Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9eb7dfb3-5cb3-484a-b550-418fc540ea28.roa
File: 9eb7dfb3-5cb3-484a-b550-418fc540ea28.roa (raw, json)
Hash identifier: +6Uow7xxq0sWCa3WgQUJSPRLQaZ4J/l8WkIFdHivXQs=
Subject key identifier: AA:3C:40:A5:D4:65:0A:D5:DA:1D:F6:C3:A3:62:96:39:3C:E1:31:32
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1F6CB5F44FE043399DB7D00C8DA3C5E32CC2F181
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9eb7dfb3-5cb3-484a-b550-418fc540ea28.roa
Signing time: Fri 07 Aug 2026 05:50:48 +0000
ROA not before: Fri 07 Aug 2026 05:50:48 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.50.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:6c:b5:f4:4f:e0:43:39:9d:b7:d0:0c:8d:a3:c5:e3:2c:c2:f1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:48 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=11c4075659a0dde682f3da7702fa383b82b8f02c60d5fa48346582fd9fb93176, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:ee:aa:35:f2:a4:8f:f8:cb:a9:f3:81:fb:
06:4a:81:1f:27:13:19:65:6d:45:1c:69:ed:0b:aa:
e9:a8:c2:25:35:97:15:0d:e5:6b:44:a1:e6:db:15:
10:e1:6c:20:ac:28:7c:64:08:19:1f:32:85:ee:63:
05:2d:e7:c5:a5:53:31:ec:d4:b4:a3:25:c2:03:96:
f1:ce:20:72:28:ec:12:03:bc:d8:84:3b:26:16:2c:
f8:92:f5:8d:25:d3:2d:0b:00:62:fd:79:88:47:20:
95:c3:1f:01:81:f0:76:c1:94:9e:c7:cf:ee:c0:14:
05:c9:bf:bb:54:ce:f4:b3:be:7f:b3:a3:b0:c2:79:
13:7f:73:7d:b9:5f:71:db:00:28:2d:3d:7d:d1:b3:
e3:6d:f7:bc:83:65:42:0a:3d:92:e0:69:23:06:77:
61:e3:57:8f:1f:bb:e9:c9:b3:0d:82:11:a0:71:d4:
28:e2:96:a8:73:1f:0f:18:f3:44:c8:94:ac:eb:19:
24:c2:53:7d:2b:c7:b2:f8:b3:83:3f:4a:03:7d:1c:
30:b4:27:88:fb:fa:5a:de:2a:fe:15:bf:ac:e3:09:
9d:88:3e:e3:a1:e3:8e:a5:fa:ba:ae:e5:4f:87:bd:
b5:d5:d3:ae:12:03:d9:8e:97:2e:c3:e6:99:dd:21:
b7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3C:40:A5:D4:65:0A:D5:DA:1D:F6:C3:A3:62:96:39:3C:E1:31:32
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9eb7dfb3-5cb3-484a-b550-418fc540ea28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:30:48:d1:bd:78:57:f1:1a:c5:b6:c0:43:41:6d:04:b2:0c:
89:26:fd:6c:b0:9b:b2:d0:6e:09:f2:8e:e4:46:3b:aa:8d:ee:
b7:cd:8d:f6:bd:35:e9:25:ec:43:49:cd:6f:d9:24:0f:4d:fa:
48:22:fa:f8:ed:27:b5:f8:29:96:31:4f:e8:24:f9:29:cd:01:
19:23:2b:88:8f:07:37:35:1f:1e:35:83:7f:7b:75:66:ce:0f:
c5:c0:9b:e8:8e:62:21:ea:e4:9e:44:24:ed:d0:25:5c:4a:00:
47:87:e3:df:93:63:f1:3a:23:95:d3:6f:f2:ab:47:97:f0:c1:
1d:25:41:30:9b:ad:a1:14:8d:5a:b3:7e:51:53:1e:c2:5f:43:
f4:54:07:98:9e:23:3a:f5:af:e8:39:24:9c:96:1a:db:4e:28:
b1:ba:cd:c8:a6:ef:c1:e9:59:53:00:13:b7:3f:15:7c:c7:38:
65:60:bf:a4:14:6f:82:61:ba:8d:93:68:c7:ed:3c:e7:d3:b6:
d9:f5:4f:34:d2:aa:ea:0a:3f:c6:22:fc:ed:17:72:1e:01:91:
9a:3a:c9:73:89:b8:19:02:f7:8d:2c:3c:66:f9:1d:ca:d4:9d:
e2:2f:35:05:cf:45:16:dc:fe:75:e6:00:4f:df:f8:d0:b9:b2:
53:8a:16:79
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUH2y19E/gQzmdt9AMjaPF4yzC8YEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDcwNTUwNDhaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDExYzQwNzU2NTlhMGRkZTY4MmYzZGE3NzAyZmEzODNiODJiOGYwMmM2MGQ1
ZmE0ODM0NjU4MmZkOWZiOTMxNzYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ2O7qo18qSP+Mup84H7BkqBHycTGWVtRRxp7Quq6ajCJTWXFQ3la0Sh5tsV
EOFsIKwofGQIGR8yhe5jBS3nxaVTMezUtKMlwgOW8c4gcijsEgO82IQ7JhYs+JL1
jSXTLQsAYv15iEcglcMfAYHwdsGUnsfP7sAUBcm/u1TO9LO+f7OjsMJ5E39zfblf
cdsAKC09fdGz4233vINlQgo9kuBpIwZ3YeNXjx+76cmzDYIRoHHUKOKWqHMfDxjz
RMiUrOsZJMJTfSvHsvizgz9KA30cMLQniPv6Wt4q/hW/rOMJnYg+46HjjqX6uq7l
T4e9tdXTrhID2Y6XLsPmmd0ht60CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSqPECl
1GUK1dod9sOjYpY5POExMjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OWViN2RmYjMtNWNiMy00ODRhLWI1NTAtNDE4ZmM1NDBlYTI4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADMyMA0G
CSqGSIb3DQEBCwUAA4IBAQCFMEjRvXhX8RrFtsBDQW0EsgyJJv1ssJuy0G4J8o7k
Rjuqje63zY32vTXpJexDSc1v2SQPTfpIIvr47Se1+CmWMU/oJPkpzQEZIyuIjwc3
NR8eNYN/e3Vmzg/FwJvojmIh6uSeRCTt0CVcSgBHh+Pfk2PxOiOV02/yq0eX8MEd
JUEwm62hFI1as35RUx7CX0P0VAeYniM69a/oOSSclhrbTiixus3Ipu/B6VlTABO3
PxV8xzhlYL+kFG+CYbqNk2jH7Tzn07bZ9U800qrqCj/GIvztF3IeAZGaOslzibgZ
AveNLDxm+R3K1J3iLzUFz0UW3P515gBP3/jQubJTihZ5
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:07 2026 by rpki-client