Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/81e19e5f-8cac-4cc7-8c10-c589c96920d0.roa
File: 81e19e5f-8cac-4cc7-8c10-c589c96920d0.roa (raw, json)
Hash identifier: MjEhVU/WJJur9sAFfABtp902NyAiXYYkeApXTPyZJkc=
Subject key identifier: BA:1F:B0:EF:E8:09:C5:7F:86:6D:E1:C4:49:25:B6:1F:57:92:7D:07
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7DDB1A90C853A6DD87B36B4EC9FF6E9776FDCF44
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/81e19e5f-8cac-4cc7-8c10-c589c96920d0.roa
Signing time: Sat 08 Aug 2026 01:00:06 +0000
ROA not before: Sat 08 Aug 2026 01:00:06 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.17.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:db:1a:90:c8:53:a6:dd:87:b3:6b:4e:c9:ff:6e:97:76:fd:cf:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 01:00:06 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=63ad56492ca09f6428031644938028a5df91014e649417d15e3055a4d8f57d3f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:16:ba:77:57:bc:01:d1:90:48:1a:bc:49:
aa:4f:f9:e0:da:f2:e7:64:5d:8f:5e:30:3c:7a:38:
65:2f:cb:fa:98:9a:28:c7:89:19:4f:bd:ef:aa:71:
68:41:0c:6a:d7:34:4b:7d:32:02:27:16:e9:3e:50:
d7:07:2c:3f:22:27:a6:65:de:9e:44:4a:9a:ff:03:
8e:70:8f:f6:ed:29:ff:81:87:5f:1b:25:5e:61:2d:
73:0a:70:43:34:ef:9a:b6:7c:29:03:d9:6f:1a:98:
05:52:f3:7e:82:ff:cd:1b:23:fd:c2:60:20:ee:00:
9a:47:51:9c:ab:50:f4:dc:10:37:8f:c1:53:a9:b4:
da:c7:a9:97:1d:d5:09:2f:d4:93:7c:31:74:71:44:
22:23:14:86:e0:ac:2e:de:25:1a:cb:17:a1:76:8d:
96:2a:53:f6:2e:5e:ae:04:1d:fa:72:69:69:3d:4b:
c9:b7:0e:cc:ae:96:f5:c9:d4:b5:25:2d:e9:45:e1:
6c:59:96:5c:6b:7b:60:e2:b9:03:a8:cc:b0:86:93:
35:95:1b:2e:8e:a8:d7:6b:1e:e3:5b:a9:d9:cc:3d:
24:76:b8:85:03:85:df:ac:9f:9a:6d:ba:23:1d:ed:
00:02:25:da:c1:e0:e5:eb:9b:fb:73:be:33:1b:4b:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1F:B0:EF:E8:09:C5:7F:86:6D:E1:C4:49:25:B6:1F:57:92:7D:07
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/81e19e5f-8cac-4cc7-8c10-c589c96920d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.17.1.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0d:ea:e6:52:b6:04:02:74:eb:74:33:b4:37:e4:83:a0:40:
c7:65:49:a5:db:ff:55:2e:95:92:58:9e:04:26:ae:ca:9d:88:
ca:57:11:b3:20:33:85:a1:ba:56:aa:b4:0a:4a:12:9e:36:77:
6d:28:c8:91:7e:53:c4:ef:4b:54:3f:a8:3c:bc:15:c2:19:e5:
d2:1d:f9:44:35:18:38:49:4e:63:84:18:d1:c6:05:97:49:cc:
f9:af:ec:16:f6:64:b5:25:f0:9c:5a:0b:82:97:9a:45:cd:08:
b8:0f:cd:69:8e:ba:d0:82:02:0f:70:fa:38:66:bb:f5:e1:05:
fb:ab:ec:16:1d:c6:5b:5d:a1:0c:d3:f1:ad:36:3d:37:7e:9c:
ce:f4:59:3a:94:df:1b:c5:ba:e8:ef:c9:7b:dd:98:ba:e9:0c:
b2:c3:e5:e5:cd:80:cf:48:16:58:04:e8:dd:b5:8e:91:73:de:
3f:47:bb:fd:b0:81:cb:8e:0d:ba:19:15:c4:0d:ec:1b:95:3e:
da:b0:cf:b5:3f:67:e4:6f:89:80:f7:f3:01:fb:57:e4:a4:ca:
d6:06:6f:2a:ca:07:48:33:b4:b6:fb:c9:11:b3:b0:e2:7a:2f:
88:f6:b9:a2:9a:14:76:a4:d1:14:84:33:75:17:dd:6f:36:42:
6d:4e:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:16 2026 by rpki-client