Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa
File: 8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa (raw, json)
Hash identifier: pmUgOUm4D83Gv30JhMAu7xwcodJwRfAObLLO8ob0r+w=
Subject key identifier: 3A:9A:ED:B4:99:16:64:14:6C:5D:28:6D:E7:32:D2:4F:EC:C3:F9:6A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 34852DE695F94AA87C92BBEBAB1F134150B24F00
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa
Signing time: Fri 07 Aug 2026 06:00:19 +0000
ROA not before: Fri 07 Aug 2026 06:00:19 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.226.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 15:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:85:2d:e6:95:f9:4a:a8:7c:92:bb:eb:ab:1f:13:41:50:b2:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 06:00:19 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=aa1de50c2828adf6011fd7e249edc8e86e75b3505cf0d5d2f7a76394aaa93f2f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:f3:66:51:8b:fc:b9:50:f4:49:6d:89:63:
6e:88:b4:27:fb:0d:3f:8e:40:24:36:23:e3:f2:5c:
51:ca:4e:09:3f:be:c6:39:5b:bf:d2:f5:cb:a5:cc:
18:29:73:0d:94:cf:69:43:ce:ab:5d:5d:fa:59:5b:
7b:c2:4a:b5:ca:77:8a:71:d4:a0:eb:7d:3b:78:6d:
9a:48:26:b4:14:49:5f:93:8b:7d:1c:12:75:a1:67:
4c:f9:ad:fd:69:66:61:9b:d9:db:37:a5:d0:48:52:
fc:55:94:ee:b4:ce:9c:a0:38:8c:52:0a:bd:d6:11:
29:ba:b5:27:d4:4b:e9:80:36:3d:f6:b4:93:b2:bb:
7e:c2:7d:73:fb:c4:93:3b:51:b9:9f:bf:ee:12:a0:
37:96:49:2e:ae:f6:22:2f:e3:86:ed:21:c3:52:50:
20:50:97:a8:d8:a6:47:f2:e5:89:17:69:eb:58:3c:
68:0d:11:25:d9:d4:84:83:89:62:d6:30:1b:51:d8:
f7:8a:c6:18:b1:fd:ee:b5:04:3f:2c:5f:6a:a1:2e:
77:e4:02:2c:1e:42:c2:f6:b1:b7:a5:21:d9:64:11:
de:50:dc:31:4d:c0:52:af:3d:cb:0d:ab:69:ed:90:
1f:d7:24:3b:bc:06:41:9e:41:1e:f9:fc:db:66:ca:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9A:ED:B4:99:16:64:14:6C:5D:28:6D:E7:32:D2:4F:EC:C3:F9:6A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8dcd1031-0c8d-4ee4-9563-57ddb63e1678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.226.0.0/15
Signature Algorithm: sha256WithRSAEncryption
8a:e3:72:0c:08:97:35:9e:91:21:fc:16:86:9b:bd:91:6f:32:
ad:17:f8:24:61:29:96:dc:34:ab:bd:1b:42:3b:b1:da:40:6e:
f5:96:4a:39:f3:5f:e4:0b:ab:c1:4f:76:c4:c0:15:3e:82:63:
30:de:77:35:be:fe:71:b4:41:ed:ba:b7:40:b6:18:b2:3e:b2:
b9:9d:90:ef:26:e7:68:10:71:cc:bc:ee:ca:9a:0c:cc:f1:4e:
5f:3f:3e:dd:7f:d4:d5:21:49:81:8c:46:c7:3d:2a:52:0e:ad:
04:ef:8b:3a:fd:99:f5:67:dc:b2:32:c5:ca:4c:11:63:fe:93:
2c:48:1d:c8:2a:9d:d8:a0:ee:ab:96:44:a1:ff:9e:cd:ac:19:
81:2c:e4:9a:b6:41:38:49:d0:96:78:a2:6f:aa:c3:f2:c5:fa:
86:72:c4:e7:e3:eb:95:b9:70:21:ce:e3:03:ba:2a:e9:17:9a:
e4:87:67:73:bb:b9:a0:9e:7f:f5:18:c9:6b:3b:45:99:0b:b0:
87:46:fd:54:48:d5:60:e5:a5:47:04:43:fd:c9:11:cc:7f:85:
04:53:a1:46:5b:d2:18:13:1e:2a:2a:7c:4d:83:6e:fd:dc:18:
79:46:ae:46:e3:bf:85:9d:75:59:33:4d:ba:8b:49:62:fb:d9:
b6:d2:35:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 23:31:38 2026 by rpki-client