Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/675bb2b8-b9b8-45ee-ad4d-7af481ebf99b.roa
File: 675bb2b8-b9b8-45ee-ad4d-7af481ebf99b.roa (raw, json)
Hash identifier: 7cdGkzCaKajeuAmqOeCWtI/Pze6IPS/nrUZ1FELOs4w=
Subject key identifier: 94:28:5A:A6:AD:76:9C:C4:70:46:9F:5A:1E:65:9E:6D:59:88:4A:60
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 72D5828BDC63895813A65D9BC14CC282DDE55873
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/675bb2b8-b9b8-45ee-ad4d-7af481ebf99b.roa
Signing time: Sat 08 Aug 2026 01:00:11 +0000
ROA not before: Sat 08 Aug 2026 01:00:11 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.200.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d5:82:8b:dc:63:89:58:13:a6:5d:9b:c1:4c:c2:82:dd:e5:58:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 01:00:11 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=f88bc6f19b7707c521d84ad5354c3721a636499cdf9292768aee03f4738b6475, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:14:a1:e4:f6:2b:22:fe:6e:23:4d:f4:91:
db:75:68:12:a8:81:f3:cd:11:7a:20:df:ad:c8:40:
53:8e:06:3a:03:bf:91:0a:cf:a9:81:f1:72:f2:45:
fc:66:e3:ea:d9:c4:17:c9:6e:3c:80:b8:dc:ef:6d:
00:f3:5b:60:1b:3b:89:de:80:a2:9a:2d:a9:0f:03:
e4:8c:aa:c4:f2:aa:28:d6:0f:a6:11:8d:25:07:ae:
22:b7:ba:62:bf:22:3d:d4:86:88:35:72:3c:65:a7:
8f:dd:01:d3:0c:ba:a4:3c:7c:db:ea:79:4a:24:f3:
3a:a0:4f:b5:57:98:e9:01:f2:eb:b0:98:39:9d:38:
36:67:f3:26:6b:f8:17:fc:0a:47:ba:04:9b:99:1c:
c0:db:4c:4a:dd:1c:60:6d:6b:2f:ed:cf:ae:95:9a:
d2:16:1c:57:fc:7c:b6:01:d7:a8:be:74:10:b0:f1:
d3:3d:74:ce:ba:da:35:a2:3b:cf:75:43:3f:2b:0a:
8c:3d:ea:ec:30:33:13:60:92:27:3f:69:76:d6:b8:
25:c9:3b:b9:ec:99:f0:ab:1c:d7:77:b4:e3:e5:14:
4c:44:65:80:99:44:9d:f6:83:f2:0b:f0:6d:a5:1e:
ee:1d:a3:08:16:08:43:72:3d:c1:b6:20:89:26:f6:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:28:5A:A6:AD:76:9C:C4:70:46:9F:5A:1E:65:9E:6D:59:88:4A:60
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/675bb2b8-b9b8-45ee-ad4d-7af481ebf99b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.200.0.0/15
Signature Algorithm: sha256WithRSAEncryption
61:05:1f:63:82:ad:b5:aa:61:1a:52:9d:e3:f5:ec:62:f4:84:
8c:b1:f8:23:d0:34:15:15:98:50:47:18:7d:22:21:0a:5c:12:
ed:0c:a4:e9:bb:2f:13:d7:80:88:90:6c:51:ec:3f:d0:a5:33:
11:c2:8d:4f:c5:a0:83:91:ed:a9:c0:71:6c:78:48:4a:8b:bb:
45:fe:15:52:3a:26:4e:80:7d:4f:13:04:f0:df:75:03:4a:30:
fe:17:69:79:28:60:5f:e1:59:3a:4d:63:5a:de:79:0a:46:bf:
fb:45:06:3d:f8:42:02:27:4d:ee:a1:a0:c7:91:08:62:07:39:
2d:41:42:ab:66:86:c8:df:23:17:47:37:3b:2f:79:a3:cb:a8:
48:c8:28:d4:1c:f3:02:32:cf:78:5a:43:5d:49:d7:f4:6f:b5:
70:ca:91:2a:9a:b2:98:2e:f5:c4:89:d0:6e:84:f6:1b:e6:6a:
88:fe:fa:54:3d:48:12:a9:06:be:5d:73:b1:09:96:3f:f4:06:
60:57:c7:50:25:fa:87:72:b5:6a:5a:c4:08:fb:13:21:6c:d6:
42:23:76:32:ed:7f:26:7b:80:07:41:cd:02:48:52:61:6f:91:
15:58:f9:43:c6:d0:33:0b:78:cb:93:41:84:89:75:85:b1:53:
88:b6:75:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:32:07 2026 by rpki-client