Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83c9f9c4-39a2-4f5f-9188-1a9e0dccf209.roa
File: 83c9f9c4-39a2-4f5f-9188-1a9e0dccf209.roa (raw, json)
Hash identifier: e+3z/sx0E/crAdHA4MzWEQgdyIToQJSVlzIEa0hCAbI=
Subject key identifier: 82:A7:23:F4:29:00:FF:2A:6D:AB:95:AE:F2:A0:E8:DF:59:8A:C7:7A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 39662C6E4875B6F24136CA933CA18D05BA428811
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83c9f9c4-39a2-4f5f-9188-1a9e0dccf209.roa
Signing time: Mon 26 Oct 2026 05:40:36 +0000
ROA not before: Mon 26 Oct 2026 05:40:36 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.150.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:66:2c:6e:48:75:b6:f2:41:36:ca:93:3c:a1:8d:05:ba:42:88:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:36 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=f4db9827618f3d8810d1ecbb47ce24418fcee7deb97c02d891c952a24850d6c9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:c3:ad:f1:7c:eb:70:15:48:f3:d7:29:ff:
87:32:77:91:60:94:ad:f8:9a:18:d7:f1:43:6d:23:
6d:cf:54:28:88:b6:d3:66:45:4c:fe:3d:4b:36:2a:
fb:4a:03:8a:42:ef:5f:d6:99:01:fa:05:a1:62:ec:
0b:ff:b9:b4:ff:82:44:81:ed:af:32:ba:46:a0:7b:
7b:e0:0c:bd:15:2c:b4:aa:ae:6b:3c:ec:50:34:e1:
99:96:77:2b:8f:66:14:a9:db:82:4c:08:1a:3e:60:
52:b3:e4:fc:59:54:13:28:12:74:c4:21:69:d6:a1:
00:a3:89:d3:be:f3:f9:ed:be:b4:b4:c1:b5:24:7e:
3e:f2:55:ce:51:53:6c:8a:7f:65:95:bb:db:e8:2e:
a2:58:7c:d3:9e:d3:2c:5e:d9:8e:3c:04:51:50:a7:
b9:64:ed:57:d5:fd:b0:5b:ee:88:e3:60:b0:fa:4b:
12:5c:23:b2:3c:d5:c6:90:b4:26:73:ea:48:fe:18:
12:8a:6c:b5:11:4a:a8:62:e4:ef:89:26:52:98:25:
f3:97:29:f0:05:56:4d:82:f1:d8:9a:65:ca:9d:2a:
4f:ea:fe:c6:c4:d0:db:5e:c4:70:e0:dd:a1:b5:8a:
e9:f7:04:61:f6:25:cb:c3:33:68:7a:cd:58:55:d7:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A7:23:F4:29:00:FF:2A:6D:AB:95:AE:F2:A0:E8:DF:59:8A:C7:7A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83c9f9c4-39a2-4f5f-9188-1a9e0dccf209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.150.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:87:9b:13:82:a1:ae:23:69:5d:54:bd:ac:62:d1:9a:d0:4b:
96:8e:0a:21:ec:ce:58:c4:6f:02:e4:60:07:4a:31:f7:a9:dd:
59:27:05:e9:4b:f0:90:67:f0:eb:ff:0c:08:f5:3b:28:3c:0b:
a6:f3:b5:b3:d8:10:ea:77:99:b2:f0:b2:a3:6d:f0:dd:65:2e:
d3:f9:4a:6f:d0:18:f1:2a:cb:a3:f2:3f:cb:a2:89:82:5d:3f:
a5:0b:6e:72:bd:97:0d:8a:8c:64:9d:58:cc:12:95:f7:bc:5a:
7e:2d:ff:f2:35:6c:c6:96:7d:ba:2c:88:18:c3:c5:c8:b2:95:
42:32:85:f4:30:ef:f8:dd:1d:cc:10:83:43:4c:19:75:b2:e7:
6d:22:c2:e3:12:ce:d4:7b:ff:5c:aa:e7:65:3b:4f:0c:e2:32:
51:38:bf:7e:6b:32:f1:4c:b7:30:4b:d4:1e:5a:35:07:fe:9f:
1b:05:c1:f4:de:c3:f0:66:6b:35:27:d1:49:7a:38:df:57:9b:
6b:d0:f8:da:d5:18:f5:11:2e:f3:b5:89:bc:92:4d:77:f7:3d:
9a:87:ff:57:fb:c2:d7:f5:12:b6:b7:29:8a:52:29:4f:f7:42:
6e:44:18:90:7a:29:45:5b:0d:35:da:4f:a0:dd:11:51:26:06:
3b:18:f2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:35:45 2026 by rpki-client