Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9adb83e6-fa36-47fa-b5be-856fd7247898.roa
File: 9adb83e6-fa36-47fa-b5be-856fd7247898.roa (raw, json)
Hash identifier: 0n48hml2w+FCMDo9TKNDXYHKmNLDB+iczuj/oY6prmY=
Subject key identifier: 1C:C7:5D:3A:2A:92:7E:CF:29:4B:CF:A0:81:B2:C5:A4:4E:E2:EF:B3
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 26ACBEBFEDE3B139BCAD3B731EB4DBB25D3E37FF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9adb83e6-fa36-47fa-b5be-856fd7247898.roa
Signing time: Sat 08 Aug 2026 01:00:06 +0000
ROA not before: Sat 08 Aug 2026 01:00:06 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ac:be:bf:ed:e3:b1:39:bc:ad:3b:73:1e:b4:db:b2:5d:3e:37:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 01:00:06 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=3d27ac96efdcfe4c0677537bef87b8eee11e84bb3a81de3c06b5e6f8784a2206, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:26:0e:cb:52:c6:d1:bb:33:40:d5:b6:62:
5b:0c:87:d3:c3:ea:1f:0e:cf:b5:10:cd:2c:91:0e:
71:1d:bd:cd:73:e2:e0:1e:44:ea:63:16:0a:0b:1e:
d5:64:91:5a:5e:dc:9f:f1:60:42:b3:d8:26:e9:7c:
16:f6:99:3a:a3:7c:bc:01:62:96:c6:06:98:40:4f:
61:2e:15:b7:11:94:9f:e3:77:7f:2f:89:15:05:9d:
d6:b9:77:ce:d3:e5:8d:1a:61:f2:72:65:b9:96:bd:
68:6d:b9:2c:82:30:d1:bc:08:08:0e:5d:19:a6:a4:
05:9e:b6:a9:80:eb:83:ad:fa:67:c4:fb:8f:7d:95:
b3:29:0f:ac:58:02:1e:10:30:5a:5a:e0:6a:aa:ea:
31:e6:00:84:19:59:8a:a2:15:70:33:7a:cf:c8:3b:
d6:f3:32:5e:24:44:28:e2:33:d1:e5:ab:b4:fb:f3:
9e:94:7a:22:52:91:6b:b7:68:55:a5:07:97:b2:79:
b1:fb:28:be:f9:75:c3:c9:be:14:77:24:91:5d:59:
02:09:bf:76:4f:88:c0:46:5d:cf:9b:50:cf:10:6b:
a0:11:a9:7b:c1:ec:1f:34:4d:d4:4b:45:7b:b1:f2:
51:da:c4:a3:a1:92:51:fa:a1:c2:9b:62:6d:70:d0:
56:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C7:5D:3A:2A:92:7E:CF:29:4B:CF:A0:81:B2:C5:A4:4E:E2:EF:B3
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9adb83e6-fa36-47fa-b5be-856fd7247898.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.104.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:55:05:25:29:b1:29:7b:5a:50:d6:71:c6:93:e7:cf:42:7f:
ab:a0:fc:34:cb:07:b4:3a:b3:88:2f:f5:fb:c0:1b:72:8b:4c:
9f:ee:72:48:f4:9d:c7:dc:6e:85:94:04:e4:4a:16:cb:b9:1a:
3a:ef:27:8c:7a:17:14:90:3b:f1:94:b6:8a:22:05:e4:07:91:
ae:af:15:3e:da:c9:9f:70:07:f1:a1:a9:26:d6:0f:73:84:f5:
92:22:cc:2f:d4:2e:e7:04:53:8f:61:af:f0:24:f9:0a:cf:52:
4b:b8:e0:12:5a:3b:bd:7c:9b:e2:16:c8:39:4c:0f:4d:3a:1c:
90:61:68:d7:1d:0f:3a:fd:9a:e6:41:bf:c7:79:95:27:28:1d:
75:af:85:5e:2f:b7:05:9a:b5:f0:04:91:f1:ab:55:8b:b0:8b:
4c:d9:00:db:97:7a:fb:ef:86:b8:22:49:b9:c6:7d:df:68:d2:
f1:9c:71:2d:bf:69:ff:58:44:7a:11:81:56:39:fd:2f:1a:75:
b0:f6:01:fe:73:bb:13:02:d9:42:7c:34:68:f3:f3:e2:d4:7a:
d7:21:3e:ba:e3:8a:05:fd:1f:84:2c:67:32:fb:10:cf:41:53:
c4:80:2a:a2:d6:51:a2:c4:9f:8e:b8:f2:ca:71:76:ef:ea:ce:
bd:4b:33:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:06 2026 by rpki-client