Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8c7710c7-6ab8-4545-b04c-0bbeaa573eae.roa
File: 8c7710c7-6ab8-4545-b04c-0bbeaa573eae.roa (raw, json)
Hash identifier: 7q++sJicPXHR7O+tzGMiVWYan6+4p3Hb33Z90D0kTk0=
Subject key identifier: 58:F6:E7:CF:18:5F:51:41:FE:8A:DA:15:5C:8A:E2:E2:D3:93:08:55
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4EC27DD00AF34CC126BEAF2FCA32D71C4571B90A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8c7710c7-6ab8-4545-b04c-0bbeaa573eae.roa
Signing time: Sat 08 Aug 2026 01:00:27 +0000
ROA not before: Sat 08 Aug 2026 01:00:27 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.112.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:c2:7d:d0:0a:f3:4c:c1:26:be:af:2f:ca:32:d7:1c:45:71:b9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 01:00:27 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=91dfcbb94efd07aecdc70bd199d8d9274e39e4d7c5db8a8fd24a0ab421fb8270, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a4:25:e3:d5:2e:a2:2b:b1:14:b6:75:af:0d:
7e:41:5e:50:b1:bf:b1:01:b9:15:a8:36:1c:05:6c:
39:38:6a:33:e4:94:54:ae:7a:00:17:da:5c:33:e4:
49:e2:de:6e:db:af:d7:a9:eb:02:4d:df:ca:6d:7d:
76:9e:b0:0b:37:3e:c3:f1:b9:03:f8:e2:34:ad:06:
4f:6c:6e:79:be:84:8b:73:92:2d:27:11:c1:da:e3:
8e:8b:6d:8e:70:8c:0f:15:d9:3f:10:f6:f1:38:31:
43:5c:b0:85:f3:0a:66:cd:04:ca:6c:32:38:0f:09:
bf:96:7c:cc:75:f0:13:c9:cc:27:f5:61:dc:3f:c6:
09:2e:a7:60:53:69:dc:8c:4e:60:50:38:cc:c6:98:
a1:b5:f1:2c:ad:8e:91:70:db:f6:f7:88:4e:27:41:
a5:fc:b1:b3:3c:64:38:84:3f:9f:ed:16:af:b1:e1:
90:54:6c:96:47:e7:67:fe:d5:ce:be:38:44:ab:5e:
55:f3:d5:bf:b3:82:fa:d1:be:35:cd:4a:c3:9b:16:
64:60:13:0a:23:78:1e:7a:e7:93:64:f1:ee:57:a2:
83:57:06:ee:30:35:92:32:78:b9:45:36:7a:38:2e:
91:c6:5d:95:43:ba:5c:58:b0:d6:af:0e:12:73:4b:
d9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F6:E7:CF:18:5F:51:41:FE:8A:DA:15:5C:8A:E2:E2:D3:93:08:55
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8c7710c7-6ab8-4545-b04c-0bbeaa573eae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:74:a6:59:dd:93:09:c3:9a:92:b3:4b:64:7a:e3:5f:0f:ab:
ab:be:6f:d7:85:7f:be:f0:50:65:b8:87:dc:ea:44:56:42:dd:
43:ef:59:a7:ea:49:97:72:8d:86:8c:45:4a:d2:fe:a3:5a:bc:
92:46:b4:4d:2c:19:8f:e2:28:fa:ba:d6:2b:0d:8c:28:58:d3:
e6:3d:fa:01:a2:6d:6b:5f:04:18:28:eb:0c:58:69:4f:90:12:
e2:1a:91:f8:94:67:15:43:ae:b1:96:14:77:a6:d0:83:1d:b6:
83:39:65:d3:43:17:f4:81:68:b0:d3:b4:da:cf:38:4a:36:77:
1c:d6:4c:7d:d0:5d:b5:53:1d:fa:14:f3:78:82:46:c3:18:08:
09:a5:19:12:4e:dc:56:66:37:0b:df:76:eb:f7:4a:bf:7b:bf:
38:61:8f:a6:5b:17:14:27:e7:51:fe:c6:e1:7f:12:cb:f1:62:
07:7f:b4:af:f3:eb:20:40:84:4d:b2:08:2e:12:5f:5f:10:86:
19:3a:53:93:59:cb:40:a3:d8:36:bb:8c:9f:c5:52:c0:c8:39:
56:af:f8:83:3d:ae:56:fd:ff:85:44:86:9d:ea:40:d9:9b:66:
0b:61:0b:1e:39:d6:7a:12:f7:bf:f0:32:e8:17:fc:b8:b9:9a:
25:ac:9a:bc
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUTsJ90ArzTMEmvq8vyjLXHEVxuQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDgwMTAwMjdaFw0yNjExMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDkxZGZjYmI5NGVmZDA3YWVjZGM3MGJkMTk5ZDhkOTI3NGUzOWU0ZDdjNWRi
OGE4ZmQyNGEwYWI0MjFmYjgyNzAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANWkJePVLqIrsRS2da8NfkFeULG/sQG5Fag2HAVsOThqM+SUVK56ABfaXDPk
SeLebtuv16nrAk3fym19dp6wCzc+w/G5A/jiNK0GT2xueb6Ei3OSLScRwdrjjott
jnCMDxXZPxD28TgxQ1ywhfMKZs0EymwyOA8Jv5Z8zHXwE8nMJ/Vh3D/GCS6nYFNp
3IxOYFA4zMaYobXxLK2OkXDb9veITidBpfyxszxkOIQ/n+0Wr7HhkFRslkfnZ/7V
zr44RKteVfPVv7OC+tG+Nc1Kw5sWZGATCiN4Hnrnk2Tx7leig1cG7jA1kjJ4uUU2
ejgukcZdlUO6XFiw1q8OEnNL2YkCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRY9ufP
GF9RQf6K2hVciuLi05MIVTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OGM3NzEwYzctNmFiOC00NTQ1LWIwNGMtMGJiZWFhNTczZWFlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNwMA0G
CSqGSIb3DQEBCwUAA4IBAQBvdKZZ3ZMJw5qSs0tkeuNfD6urvm/XhX++8FBluIfc
6kRWQt1D71mn6kmXco2GjEVK0v6jWrySRrRNLBmP4ij6utYrDYwoWNPmPfoBom1r
XwQYKOsMWGlPkBLiGpH4lGcVQ66xlhR3ptCDHbaDOWXTQxf0gWiw07TazzhKNncc
1kx90F21Ux36FPN4gkbDGAgJpRkSTtxWZjcL33br90q/e784YY+mWxcUJ+dR/sbh
fxLL8WIHf7Sv8+sgQIRNsgguEl9fEIYZOlOTWctAo9g2u4yfxVLAyDlWr/iDPa5W
/f+FRIad6kDZm2YLYQseOdZ6Eve/8DLoF/y4uZolrJq8
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:02 2026 by rpki-client