Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a0c1b5dd-da03-4452-9353-fdc7ed735cfd.roa
File: a0c1b5dd-da03-4452-9353-fdc7ed735cfd.roa (raw, json)
Hash identifier: eDOS717jFKclily9myfNpKwxVduojhJpuVUAxny9AwU=
Subject key identifier: 75:D4:7A:34:40:F7:0F:D9:A6:BC:62:F0:CC:A1:29:15:7C:C3:39:4B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6B8A2018C1CF77D7EF6EC9271870B52683529DEB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a0c1b5dd-da03-4452-9353-fdc7ed735cfd.roa
Signing time: Mon 28 Sep 2026 11:32:44 +0000
ROA not before: Mon 28 Sep 2026 11:32:44 +0000
ROA not after: Sun 27 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.168.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:8a:20:18:c1:cf:77:d7:ef:6e:c9:27:18:70:b5:26:83:52:9d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 28 11:32:44 2026 GMT
Not After : Dec 27 23:59:59 2026 GMT
Subject: serialNumber=599886a812ff38933f46f4bbc559609e57ac473e53a1f1271d992d3ec2cf76ea, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:33:c8:0a:ff:9e:42:7e:d9:99:b4:18:ff:
4e:50:a1:17:5c:e8:d4:59:39:17:7f:09:e5:aa:21:
78:9f:f5:df:7b:0f:b8:27:f0:33:a8:c6:31:74:90:
24:ae:9d:5b:79:de:b0:71:1d:f7:16:94:79:3e:6a:
b3:0b:bf:8f:aa:ed:75:a9:4c:19:b4:d4:49:98:c6:
a3:d5:65:d4:60:74:26:25:5d:fe:f3:f6:53:7b:96:
94:15:aa:fb:a7:a8:6e:38:d2:09:4d:8c:8d:a3:bf:
86:cd:16:ed:ab:2d:bc:3d:4b:99:18:01:2d:5f:f1:
b3:a5:7d:81:b3:0e:69:96:bf:38:ea:18:74:3e:8e:
37:d4:5f:69:39:e2:b6:ac:20:57:a7:32:c5:04:41:
3a:95:b2:93:d9:0d:96:1e:71:5d:82:72:0d:9f:ed:
9c:10:82:ba:12:04:12:c9:12:a1:2e:5e:1d:98:b1:
79:a4:4c:b8:eb:5a:fb:72:ac:34:78:eb:48:f8:b8:
6a:42:1e:85:20:0f:69:61:9c:0c:d6:0f:d5:8d:7c:
c8:82:e9:13:80:4d:c3:cb:e3:f9:b3:65:f1:d9:36:
2c:9a:ff:ab:a4:3e:67:af:d7:88:78:73:d2:d1:62:
c8:8f:f4:ec:08:cb:f0:9c:d5:65:3d:34:ef:46:7d:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D4:7A:34:40:F7:0F:D9:A6:BC:62:F0:CC:A1:29:15:7C:C3:39:4B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a0c1b5dd-da03-4452-9353-fdc7ed735cfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.168.172.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:4d:8a:82:3c:7e:e1:2c:30:f7:31:1a:c9:68:66:59:90:45:
72:07:e2:16:fb:ba:e7:57:00:53:56:16:1e:05:c5:41:db:a2:
8c:3b:48:22:43:df:a5:50:1b:86:1c:df:73:d0:b6:53:d1:28:
f6:7a:f4:f6:c7:f2:48:36:16:1f:4b:d2:af:ca:34:42:9c:76:
ee:64:c9:02:d0:3b:05:06:31:a2:f5:30:f7:d4:07:eb:a8:65:
68:e1:48:2a:2c:08:d8:52:31:e9:e1:24:19:6d:bb:59:22:a7:
34:53:69:7b:96:89:aa:1b:fd:29:49:da:7f:26:cf:51:04:75:
98:4d:15:28:8c:e8:4d:e7:7c:f9:67:b6:3f:5f:28:d2:7e:6c:
f3:a2:4b:45:83:fe:d2:84:02:6b:cf:7e:07:29:57:58:55:b8:
4f:72:54:dd:b8:be:31:5b:38:6c:7d:b7:c2:58:88:ef:a9:cc:
55:1e:64:33:6e:ab:e7:8e:cb:62:d3:86:95:ab:54:68:f1:3d:
40:8c:29:80:52:c9:d8:b5:10:40:9e:6e:29:1f:2b:ee:71:f2:
39:c7:3d:bb:9d:6c:4f:ae:71:1b:e6:e3:fe:50:0e:c0:2b:db:
7d:eb:ba:62:56:02:7b:3c:c2:d8:7d:40:c5:92:92:d5:70:85:
82:8b:29:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:13:34 2026 by rpki-client