Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/709c8cf6-9d5d-47d6-8b70-40eff8390658.roa
File: 709c8cf6-9d5d-47d6-8b70-40eff8390658.roa (raw, json)
Hash identifier: cZrMnrVbMckoyw7PEm/iP6hIJPMg0RLM37jskYM9u1Q=
Subject key identifier: 03:60:5F:3D:8C:82:81:F5:80:DD:7A:1F:52:C7:77:3A:C8:AD:D3:69
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 33F81B2AB6F36CF8985789DADA0B33DD83226B25
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/709c8cf6-9d5d-47d6-8b70-40eff8390658.roa
Signing time: Fri 07 Aug 2026 05:00:11 +0000
ROA not before: Fri 07 Aug 2026 05:00:11 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.220.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f8:1b:2a:b6:f3:6c:f8:98:57:89:da:da:0b:33:dd:83:22:6b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:00:11 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=96f2c3385732c6dc9d675dc38dd232672a57a1d343408c17c60ad2c35b7b5b9d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:87:15:00:ef:87:54:f0:9b:7e:27:fc:c6:
8c:06:87:bb:ab:96:64:0b:4c:72:5b:2a:a1:4e:fb:
b2:94:74:82:a0:15:fb:0d:96:af:ce:49:63:fd:0f:
80:ac:46:7b:6d:b8:28:7b:31:a5:37:bc:7b:b4:fb:
cb:d6:9e:19:9b:d5:87:f2:8b:f8:4e:e6:fc:90:39:
02:9f:7e:df:75:45:fe:62:22:5c:05:f3:42:d9:34:
b2:15:8e:c5:af:61:bb:50:9f:bc:08:28:4b:22:64:
b6:16:1e:b4:94:2f:f9:1a:1c:55:80:f0:1a:11:b6:
3e:12:31:f5:d0:df:e3:70:d7:66:a9:ff:9c:84:91:
a1:f2:66:e0:18:6b:ed:7e:aa:ca:84:f4:ad:b0:66:
f1:3c:74:d4:2a:2f:76:06:4a:9a:54:6c:4c:93:90:
d3:87:0a:c7:a3:3e:fb:7d:10:a4:82:35:48:e4:74:
9f:ac:ae:2a:ae:59:9c:5a:46:7d:4f:d3:01:77:ab:
c4:df:34:ea:06:36:90:98:6c:5b:07:67:2e:ef:e1:
46:b6:62:78:a6:63:a5:12:2d:31:28:9e:b7:1b:bb:
19:fc:6a:3d:57:44:e1:3f:05:23:58:72:f5:70:e5:
c5:36:46:ce:73:4f:b9:a3:6d:a2:4e:18:91:8d:eb:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:60:5F:3D:8C:82:81:F5:80:DD:7A:1F:52:C7:77:3A:C8:AD:D3:69
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/709c8cf6-9d5d-47d6-8b70-40eff8390658.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.220.0.0/15
Signature Algorithm: sha256WithRSAEncryption
94:2e:57:4d:8b:8d:1d:76:6c:4e:99:1a:e8:53:47:b5:39:ee:
7f:c7:f7:81:2b:e5:0e:1c:d2:6a:42:c5:d9:1c:5f:fb:f0:11:
42:60:2f:0e:c6:04:ef:df:20:87:95:19:d9:a7:1a:42:d5:a9:
06:e5:27:f4:97:49:f4:df:61:38:d6:6e:73:05:32:02:ce:75:
bb:77:a8:5e:46:20:50:69:21:03:a2:e3:7b:e7:38:59:70:4c:
f1:19:fc:49:72:9b:33:5e:39:b3:c2:40:af:cc:3f:2e:28:64:
d3:87:b4:13:f7:e2:f8:33:16:88:42:f3:d1:33:d6:46:02:85:
d8:2c:eb:38:2f:a9:38:6f:60:b2:af:55:81:63:f2:aa:22:6d:
2c:fb:3d:99:22:a9:17:9f:2e:aa:57:3e:4b:94:d9:14:d4:ea:
a1:1f:fa:93:3c:36:c2:c3:3e:35:8e:4d:1a:a1:1f:8f:f7:f5:
6a:15:47:c2:13:dc:34:67:81:d1:36:34:7c:73:57:a2:40:29:
ca:07:68:00:26:37:51:ca:10:00:1c:f3:53:9a:a4:d6:fd:27:
d1:4c:5f:b3:1a:3c:88:da:ef:66:8b:a1:4a:30:5a:a6:ea:41:
df:bd:6b:c1:b9:df:c2:3a:f8:15:de:5c:10:3d:63:b8:df:75:
ab:1a:48:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:03 2026 by rpki-client