Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/87cbc454-e777-437d-a43a-911995d2a7ce.roa
File: 87cbc454-e777-437d-a43a-911995d2a7ce.roa (raw, json)
Hash identifier: 6SMtYUe8Pr8CKn4EnMBSd/bs8aQzc/2EoukPIOHAhoQ=
Subject key identifier: 3A:C2:EA:D6:85:FF:2C:D5:89:78:7D:E6:31:BB:11:39:AA:BE:8A:10
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7D93103E5321A7911F72CA5C24D5517F8CE6B97A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/87cbc454-e777-437d-a43a-911995d2a7ce.roa
Signing time: Sun 04 Oct 2026 00:40:22 +0000
ROA not before: Sun 04 Oct 2026 00:40:22 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.21.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:93:10:3e:53:21:a7:91:1f:72:ca:5c:24:d5:51:7f:8c:e6:b9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:22 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=218b152fac7188adf45550841fee42ac67dbef13bbf1dfb358a6a77b7286aaaa, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cf:81:be:b2:97:89:0b:27:c8:8d:74:63:fa:
49:29:6d:7b:96:02:b3:f4:ad:93:43:c9:3f:b8:ae:
4c:9a:c4:09:ac:66:c0:84:01:d2:05:4c:dc:99:92:
e9:b7:4a:b8:1a:f2:d7:5a:79:a4:85:92:fe:30:d4:
19:49:e5:5b:1d:ec:ee:bf:72:75:f1:2c:c9:4c:ad:
c3:12:f8:4d:0c:23:c4:95:05:22:5c:7e:17:71:26:
00:13:c8:91:57:e4:5c:68:aa:35:87:49:ad:c6:44:
74:e6:59:25:3f:a1:4b:75:6a:4e:ba:a9:f4:fb:15:
e8:97:e7:4f:2f:f8:56:67:79:e1:81:bb:f3:d6:3c:
82:36:9a:0d:db:e2:ba:a5:f1:fb:ea:8d:e2:bc:ff:
40:f4:e3:5a:1e:1a:c9:48:3f:96:60:39:6d:42:f2:
71:82:36:c4:c7:45:46:3a:39:fe:72:46:c8:c4:09:
28:2d:6b:4f:e4:86:40:f0:01:ef:6c:35:57:b3:d1:
e3:6b:41:b1:c9:db:c7:da:77:d6:f6:62:fb:ca:94:
11:26:58:34:1f:51:2d:3d:b7:55:5e:71:9b:f0:ee:
1a:24:b6:90:b2:5e:8e:94:bf:a0:da:40:11:d5:70:
ae:9a:a0:62:97:f1:a0:25:b3:52:94:e5:90:27:45:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C2:EA:D6:85:FF:2C:D5:89:78:7D:E6:31:BB:11:39:AA:BE:8A:10
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/87cbc454-e777-437d-a43a-911995d2a7ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.21.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:82:98:31:65:d4:6e:d1:17:9b:25:6b:6f:86:36:76:44:8e:
6e:0d:eb:41:60:cd:35:16:82:0a:b4:46:28:f8:54:e4:2a:8c:
37:7f:b3:97:53:14:2d:f9:70:53:29:c6:96:64:20:26:f9:a4:
7c:24:89:52:dd:29:97:ca:6c:d4:b3:42:34:69:7b:a5:da:68:
ed:e5:4a:99:4a:ed:14:07:ee:20:f1:b1:c1:b0:63:e9:e2:0b:
c8:92:48:6b:bc:ca:4b:ce:31:6f:9d:97:71:34:dc:33:fc:60:
ea:e4:e8:b9:ae:71:6e:51:71:df:ef:ff:81:d5:36:c6:51:21:
73:63:0e:05:d0:5d:48:5e:46:34:20:1a:e1:27:d1:31:a3:b7:
b2:31:ba:37:6c:91:1c:87:54:9a:de:2e:4d:54:10:43:82:99:
05:ec:be:06:e1:19:67:fe:2b:a6:e7:e0:70:04:45:cb:f4:50:
76:e6:e6:4d:b7:c9:92:fe:a8:1a:be:a2:f9:49:6a:58:14:88:
ff:55:2e:f3:14:a7:ea:6d:0f:43:16:df:31:30:af:17:95:b0:
6f:f6:d5:90:3b:07:de:a0:f8:9a:db:f4:99:7c:f4:7a:9a:64:
3b:3c:f7:e1:37:50:2f:fa:aa:1f:46:87:e9:34:05:22:70:65:
a4:9e:bb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:45:27 2026 by rpki-client