Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa
File: 9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa (raw, json)
Hash identifier: jNUh48iFna7O7Y9DNO1nonIy8Pl95WQYnJseDe3+QhA=
Subject key identifier: 51:53:CC:CF:7F:67:1F:9D:1B:BB:C9:D4:7A:10:2E:2A:7E:92:A5:12
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 59929CB3E7ADF347A1887A11F545B4D0F7869A04
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa
Signing time: Mon 04 May 2026 15:30:18 +0000
ROA not before: Mon 04 May 2026 15:30:18 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.206.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:92:9c:b3:e7:ad:f3:47:a1:88:7a:11:f5:45:b4:d0:f7:86:9a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 4 15:30:18 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=2362390c3ba9a484630d5a48f61e220d96419de270aed997660da9659e13032e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:a7:f9:01:e5:b7:51:54:39:ba:8d:b6:46:
30:ae:7c:e3:99:73:5e:9c:37:a6:4f:04:9b:45:da:
6e:e9:e8:9b:fb:13:e3:82:7e:09:65:ec:94:9f:3e:
06:25:f2:61:2c:49:fe:a5:bc:ed:2d:de:04:9c:16:
61:be:e3:9e:6a:d1:98:2f:66:7c:5a:a4:cc:4e:3e:
9f:18:3d:6f:d5:8a:52:fc:4b:f6:35:94:48:4b:93:
60:97:13:db:40:35:a6:b7:17:d6:76:27:5e:46:5b:
e2:95:4e:e2:ec:4f:4f:bd:cb:0f:cc:2c:43:fc:9e:
41:83:93:7a:bf:b8:82:99:95:0d:74:81:aa:61:68:
24:4d:c9:b7:12:8e:a1:69:4c:7c:ab:eb:56:75:6c:
41:96:b5:df:ad:ff:33:f7:3e:32:90:f8:9d:5e:98:
22:a4:34:42:8e:f0:0f:85:d3:71:4c:33:2c:8b:f4:
e6:2f:10:f5:ff:92:bc:ed:bd:1f:3b:b7:c7:31:e4:
5c:8a:84:ca:13:41:69:c9:12:28:1f:74:8e:35:1d:
4f:eb:e1:fe:58:4f:6e:f3:48:12:41:fa:6a:35:18:
45:5f:36:01:46:70:e1:51:b0:81:0e:9c:49:4d:25:
1e:2b:a6:2d:ba:b8:5c:00:fc:73:85:45:c2:2c:c2:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:53:CC:CF:7F:67:1F:9D:1B:BB:C9:D4:7A:10:2E:2A:7E:92:A5:12
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.206.0.0/15
Signature Algorithm: sha256WithRSAEncryption
90:94:d1:05:94:22:a0:03:70:44:83:02:eb:45:03:3a:84:8f:
c7:1c:d4:1c:03:25:f8:c6:db:3e:dd:64:e9:fc:c3:f8:9b:c3:
be:7a:6e:8b:a5:b7:c6:9b:ec:8e:33:5e:9c:42:d6:49:f5:e5:
30:f5:72:79:c3:39:76:e5:55:a1:4e:ab:b2:43:93:21:d2:cf:
b2:b8:4a:d4:16:06:08:d9:48:cc:f7:8b:9c:d0:e4:55:11:67:
cc:2c:f0:87:5e:32:ac:03:b5:a2:bb:cc:b2:c1:ef:b5:69:32:
06:06:64:86:31:d4:9a:96:49:0f:40:b9:3a:a3:df:32:23:38:
53:8e:e7:64:00:15:bb:2b:12:72:5e:ce:33:61:7a:95:70:97:
cc:51:09:3c:25:03:59:5b:8b:3e:66:01:ce:4e:90:63:0a:4f:
26:ec:a8:39:b2:9e:a9:d6:dc:b7:3f:69:88:27:10:a9:f0:77:
aa:05:a5:83:65:eb:d4:b8:45:6d:33:05:d0:af:f6:96:68:81:
49:63:ee:2e:d0:30:9f:e3:e9:22:10:d0:04:7c:04:88:33:00:
a8:35:14:cd:80:2b:bc:5d:56:59:99:86:fd:2c:f3:36:89:9d:
74:1e:2c:41:1b:e3:20:da:cb:fe:64:14:fe:f3:00:1a:5c:ce:
ab:ce:28:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 10:22:02 2026 by rpki-client