Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/67568c6a-cd1a-4586-a397-580b374dbdb0.roa
File: 67568c6a-cd1a-4586-a397-580b374dbdb0.roa (raw, json)
Hash identifier: OPZqUAFa2/GXOq02HBkSGQwLG5A1r/8/kUprYPokzJg=
Subject key identifier: BE:E5:BE:D7:A3:42:CB:42:E5:B7:35:B7:B3:D0:C3:F7:93:DA:35:02
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 126C7AF3B219854D077C3F65E6990C2B89EB37D3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/67568c6a-cd1a-4586-a397-580b374dbdb0.roa
Signing time: Fri 07 Aug 2026 05:50:53 +0000
ROA not before: Fri 07 Aug 2026 05:50:53 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.60.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6c:7a:f3:b2:19:85:4d:07:7c:3f:65:e6:99:0c:2b:89:eb:37:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:53 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=3815c9ba9222ecf94bd8a2084d9ba66ac2b1ca091385c95ab2cfd7aeffb3587a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:90:9c:48:62:8d:a8:60:ee:c5:72:89:e9:
86:93:a0:f3:89:b8:a3:f6:e4:62:da:fb:7a:a4:68:
29:41:91:4c:03:33:f0:b6:ed:1b:05:e9:08:7a:c2:
d2:3e:9c:a8:20:ed:0b:c7:4c:da:c6:7f:41:20:c5:
32:19:61:dc:32:e7:74:6d:9a:e9:86:04:09:18:b2:
24:bd:a5:38:28:12:b0:bf:c1:a3:78:c1:a1:86:9e:
4d:cd:47:57:a2:9b:ad:79:2a:3f:48:c2:36:3c:df:
26:b1:e1:7b:91:12:d7:a5:04:04:48:aa:ac:80:c5:
59:46:60:53:fd:21:71:56:63:6a:48:3b:5e:83:e2:
93:3e:c7:db:0c:dc:69:b0:5b:fc:c8:64:f2:62:15:
6c:70:73:59:26:2d:a9:f2:05:54:b9:77:40:b6:0e:
a9:82:f3:0a:fe:e3:85:7d:ad:c7:01:00:86:e3:7b:
9b:ae:ff:6e:b6:fd:2c:c2:d3:ae:4d:0e:86:70:e8:
c1:01:4c:9c:41:dc:01:0b:96:8a:0a:9b:4a:2c:71:
19:0e:c4:41:62:9f:fc:af:08:ee:3a:3f:af:71:7c:
95:11:73:6a:ed:a1:10:c5:14:20:7b:9d:96:22:c6:
62:f0:af:f8:b2:62:1a:1f:69:d3:43:4c:b6:8d:59:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E5:BE:D7:A3:42:CB:42:E5:B7:35:B7:B3:D0:C3:F7:93:DA:35:02
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/67568c6a-cd1a-4586-a397-580b374dbdb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:cc:d1:f5:20:38:37:58:a2:94:d9:29:aa:e5:1e:70:90:ec:
87:c2:4e:71:b3:88:3d:32:70:08:ea:d3:ff:9a:b7:a2:50:23:
3d:57:c2:2c:81:fb:eb:34:6e:4d:4f:27:42:e3:93:1a:71:f9:
0f:c3:f8:17:69:c7:b6:0e:67:9c:17:0b:48:3d:25:18:2e:57:
24:43:25:68:95:1f:5a:ab:ca:e9:74:d1:10:97:46:c9:61:2c:
46:9c:e0:55:b4:be:a0:b8:d3:f6:df:ce:98:c7:00:2f:ef:d7:
9f:55:f9:c6:e9:54:62:52:d8:a3:f3:c5:d3:88:ae:22:2f:6b:
43:e1:2e:38:fd:53:24:68:4f:20:d9:8f:38:6c:d0:b9:01:53:
b2:28:c3:1d:f7:eb:14:06:3c:82:d4:04:90:6d:b1:9b:eb:58:
9e:b5:90:cf:b3:4d:09:46:0a:02:9b:e6:8a:58:54:03:0a:c2:
66:c5:0c:0f:9b:73:ca:0f:6d:e5:dc:51:66:4a:01:b1:a3:c7:
4e:ec:25:af:cd:da:46:bb:90:87:83:d3:05:ea:d3:c8:76:d6:
18:79:d5:5a:7f:3d:9a:0b:27:98:4f:19:2c:c2:96:6a:22:12:
f1:23:90:8e:ad:8d:0a:6b:cb:b8:ba:df:51:09:1f:b1:5d:a9:
05:9c:a7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 21:04:52 2026 by rpki-client