Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/676cc479-c956-49aa-8372-560fd674c62c.roa
File: 676cc479-c956-49aa-8372-560fd674c62c.roa (raw, json)
Hash identifier: g3rssupoGhN2DHekv9EAucXYDb5QxKc1xM9HnB6uIeQ=
Subject key identifier: 80:4B:65:39:3D:24:46:FA:4A:86:41:65:6C:AD:00:A6:43:61:91:51
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 102CCE26D33F690AEACF896739D4EEAF91480A33
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/676cc479-c956-49aa-8372-560fd674c62c.roa
Signing time: Sun 04 Oct 2026 00:40:23 +0000
ROA not before: Sun 04 Oct 2026 00:40:23 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.20.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:2c:ce:26:d3:3f:69:0a:ea:cf:89:67:39:d4:ee:af:91:48:0a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:23 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=942c0ae0e7aaaccfe37060592251d301e870b9ee8a485c270ebfffd7dfb768f0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:09:2d:58:1c:6b:13:3c:35:4b:ae:e8:13:
9d:d6:e8:47:13:43:22:ea:df:d5:79:f0:ff:17:b9:
48:33:fe:0f:07:84:e1:ff:ba:41:58:e1:61:08:e5:
2c:25:5f:79:e7:f2:2f:ca:76:9c:07:4d:cf:aa:5f:
6a:c9:21:b4:5d:eb:db:05:07:1d:57:e2:f8:c9:09:
f6:f6:e7:1f:ec:2d:76:0a:4d:b9:27:d7:cd:69:08:
89:8f:c1:9d:9c:cd:ca:8a:9c:1a:1a:6b:d1:94:92:
25:7c:64:2f:81:ea:84:cd:5b:02:7b:d2:99:e9:e7:
1a:ef:9a:e6:2e:19:17:3f:cc:10:f2:03:c6:ad:55:
b1:c6:28:27:3e:e3:49:75:ec:75:24:89:c0:64:b9:
69:33:15:2f:a8:62:62:12:c1:c5:79:34:0f:0a:30:
e1:9e:21:79:db:ae:a2:59:ac:e0:07:36:d3:90:ef:
34:15:a8:be:8a:bb:4f:41:78:c4:ca:ea:f2:3a:04:
67:ff:72:b5:1d:c3:be:08:91:1a:25:83:f3:92:26:
c2:6f:61:f0:e8:a3:0d:0e:3e:29:c4:39:83:51:10:
02:dc:5c:5e:d6:1d:f7:52:f8:c1:81:87:95:4c:2e:
57:00:99:cb:66:21:a5:bb:17:4e:74:27:36:e8:f3:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4B:65:39:3D:24:46:FA:4A:86:41:65:6C:AD:00:A6:43:61:91:51
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/676cc479-c956-49aa-8372-560fd674c62c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:30:f4:b2:e6:95:4c:0c:b5:97:e4:af:ee:e4:24:5f:b2:71:
4d:3d:33:2c:69:99:40:99:a6:86:35:bd:77:57:76:db:b5:0c:
6b:26:ba:5f:4b:ef:a2:15:0d:5a:03:26:2f:2d:68:68:eb:9c:
49:20:26:c0:a7:68:ea:79:77:3b:a7:55:b4:f8:65:13:b3:34:
fa:10:c5:6c:82:1f:f3:6d:ee:6d:a7:00:45:a0:b9:b4:03:45:
0a:9b:5f:0b:78:18:da:43:ce:2a:bf:d5:ef:51:eb:7b:98:93:
da:eb:2a:9a:38:e0:36:a2:e8:a5:5a:46:2c:73:3e:d1:f2:90:
1d:cd:a5:a4:e0:37:07:6d:f0:a6:a2:a8:23:8b:1f:0c:38:87:
7e:ab:e4:a3:1a:61:37:9c:38:28:8d:21:52:7b:52:2f:ca:9f:
65:c2:93:80:d3:7e:c8:92:2a:d7:70:fa:67:44:68:43:92:af:
83:b0:1b:d3:6e:03:cc:05:80:dc:28:16:1c:51:84:e0:62:7e:
f6:a2:87:f4:79:03:cd:3e:1d:88:03:dc:21:7c:ec:84:f0:b2:
c6:de:bb:08:cf:73:9c:c8:7d:b2:f6:29:11:cb:4a:27:f0:6f:
b5:5a:36:2e:78:2c:15:50:de:e9:2a:46:3a:fc:37:a2:77:ce:
58:79:43:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:59:56 2026 by rpki-client