Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a02f9994-3943-4a2f-8467-87935bf3bf9e.roa
File: a02f9994-3943-4a2f-8467-87935bf3bf9e.roa (raw, json)
Hash identifier: YOF8FHEEVXr3IFecLo0r/jV6hjM0WC8Y2aMCbf6wCw4=
Subject key identifier: 09:96:C7:A5:F2:C9:E4:CA:13:47:5C:8C:F7:09:90:B1:0B:C6:1C:9A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 20620D2704D6DEF9874091818CF00EE092859C3B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a02f9994-3943-4a2f-8467-87935bf3bf9e.roa
Signing time: Mon 26 Oct 2026 05:40:34 +0000
ROA not before: Mon 26 Oct 2026 05:40:34 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.69.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:62:0d:27:04:d6:de:f9:87:40:91:81:8c:f0:0e:e0:92:85:9c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:34 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=9cb3533aa43fa6f01b3ee0dd8b2426170cb11d67568c4e3df21d20f5d9a11dd9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:b9:44:7f:4c:49:ef:48:f2:18:2f:46:a0:
dc:71:ce:87:ae:30:37:5a:fa:5d:e5:22:7b:76:81:
81:0f:01:9d:ad:9a:d6:90:d2:c6:8e:a1:84:79:18:
bc:04:b5:69:81:9b:e3:ad:87:28:2b:d4:94:d6:c8:
95:32:a6:59:2b:c5:3e:4b:c4:ab:bd:a6:62:6c:e2:
6b:6b:ef:c1:e5:3d:f6:79:12:a4:17:6a:01:c3:47:
62:21:e1:60:89:45:fd:84:04:e7:4e:60:1b:67:ea:
52:c7:5e:4f:51:65:92:c2:42:e2:54:67:9d:fb:57:
e8:b3:d8:12:99:53:a9:6f:18:aa:c0:24:73:61:a2:
e8:1b:01:b4:74:4e:60:24:0f:88:f7:70:16:fd:60:
d4:a7:69:ab:73:22:36:df:83:66:27:aa:ef:bc:9c:
a8:d9:6d:2c:a4:9c:2c:1f:0c:8c:f2:0b:c1:f0:26:
3e:1b:b4:86:d4:b8:b3:8c:5b:45:48:43:44:f4:7f:
41:ee:99:e9:d4:aa:6e:58:d6:bd:7c:56:d0:0a:62:
1c:50:e2:d0:9d:05:8e:a7:35:67:2e:32:78:86:6b:
47:59:7e:2d:76:17:00:a3:5b:af:68:dd:3d:73:2d:
c4:08:48:31:e4:25:86:a1:29:34:c9:84:45:3b:20:
85:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:96:C7:A5:F2:C9:E4:CA:13:47:5C:8C:F7:09:90:B1:0B:C6:1C:9A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a02f9994-3943-4a2f-8467-87935bf3bf9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:bf:05:10:73:f1:37:d3:95:13:1b:3f:02:86:70:67:1c:5c:
49:02:f0:6f:71:68:05:b9:e4:62:3a:cf:dc:ff:f1:bb:3c:01:
4b:82:46:a3:ca:91:04:5f:c4:e4:56:3f:43:e3:d9:dc:8f:b7:
b1:a5:c5:44:32:5d:43:18:55:08:fe:b9:61:ab:62:71:0e:14:
85:64:11:55:4d:3a:fa:f1:f5:36:d0:bf:13:b1:63:d9:a8:16:
dd:25:8c:a3:48:d4:c5:66:2d:22:bc:5c:56:80:04:0a:b2:b9:
65:51:d8:53:81:3f:a8:a0:8f:4b:db:bc:d5:24:bb:71:1f:68:
e6:24:6c:d0:b7:0b:95:5d:49:36:f1:1a:ca:6b:77:2f:be:81:
30:8b:3d:45:ad:b4:da:fb:01:9b:3e:89:36:29:a2:48:a5:0e:
44:72:9b:2c:0f:a9:98:a3:1f:be:68:6c:fc:54:a5:cf:dc:94:
87:4c:42:2d:38:fc:f9:ad:63:4c:2c:2d:2d:7d:a1:14:f7:c5:
94:bd:5d:7d:90:fe:a1:78:bd:e0:b8:79:e7:0e:5b:c4:4d:ab:
9f:6f:0f:2d:56:8b:1a:4b:95:a3:b6:6d:4b:c6:06:21:ba:6c:
76:28:4e:b2:81:5b:31:a4:ed:31:06:14:11:75:81:b5:50:0f:
de:91:fc:c4
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUIGINJwTW3vmHQJGBjPAO4JKFnDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTQwMzRaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDljYjM1MzNhYTQzZmE2ZjAxYjNlZTBkZDhiMjQyNjE3MGNiMTFkNjc1Njhj
NGUzZGYyMWQyMGY1ZDlhMTFkZDkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKlmuUR/TEnvSPIYL0ag3HHOh64wN1r6XeUie3aBgQ8Bna2a1pDSxo6hhHkY
vAS1aYGb462HKCvUlNbIlTKmWSvFPkvEq72mYmzia2vvweU99nkSpBdqAcNHYiHh
YIlF/YQE505gG2fqUsdeT1FlksJC4lRnnftX6LPYEplTqW8YqsAkc2Gi6BsBtHRO
YCQPiPdwFv1g1Kdpq3MiNt+DZieq77ycqNltLKScLB8MjPILwfAmPhu0htS4s4xb
RUhDRPR/Qe6Z6dSqbljWvXxW0ApiHFDi0J0Fjqc1Zy4yeIZrR1l+LXYXAKNbr2jd
PXMtxAhIMeQlhqEpNMmERTsghecCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQJlsel
8snkyhNHXIz3CZCxC8YcmjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YTAyZjk5OTQtMzk0My00YTJmLTg0NjctODc5MzViZjNiZjllLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNFMA0G
CSqGSIb3DQEBCwUAA4IBAQBCvwUQc/E305UTGz8ChnBnHFxJAvBvcWgFueRiOs/c
//G7PAFLgkajypEEX8TkVj9D49ncj7expcVEMl1DGFUI/rlhq2JxDhSFZBFVTTr6
8fU20L8TsWPZqBbdJYyjSNTFZi0ivFxWgAQKsrllUdhTgT+ooI9L27zVJLtxH2jm
JGzQtwuVXUk28RrKa3cvvoEwiz1FrbTa+wGbPok2KaJIpQ5EcpssD6mYox++aGz8
VKXP3JSHTEItOPz5rWNMLC0tfaEU98WUvV19kP6heL3guHnnDlvETaufbw8tVosa
S5Wjtm1LxgYhumx2KE6ygVsxpO0xBhQRdYG1UA/ekfzE
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:15:34 2026 by rpki-client