Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/78e385a6-a7b8-4e63-8222-9119ad4d303f.roa
File: 78e385a6-a7b8-4e63-8222-9119ad4d303f.roa (raw, json)
Hash identifier: xFRm+oWSdSrL23Nvk2lGkrHF4Fm0MipYV96bjm+rfy8=
Subject key identifier: 66:96:85:7F:9C:D1:FB:FC:88:72:A4:91:AB:8D:4A:29:79:97:28:3D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4CD01F217BAB9583FF6173E0D8C5D51B280E49FB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/78e385a6-a7b8-4e63-8222-9119ad4d303f.roa
Signing time: Sun 02 Aug 2026 01:40:06 +0000
ROA not before: Sun 02 Aug 2026 01:40:06 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.118.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d0:1f:21:7b:ab:95:83:ff:61:73:e0:d8:c5:d5:1b:28:0e:49:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 2 01:40:06 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=f6298ee83a3eda56e8e8490d035d596c2aae27c3c99ae4534cf67799dbfa4cc7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:3c:e6:4d:e1:d1:b0:00:e9:be:ef:2f:b2:
83:49:b2:bb:8c:b1:68:57:48:63:a7:75:9f:94:12:
95:b6:e1:76:d0:a4:0f:e6:bd:b1:78:b9:b5:9a:7f:
fa:d1:2e:d7:fc:73:dd:e7:07:e2:7c:69:87:26:7f:
93:c5:05:4f:f4:60:78:5f:1e:6d:20:3e:96:44:67:
fc:6d:5a:45:96:7d:96:fb:86:65:0d:b5:49:a8:83:
93:50:9a:0e:9b:e9:47:54:dc:20:f5:5f:36:43:df:
d0:1c:79:72:60:64:a9:cc:8e:be:ba:13:c8:93:a1:
ba:2d:46:7f:38:33:71:41:23:6c:48:c2:9b:80:f3:
8b:c1:dd:db:5f:e9:35:bd:6f:c5:8a:08:e4:1b:24:
4e:c6:fe:47:92:e2:19:78:1f:e1:27:a9:cd:63:3e:
2c:04:8b:7e:55:10:89:18:48:26:12:24:fb:f5:f0:
07:30:f1:3b:f9:cf:c4:d9:81:c9:e0:0c:93:d0:48:
b0:9d:e9:cf:db:57:b3:ee:5d:4d:72:67:73:3e:5e:
d4:07:56:2d:7f:fb:fc:67:5c:8e:64:0d:d5:81:fd:
38:40:3a:97:02:90:94:cb:c6:15:09:f3:0e:7f:16:
f0:fa:55:0c:2f:10:40:06:6e:f3:06:51:e8:b4:94:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:96:85:7F:9C:D1:FB:FC:88:72:A4:91:AB:8D:4A:29:79:97:28:3D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/78e385a6-a7b8-4e63-8222-9119ad4d303f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.118.0.0/15
Signature Algorithm: sha256WithRSAEncryption
68:4a:5a:e6:37:e9:ad:13:fa:2f:de:d7:1d:14:ea:ae:15:bf:
47:0d:75:4f:53:57:3a:0c:b2:03:02:3e:9b:e6:a7:bf:80:95:
26:c8:fb:79:1e:bc:25:4f:e4:7d:5c:7b:bc:b9:80:2d:dd:4b:
9f:ef:1b:8c:19:f5:d4:ee:62:c5:20:a5:fe:38:01:77:74:7c:
d4:8d:a0:bf:f2:b6:6e:ef:da:d6:41:e2:d9:bd:f1:f5:16:23:
87:1d:52:f9:3c:62:08:99:6e:9a:d1:48:ed:81:43:9b:a7:28:
08:a0:d2:82:eb:8d:a8:bf:a9:84:86:ae:41:e2:ee:c3:c1:eb:
36:60:82:bc:f0:00:ff:93:91:83:96:63:5d:92:57:91:b3:d3:
6c:4e:55:c5:e2:ee:68:16:9c:63:71:81:d3:45:46:52:8d:6b:
64:08:bc:c0:2e:4a:f0:7f:72:4f:c9:72:95:6f:3b:aa:14:33:
d3:61:8b:4f:96:69:70:15:ad:51:5d:1a:46:c5:e9:c3:1e:bb:
1d:9b:e2:89:17:40:ab:1e:87:a0:b7:77:32:3b:9e:41:11:06:
3c:e1:20:96:4e:5b:db:6f:78:ae:0b:11:23:be:e0:fe:dd:56:
b9:9b:11:4b:eb:04:e1:70:da:d1:7a:75:4f:16:4c:20:27:56:
1c:d2:69:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:16 2026 by rpki-client