Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83c9f9c4-39a2-4f5f-9188-1a9e0dccf209.roa
File: 83c9f9c4-39a2-4f5f-9188-1a9e0dccf209.roa (raw, json)
Hash identifier: E133JV8JPE3N2mhY5VduC1cW2/44hn5MJqKW1NITTZw=
Subject key identifier: F2:31:83:32:9D:67:EE:43:0D:79:7D:24:09:27:CD:B2:0C:76:0E:F9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 465D65A1F4FB9E72CD444CCE9CA7C0BD4D627261
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83c9f9c4-39a2-4f5f-9188-1a9e0dccf209.roa
Signing time: Fri 07 Aug 2026 05:50:11 +0000
ROA not before: Fri 07 Aug 2026 05:50:11 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.150.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 23:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:5d:65:a1:f4:fb:9e:72:cd:44:4c:ce:9c:a7:c0:bd:4d:62:72:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:11 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=173911e5b59776f18f27acd9ff0db52ceeb4c38bf5b5615dbdb8f24320b05eb1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:24:77:b2:ff:b9:52:45:7a:c2:0e:9d:0f:
9d:f9:6a:89:ea:a8:b4:f9:09:1f:da:2a:a8:33:d0:
0a:b2:7b:18:2d:b3:58:a1:de:15:f4:c6:66:b2:ac:
2b:94:de:b1:cd:85:32:f4:3b:dd:b7:c0:1e:39:9a:
65:df:f7:60:fb:96:e5:e2:cd:9b:89:f5:ba:a7:4d:
18:80:a0:65:bf:29:2d:67:6c:5c:02:93:75:57:fa:
ec:65:75:d8:96:8b:10:03:56:d9:81:e3:df:7c:81:
61:09:1d:b1:89:91:f7:9b:11:77:9a:14:c2:ea:ab:
0e:d4:fb:59:39:38:fd:e3:ad:6b:72:9a:d0:47:af:
c3:ce:d3:b2:25:51:9c:55:94:09:f3:8f:ad:5e:57:
d1:20:ce:7d:b8:01:31:c0:4b:a2:08:24:d6:7e:35:
95:b0:cf:cc:cd:bd:78:c6:2b:87:42:c4:36:1e:fc:
ba:e4:6f:4d:0d:fc:11:1d:da:ea:69:e4:e7:7c:8a:
c9:7f:08:5a:bb:3d:7b:6b:42:47:a9:e5:a0:dd:fb:
24:6f:02:fc:86:42:99:94:36:7e:05:cc:8a:3e:ac:
a7:e6:1a:1d:57:91:a9:58:05:15:f2:ac:5c:e8:16:
e0:75:6a:52:47:c9:26:af:9e:88:a8:75:a2:4d:03:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:31:83:32:9D:67:EE:43:0D:79:7D:24:09:27:CD:B2:0C:76:0E:F9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83c9f9c4-39a2-4f5f-9188-1a9e0dccf209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.150.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:57:b2:17:73:0e:2d:60:5a:70:68:75:e0:9b:10:17:31:e4:
c3:a1:7b:0c:c6:78:2f:27:96:03:81:cb:f0:f1:1b:87:fc:b0:
ce:c5:01:e2:5b:92:cb:73:f6:25:a7:cb:50:13:7a:b4:26:5e:
4e:77:ec:ac:55:fb:0d:20:8e:ff:9f:b2:d9:b5:5c:07:36:3b:
ff:41:3c:9e:09:97:0a:b6:2c:21:98:e3:77:c7:6c:1c:4f:4c:
72:37:e0:72:86:db:90:74:10:6c:0d:5a:43:bd:b8:86:0c:a3:
4e:68:85:30:95:c5:5a:6b:e8:a1:1a:94:63:b0:09:61:9a:1f:
bc:2c:86:62:85:3a:03:eb:73:bc:47:a5:d4:6b:57:c9:ff:1d:
11:9c:8b:9a:30:ff:0e:c9:d9:ea:43:34:d5:3a:4a:56:c1:a1:
79:f8:ca:e8:0d:72:2b:76:d3:ef:46:89:a2:a5:fb:07:38:d3:
9c:08:05:25:3a:37:2d:a4:0f:07:e0:83:84:69:b9:8e:04:97:
42:61:51:6a:12:90:70:5c:0d:46:af:fc:f9:5c:de:2d:06:40:
b0:9b:23:69:d9:69:6c:80:58:1f:36:be:26:f1:62:00:d8:89:
8d:a4:29:5d:ee:a6:a0:6d:d3:a5:a1:fd:73:70:13:c4:79:c7:
8e:19:03:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 06:06:35 2026 by rpki-client