Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9ebfa348-5910-4667-b4db-cfb5bb3acbc8.roa
File: 9ebfa348-5910-4667-b4db-cfb5bb3acbc8.roa (raw, json)
Hash identifier: IOK1RYHScKAw+AIVwb0OVvT0reA/D6ds+RRgHa54KUs=
Subject key identifier: 03:CD:45:CE:8B:3D:B2:21:BC:F9:52:3E:03:B4:6F:AC:9C:E9:1F:68
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4184E53E669E2583680D10FF20CCA72689BB0D28
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9ebfa348-5910-4667-b4db-cfb5bb3acbc8.roa
Signing time: Fri 07 Aug 2026 05:50:51 +0000
ROA not before: Fri 07 Aug 2026 05:50:51 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.188.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:84:e5:3e:66:9e:25:83:68:0d:10:ff:20:cc:a7:26:89:bb:0d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:51 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=bb8fa4aff0f5d7331415c4f82aa9a4ff6c04ece56750091cecef2bf8effc3acc, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:31:96:2a:89:8c:a1:a0:3b:e8:23:9e:ac:
8e:5b:56:19:ab:16:59:be:99:0c:b0:b3:ce:04:0c:
1b:c9:9d:52:8a:c0:9c:83:de:c8:d3:81:dc:73:b0:
9a:19:0e:b4:50:87:7e:e4:64:72:5a:9e:4a:b8:b3:
9e:1c:b2:be:c2:43:56:ea:a7:13:65:7f:2b:9c:87:
79:76:93:fb:0b:13:96:be:49:dc:7e:c2:fb:83:43:
b3:2b:65:73:45:62:02:9b:14:06:c7:dd:23:96:fa:
18:0f:0f:8a:7e:5e:cf:2c:dc:8a:0a:ee:f0:a8:b1:
a7:a1:d7:bd:d0:79:37:3f:e0:42:98:58:53:d0:43:
30:ab:7b:b5:30:43:df:7f:82:36:9a:ec:55:67:ca:
aa:e6:7e:a3:5b:b7:17:79:1d:d5:34:ec:97:62:16:
90:b9:c4:96:c0:75:c0:5d:9a:83:0b:2b:a7:b9:29:
e4:af:8d:ad:57:3e:f4:62:a0:f9:d8:28:d9:f3:55:
95:d6:05:80:10:92:53:84:b7:76:8a:26:a7:29:71:
20:8a:1e:2f:94:ad:35:66:0f:d8:a5:4f:a0:c4:ad:
3d:b2:b7:0e:6d:55:c4:71:6a:3e:92:4a:92:f4:63:
e9:47:2c:9b:84:97:94:78:a4:b9:1a:4e:17:6d:c3:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CD:45:CE:8B:3D:B2:21:BC:F9:52:3E:03:B4:6F:AC:9C:E9:1F:68
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9ebfa348-5910-4667-b4db-cfb5bb3acbc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.188.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9d:fa:ab:75:3b:7f:9f:61:74:9e:8b:9b:b4:c1:e3:b8:89:c8:
b6:e9:20:11:27:5c:05:3b:f1:e6:b4:6f:6b:32:cb:0c:ad:49:
47:1a:f8:66:01:b3:cf:a7:eb:c1:62:0c:0d:d8:a6:01:af:33:
e7:17:11:6e:3f:0f:55:08:b6:03:83:24:6b:1e:09:a4:02:94:
8c:37:22:23:ad:58:49:a1:4d:ad:79:e9:06:29:1e:37:a7:31:
42:a8:a0:07:5b:f6:f5:8c:ec:b6:04:e8:29:77:23:48:1b:99:
7a:67:b1:16:89:36:45:28:c6:dd:2a:fb:55:5b:39:60:11:cb:
05:e4:32:54:2b:c9:87:eb:09:22:f7:41:97:67:76:fa:9e:58:
c3:b8:12:e6:5f:1a:4a:ea:28:32:61:e1:08:46:8d:2a:68:87:
00:a6:88:6f:11:29:f6:a2:d9:02:29:d3:bc:cf:8a:be:03:d7:
3e:d7:a9:b9:c5:36:5c:36:bf:c3:1f:b8:bd:96:8c:bf:4f:8d:
39:a4:8d:1a:73:6e:75:20:c8:83:9c:86:0e:d3:b2:94:78:bc:
63:e7:79:5c:c6:2b:3d:ac:e7:1e:b9:8e:20:75:bd:ab:47:5c:
6f:fa:fa:f2:eb:d7:a2:96:cb:30:02:9f:a9:47:96:85:2d:16:
fd:92:24:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:11 2026 by rpki-client