Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f7195fd-bf95-4b3a-81b1-908a89b8b4b1.roa
File: 7f7195fd-bf95-4b3a-81b1-908a89b8b4b1.roa (raw, json)
Hash identifier: g4+Yq8wXPZx7DPcuezYachRRG1dgppT13DuXzyJbtvk=
Subject key identifier: 7C:CB:5A:B0:B8:7C:02:74:83:18:6F:EF:34:87:79:AE:17:B0:03:95
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 627995C23401A7F70AC8E781DA0974A39511AE48
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f7195fd-bf95-4b3a-81b1-908a89b8b4b1.roa
Signing time: Sun 04 Oct 2026 00:40:25 +0000
ROA not before: Sun 04 Oct 2026 00:40:25 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 51.93.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:79:95:c2:34:01:a7:f7:0a:c8:e7:81:da:09:74:a3:95:11:ae:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:25 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=d6d73e99bdc1bf5d68991675a7f64f19cd3234b763e93dac19d63a1f0077e86e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:0c:9f:fd:23:c2:9a:94:65:7d:ac:0e:cc:
ec:e8:e9:0a:6e:52:1f:d0:9c:dd:cd:8d:d3:67:da:
47:c5:6a:99:d6:7d:e2:b2:a9:a5:9c:1b:9e:1b:b8:
f7:a2:ec:47:5e:cf:86:58:f5:a5:71:b8:4d:5b:53:
12:10:e6:9d:6e:c3:eb:92:27:97:ce:d5:77:b1:95:
ce:ab:8b:6d:71:f0:64:40:35:95:c7:58:59:fe:4f:
9b:d1:4f:22:da:31:29:3e:23:3c:16:f1:57:64:a0:
0c:53:c5:f5:90:57:fc:81:2c:d6:11:7b:24:ca:7d:
67:53:59:20:08:1c:de:ec:ca:66:ff:61:b8:cc:15:
db:a0:c4:cd:cb:af:6d:2b:92:8b:80:a0:25:84:fb:
4a:69:50:e6:b1:17:25:37:51:cb:9c:c4:ed:ea:bf:
32:2c:c7:8f:ac:b1:f8:10:69:da:c4:60:39:91:44:
87:26:dc:2e:49:4f:0f:f8:c4:da:02:50:f6:9e:c0:
f9:c4:3c:68:55:86:2b:61:6c:31:fa:cd:ff:81:c1:
4e:5e:04:47:9c:8d:ee:25:69:e9:fb:f6:74:ba:04:
93:cb:5e:4b:95:b3:15:73:4f:4b:1c:1d:b1:cc:e9:
90:a0:fb:41:3d:a8:73:b7:98:42:e1:23:44:0c:55:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CB:5A:B0:B8:7C:02:74:83:18:6F:EF:34:87:79:AE:17:B0:03:95
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f7195fd-bf95-4b3a-81b1-908a89b8b4b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:bf:01:cc:67:2d:eb:51:c7:8a:7e:2f:82:5a:b2:2e:33:8a:
e2:63:4c:57:86:a3:8c:c5:ef:bd:bf:42:d6:2e:e6:e0:e0:48:
d6:07:75:04:d0:87:8e:78:58:a0:20:42:85:1e:79:90:0f:aa:
10:6c:6a:bd:7a:87:3d:10:ad:61:c7:3a:81:8b:d3:c8:1a:25:
7f:b1:27:4d:55:a6:90:bc:88:09:ed:47:09:55:64:53:06:4e:
80:0e:4c:bd:bc:c8:13:a1:1c:b7:27:a1:74:fe:bd:3f:e0:de:
f4:df:db:58:34:b1:4a:4d:f8:be:f9:8e:2e:a6:90:d3:b7:e9:
67:ab:bf:f3:1a:14:cd:6b:d0:25:6e:5a:4e:c9:36:3f:80:a8:
74:a3:ad:b2:7a:b8:f1:a7:71:1c:51:01:a4:2b:70:02:89:ee:
ff:b8:9a:ce:ed:e9:71:52:b0:85:6f:b7:fd:00:4e:b6:7b:78:
a7:ed:d0:2c:70:0e:53:41:45:32:3e:06:65:d8:58:6b:6f:8f:
d8:7c:4a:d0:75:29:43:82:f8:f9:fd:d9:65:89:95:6e:18:c4:
87:17:c3:6c:44:91:16:59:1f:09:76:bd:fd:d9:21:17:3e:a9:
34:fe:af:f5:be:97:74:c9:8b:dc:eb:25:37:8e:81:58:e8:c4:
e3:21:7d:96
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUYnmVwjQBp/cKyOeB2gl0o5URrkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMDQwMDQwMjVaFw0yNzAxMDIyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ2ZDczZTk5YmRjMWJmNWQ2ODk5MTY3NWE3ZjY0ZjE5Y2QzMjM0Yjc2M2U5
M2RhYzE5ZDYzYTFmMDA3N2U4NmUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMbUDJ/9I8KalGV9rA7M7OjpCm5SH9Cc3c2N02faR8VqmdZ94rKppZwbnhu4
96LsR17Phlj1pXG4TVtTEhDmnW7D65Inl87Vd7GVzquLbXHwZEA1lcdYWf5Pm9FP
ItoxKT4jPBbxV2SgDFPF9ZBX/IEs1hF7JMp9Z1NZIAgc3uzKZv9huMwV26DEzcuv
bSuSi4CgJYT7SmlQ5rEXJTdRy5zE7eq/MizHj6yx+BBp2sRgOZFEhybcLklPD/jE
2gJQ9p7A+cQ8aFWGK2FsMfrN/4HBTl4ER5yN7iVp6fv2dLoEk8teS5WzFXNPSxwd
sczpkKD7QT2oc7eYQuEjRAxVGQsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBR8y1qw
uHwCdIMYb+80h3muF7ADlTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
N2Y3MTk1ZmQtYmY5NS00YjNhLTgxYjEtOTA4YTg5YjhiNGIxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNdMA0G
CSqGSIb3DQEBCwUAA4IBAQBOvwHMZy3rUceKfi+CWrIuM4riY0xXhqOMxe+9v0LW
Lubg4EjWB3UE0IeOeFigIEKFHnmQD6oQbGq9eoc9EK1hxzqBi9PIGiV/sSdNVaaQ
vIgJ7UcJVWRTBk6ADky9vMgToRy3J6F0/r0/4N7039tYNLFKTfi++Y4uppDTt+ln
q7/zGhTNa9AlblpOyTY/gKh0o62yerjxp3EcUQGkK3ACie7/uJrO7elxUrCFb7f9
AE62e3in7dAscA5TQUUyPgZl2Fhrb4/YfErQdSlDgvj5/dlliZVuGMSHF8NsRJEW
WR8Jdr392SEXPqk0/q/1vpd0yYvc6yU3joFY6MTjIX2W
-----END CERTIFICATE-----
Generated at Mon Oct 5 23:04:24 2026 by rpki-client