Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/96060ba0-0bb4-49bc-8bf6-4a1495ffddf4.roa
File: 96060ba0-0bb4-49bc-8bf6-4a1495ffddf4.roa (raw, json)
Hash identifier: RXyc+p+B6bFoPYb69xLitiLG76QYKcYPaa1uPIu9+PI=
Subject key identifier: B7:61:94:A9:2F:40:EF:1A:8B:04:E4:A1:20:B2:C7:D2:95:4E:47:B7
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 292A605A2AA1226F5038431A667076E974CDA524
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/96060ba0-0bb4-49bc-8bf6-4a1495ffddf4.roa
Signing time: Sun 04 Oct 2026 00:40:26 +0000
ROA not before: Sun 04 Oct 2026 00:40:26 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.20.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:2a:60:5a:2a:a1:22:6f:50:38:43:1a:66:70:76:e9:74:cd:a5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:26 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=2703b6cbdc28ec9f19361cd30a8fe364a1295ffcd1d9387a8095d93229bb1e9c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5f:9d:c6:5d:c7:62:6e:90:ca:f3:c7:0f:2b:
82:47:7c:40:03:5f:e6:c5:f0:06:5b:d3:03:7b:76:
7e:45:25:c5:34:28:22:a0:33:04:18:b8:4f:4c:b7:
7e:89:9a:5b:86:60:80:bc:90:0d:ec:b8:97:07:06:
a9:3e:f8:71:f7:cf:87:46:4f:80:a6:11:15:58:5b:
64:f7:d9:1f:6e:75:06:60:31:b3:86:8d:73:dc:23:
cf:27:de:cd:c0:18:67:62:94:e0:5d:26:83:21:04:
35:d1:40:4d:ab:58:1a:55:5f:29:1e:36:e4:4c:48:
2f:1d:2b:36:d7:cd:9e:4e:fe:50:40:c4:7b:7b:e6:
43:63:be:71:ca:a3:48:5a:fb:8d:bc:bb:49:32:df:
a5:ec:cb:f8:17:0e:0f:d7:9f:d5:39:4e:38:24:dd:
b9:3d:e0:4b:60:c0:29:25:11:b8:2a:56:c3:3c:db:
b7:5d:53:d7:f2:ac:51:b8:0e:7d:93:a7:5d:60:17:
d1:e3:ec:07:13:ba:6f:93:41:2f:ca:22:e1:d7:4c:
67:47:23:af:eb:a0:5a:cc:95:d7:8e:aa:14:07:27:
8d:d5:04:64:0e:64:da:83:29:c8:46:f3:de:97:a6:
d1:9c:03:8d:de:e3:9e:94:ce:fb:2c:1b:82:25:b2:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:61:94:A9:2F:40:EF:1A:8B:04:E4:A1:20:B2:C7:D2:95:4E:47:B7
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/96060ba0-0bb4-49bc-8bf6-4a1495ffddf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.20.0.0/14
Signature Algorithm: sha256WithRSAEncryption
85:21:b1:b0:fb:d5:bd:13:5b:de:21:5b:02:dd:b2:4e:a8:b3:
d5:eb:ba:60:18:02:a5:ff:99:31:c1:e0:4a:46:26:14:5a:5f:
4e:db:a6:d9:5c:e5:17:32:93:35:14:b3:35:52:b0:a9:f2:5d:
56:eb:55:7d:d7:e6:5a:22:42:52:8a:23:5a:43:e0:23:a0:d8:
30:f7:f6:dc:1c:39:43:d5:33:31:59:8e:37:e7:bf:1d:57:f0:
50:d6:a2:d6:90:48:a7:da:92:bf:c5:fa:a5:e9:0e:ba:7c:7d:
dc:18:40:bc:03:15:07:fc:af:6d:d6:5e:33:6b:ed:10:4b:57:
f6:1e:c6:38:36:db:f1:55:37:25:c1:2a:3a:cf:32:da:7d:6d:
a3:b0:8c:3b:9a:eb:e3:fe:fb:bf:ec:27:e7:c2:da:ef:87:ac:
10:c1:5f:d0:b5:8b:2f:6b:ca:a9:93:2d:2e:ba:5d:b6:16:57:
54:9e:ff:b2:56:01:00:d5:a1:96:45:86:20:0e:37:4f:1e:84:
c6:8e:50:06:8b:34:c6:2b:71:bd:8f:6b:bd:9c:68:9f:84:1e:
b9:10:73:4f:1f:0a:d5:8b:95:31:d6:f8:32:2c:df:08:aa:1c:
d0:9a:ad:0f:c2:6b:9c:49:9a:e2:fe:09:7a:e0:b7:a8:f9:ad:
34:6b:67:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:34:36 2026 by rpki-client