Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/67568c6a-cd1a-4586-a397-580b374dbdb0.roa
File: 67568c6a-cd1a-4586-a397-580b374dbdb0.roa (raw, json)
Hash identifier: NjUD7DBOPcya0N4LLcsY5mOOChf0iQwJl+B2BoqhVRM=
Subject key identifier: 12:E8:6E:0D:05:9C:45:90:16:0A:5D:6F:F8:8E:06:F6:54:1C:4D:60
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5BEC10139B9A2690B2D2073BA99DCECBBFAF2547
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/67568c6a-cd1a-4586-a397-580b374dbdb0.roa
Signing time: Mon 26 Oct 2026 05:50:28 +0000
ROA not before: Mon 26 Oct 2026 05:50:28 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.60.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ec:10:13:9b:9a:26:90:b2:d2:07:3b:a9:9d:ce:cb:bf:af:25:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:28 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1639b546362fc3fa61ca9f3b59d7fcebd75ace80e1de72dcee588884a980a4cf, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:ee:a0:b7:9e:5a:79:44:e7:35:a9:d7:7e:
95:e7:4b:60:13:a3:2b:eb:dc:70:89:6e:96:33:32:
d8:96:17:39:7e:c3:2c:bb:6b:3a:a6:12:c9:24:2f:
a2:2b:cc:79:2b:b1:67:ac:67:c7:54:93:d3:db:d1:
d8:0d:ec:85:fa:98:66:07:00:dd:c0:6a:75:61:dc:
7d:ab:9c:bb:71:5d:17:6a:67:44:ed:56:ad:9e:95:
e8:6e:29:f4:40:97:80:cb:4a:7e:78:ba:47:5a:c3:
1e:fe:67:cd:3d:21:ce:0c:75:33:e5:c8:b1:bc:db:
7a:3a:04:9c:44:26:29:41:cf:ce:3d:e0:5d:ef:50:
ca:ad:ee:d8:74:4b:65:b4:0e:47:c7:08:48:14:50:
36:6f:a8:76:ec:d6:e4:2f:39:54:6f:61:17:ee:be:
9f:38:3a:e6:cb:d2:a2:46:18:5b:28:ea:1f:ac:55:
1c:1f:23:ba:a5:8d:c6:61:12:01:14:8f:64:5f:80:
01:da:cd:ac:df:c1:67:8d:37:97:5b:e5:2f:06:b9:
51:8e:9f:e0:e9:5c:94:de:e2:49:f1:bd:51:c6:35:
3c:46:74:42:27:41:50:b4:04:37:df:2d:16:1d:9d:
44:a2:56:ae:d1:25:34:fb:a1:ed:af:ca:1c:17:44:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E8:6E:0D:05:9C:45:90:16:0A:5D:6F:F8:8E:06:F6:54:1C:4D:60
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/67568c6a-cd1a-4586-a397-580b374dbdb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:e1:a8:3e:21:2b:0f:8e:bc:96:41:a0:77:76:90:75:2f:ee:
59:c4:c9:24:98:6c:6d:42:4e:1d:ec:6b:29:88:e8:a7:f8:51:
63:a7:d1:ad:51:45:f0:ab:39:d6:27:18:77:93:6d:89:d2:a1:
39:e5:ab:05:aa:d6:3f:5f:17:a2:fa:cd:49:0b:3a:90:55:85:
b6:8a:60:4d:d3:08:2b:a7:ad:85:a7:7d:3a:ed:23:1e:d6:d9:
af:70:62:95:76:34:50:15:51:c6:88:37:28:8a:fb:fc:c8:fd:
97:dd:af:b8:87:d4:f2:57:47:e0:2c:b2:5f:c8:c7:6c:19:19:
1f:b6:3e:29:45:85:3b:34:01:ae:ec:f4:fc:a5:91:01:91:53:
59:1b:67:09:55:fe:38:ec:fc:e5:30:e7:8a:de:06:82:e6:75:
1b:87:35:58:11:64:6a:88:02:d2:77:50:e4:dd:d0:7f:6f:98:
63:8e:fb:fd:9a:3f:a6:2d:19:c9:3d:63:c5:2e:8d:d9:39:96:
c6:b9:5f:42:0d:c0:20:84:15:b6:da:72:db:4d:59:6d:be:4d:
fb:fd:29:8a:9d:fc:d5:a0:6b:98:30:91:d1:6f:ad:45:6e:0d:
aa:b0:86:1b:dc:71:3b:5e:b5:f0:de:dd:dc:5d:ca:5e:f3:68:
20:fb:f4:02
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUW+wQE5uaJpCy0gc7qZ3Oy7+vJUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTUwMjhaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDE2MzliNTQ2MzYyZmMzZmE2MWNhOWYzYjU5ZDdmY2ViZDc1YWNlODBlMWRl
NzJkY2VlNTg4ODg0YTk4MGE0Y2YxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMXP7qC3nlp5ROc1qdd+ledLYBOjK+vccIluljMy2JYXOX7DLLtrOqYSySQv
oivMeSuxZ6xnx1ST09vR2A3shfqYZgcA3cBqdWHcfaucu3FdF2pnRO1WrZ6V6G4p
9ECXgMtKfni6R1rDHv5nzT0hzgx1M+XIsbzbejoEnEQmKUHPzj3gXe9Qyq3u2HRL
ZbQOR8cISBRQNm+oduzW5C85VG9hF+6+nzg65svSokYYWyjqH6xVHB8juqWNxmES
ARSPZF+AAdrNrN/BZ403l1vlLwa5UY6f4OlclN7iSfG9UcY1PEZ0QidBULQEN98t
Fh2dRKJWrtElNPuh7a/KHBdEYWsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQS6G4N
BZxFkBYKXW/4jgb2VBxNYDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
Njc1NjhjNmEtY2QxYS00NTg2LWEzOTctNTgwYjM3NGRiZGIwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADM8MA0G
CSqGSIb3DQEBCwUAA4IBAQCz4ag+ISsPjryWQaB3dpB1L+5ZxMkkmGxtQk4d7Gsp
iOin+FFjp9GtUUXwqznWJxh3k22J0qE55asFqtY/Xxei+s1JCzqQVYW2imBN0wgr
p62Fp3067SMe1tmvcGKVdjRQFVHGiDcoivv8yP2X3a+4h9TyV0fgLLJfyMdsGRkf
tj4pRYU7NAGu7PT8pZEBkVNZG2cJVf447PzlMOeK3gaC5nUbhzVYEWRqiALSd1Dk
3dB/b5hjjvv9mj+mLRnJPWPFLo3ZOZbGuV9CDcAghBW22nLbTVltvk37/SmKnfzV
oGuYMJHRb61Fbg2qsIYb3HE7XrXw3t3cXcpe82gg+/QC
-----END CERTIFICATE-----
Generated at Tue Nov 3 14:59:34 2026 by rpki-client