Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8d2d588e-ac05-4633-acba-4d5705f7071e.roa
File: 8d2d588e-ac05-4633-acba-4d5705f7071e.roa (raw, json)
Hash identifier: c13aoumvRC+RBqp/k8rxECvCitMZwmsoQe6W9CSOZ3I=
Subject key identifier: F6:36:6E:70:A8:C9:D5:CD:19:5F:A6:20:BE:74:16:00:C0:F4:6C:20
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0B4D0930FA28781254364DCE3F3ACA265AE84767
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8d2d588e-ac05-4633-acba-4d5705f7071e.roa
Signing time: Fri 07 Aug 2026 05:50:31 +0000
ROA not before: Fri 07 Aug 2026 05:50:31 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.180.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4d:09:30:fa:28:78:12:54:36:4d:ce:3f:3a:ca:26:5a:e8:47:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:31 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=6d9856213f24570f7ab22dd235a2951d6286757419549717bf8abf7b272a9ef9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:8b:cf:4a:08:c7:ca:ac:c1:43:88:57:46:
d6:5e:cf:86:5c:0e:e3:c9:34:47:fe:46:6b:aa:98:
10:b7:51:73:b5:d3:03:28:6c:37:d7:b8:12:4e:4d:
58:9d:dd:c2:de:a9:fb:26:24:24:d5:20:7a:8d:4a:
5c:3f:d8:f5:5c:7e:9e:91:8d:61:7f:31:a1:fe:71:
14:9b:35:76:b3:ae:ae:5c:03:49:4b:b2:77:85:c0:
e2:a9:7b:f0:db:0a:87:fb:9d:be:83:a2:49:66:2a:
56:75:cb:98:03:71:aa:ba:df:be:74:09:17:80:e8:
6c:52:28:b6:91:a1:06:3f:08:5e:90:b6:39:d2:fb:
3b:9b:df:b5:ed:63:b2:d3:98:17:38:80:eb:20:9c:
6e:b1:23:34:0c:e8:1f:92:ca:58:41:d2:7f:a4:a9:
d0:68:86:dc:e2:fd:4e:ec:ae:30:ca:ea:a3:e3:06:
47:c3:91:18:47:62:ca:93:5c:14:d8:59:af:89:71:
c1:cb:77:db:d7:3a:19:c4:40:c0:73:d0:98:bb:c2:
0f:5a:fa:66:6e:80:eb:36:a3:fb:44:41:42:40:bd:
18:58:b2:8e:a9:e0:f5:61:55:00:89:6f:2e:3b:86:
06:e7:89:a2:18:36:7a:3e:0b:bb:ad:f7:f5:ce:ac:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:36:6E:70:A8:C9:D5:CD:19:5F:A6:20:BE:74:16:00:C0:F4:6C:20
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8d2d588e-ac05-4633-acba-4d5705f7071e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.180.0.0/15
Signature Algorithm: sha256WithRSAEncryption
6a:a4:09:90:67:0e:af:a4:f0:53:ce:33:14:0f:dc:5c:d5:e2:
ea:ce:0c:22:1b:6e:3f:08:1a:f5:15:67:3b:03:43:b2:21:8a:
9f:dc:3b:c9:3d:df:37:9b:18:cc:ae:57:c7:f5:03:21:06:08:
9c:ed:dd:37:ef:42:d6:33:e8:1e:c4:79:5d:e1:46:ca:52:d9:
41:c9:cd:2c:b0:b5:e7:97:47:63:10:fa:0e:4e:c9:f0:c9:98:
34:49:d6:27:a4:9c:f3:30:82:f3:1c:94:cc:cc:4f:8a:ac:b2:
1e:6b:c8:f8:f5:4f:d2:66:b6:1d:2e:a8:6f:b1:6f:f5:a1:fa:
a2:d6:5c:75:db:85:d2:39:bb:f9:2e:db:d9:f0:d4:ef:4c:a5:
37:a6:87:d7:db:29:4b:f3:3f:e7:47:08:62:64:08:78:31:55:
8c:28:17:f1:01:ca:7c:53:5d:5c:ba:ee:90:50:81:d0:f7:47:
a6:ff:2f:fe:0e:da:64:da:4b:c7:3d:66:3b:ad:eb:5f:ac:99:
5a:af:85:82:e9:eb:da:a4:b4:03:8d:88:33:16:b6:9b:55:66:
7c:0c:c9:ec:98:d0:a3:88:e1:5d:a1:b9:b4:5a:01:b4:17:fe:
f8:a3:5b:64:d8:6a:45:00:ec:18:2e:a1:67:61:ab:3a:a4:89:
b6:37:4b:cb
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUC00JMPooeBJUNk3OPzrKJlroR2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDcwNTUwMzFaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDZkOTg1NjIxM2YyNDU3MGY3YWIyMmRkMjM1YTI5NTFkNjI4Njc1NzQxOTU0
OTcxN2JmOGFiZjdiMjcyYTllZjkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI1Pi89KCMfKrMFDiFdG1l7PhlwO48k0R/5Ga6qYELdRc7XTAyhsN9e4Ek5N
WJ3dwt6p+yYkJNUgeo1KXD/Y9Vx+npGNYX8xof5xFJs1drOurlwDSUuyd4XA4ql7
8NsKh/udvoOiSWYqVnXLmANxqrrfvnQJF4DobFIotpGhBj8IXpC2OdL7O5vfte1j
stOYFziA6yCcbrEjNAzoH5LKWEHSf6Sp0GiG3OL9TuyuMMrqo+MGR8ORGEdiypNc
FNhZr4lxwct329c6GcRAwHPQmLvCD1r6Zm6A6zaj+0RBQkC9GFiyjqng9WFVAIlv
LjuGBueJohg2ej4Lu6339c6skSUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBT2Nm5w
qMnVzRlfpiC+dBYAwPRsIDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OGQyZDU4OGUtYWMwNS00NjMzLWFjYmEtNGQ1NzA1ZjcwNzFlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATO0MA0G
CSqGSIb3DQEBCwUAA4IBAQBqpAmQZw6vpPBTzjMUD9xc1eLqzgwiG24/CBr1FWc7
A0OyIYqf3DvJPd83mxjMrlfH9QMhBgic7d0370LWM+gexHld4UbKUtlByc0ssLXn
l0djEPoOTsnwyZg0SdYnpJzzMILzHJTMzE+KrLIea8j49U/SZrYdLqhvsW/1ofqi
1lx124XSObv5LtvZ8NTvTKU3pofX2ylL8z/nRwhiZAh4MVWMKBfxAcp8U11cuu6Q
UIHQ90em/y/+Dtpk2kvHPWY7retfrJlar4WC6evapLQDjYgzFrabVWZ8DMnsmNCj
iOFdobm0WgG0F/74o1tk2GpFAOwYLqFnYas6pIm2N0vL
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:05 2026 by rpki-client