ca:2b:c9:62:6d:15:cb:69:de:47:
6e:2b:f3:0c:1a:9a:38:dc:b2:58:17:ed:48:c3:b2:b3:52:06:
20:80:99:2b:44:9e:75:71:86:ed:cd:4f:e6:cb:44:4d:65:ed:
dc:45:27:23:81:4c:59:0f:e1:ae:85:29:cf:d3:84:c4:b2:ef:
b6:3d:9e:c6:cb:f9:f8:66:c3:55:ac:c3:05:e4:93:a1:92:e3:
4b:ae:cb:56:c7:a8:59:7e:95:75:ff:6b:fa:1f:f8:b0:4e:69:
0a:66:ba:32:9d:19:0f:df:06:67:55:6c:bd:0d:2a:1e:6d:77:
6b:98:da:64:e8:ff:04:a8:88:4b:26:cd:20:7d:7a:84:3c:bd:
8b:38:a2:43:c0:c1:00:5a:78:f8:7a:7d:1c:5c:ed:be:13:ef:
1f:30:9a:f3:ad:55:92:c6:6f:58:ec:cb:11:9e:07:ff:14:8b:
44:27:21:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:00:58 2026 by rpki-client