Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/af8582f5-d209-4e12-aacf-31186289c430.roa
File: af8582f5-d209-4e12-aacf-31186289c430.roa (raw, json)
Hash identifier: 6A2+bmfqvy9C8kp9YcdzY1QL2q4Sw5SLirHYd00ovME=
Subject key identifier: 77:28:3F:D2:3F:4E:4F:F5:0A:05:44:D3:89:0E:AF:48:7B:42:6B:F6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 11FC0B89A51CC38F146E0AABE2CCF4FF1743FF5D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/af8582f5-d209-4e12-aacf-31186289c430.roa
Signing time: Fri 07 Aug 2026 05:50:35 +0000
ROA not before: Fri 07 Aug 2026 05:50:35 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.216.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:fc:0b:89:a5:1c:c3:8f:14:6e:0a:ab:e2:cc:f4:ff:17:43:ff:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:35 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=801cba926e5c756425ebd4656f616f3e90788fa3c0c8a47d55481c96cd3733dd, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:7a:68:4b:e1:93:b4:e3:ff:8a:2a:d7:dd:
20:04:0b:2c:84:4c:c2:e2:cb:1f:4a:ef:8d:dd:81:
05:61:68:8b:77:cc:82:3c:d2:15:a3:fd:dd:8c:86:
6a:4e:f8:29:e0:05:d9:a4:b7:7a:39:de:15:0c:55:
8a:be:95:1c:00:58:78:55:0c:f6:21:88:dc:ac:39:
43:a5:d6:5a:03:de:3d:0a:08:87:05:c9:f6:a5:17:
18:69:93:7d:67:5d:09:d1:86:80:bc:e6:d1:2e:17:
b8:72:8d:0c:06:53:69:c8:b8:e2:88:8b:19:c2:06:
34:bf:6c:fa:cc:1f:02:de:f1:cc:7a:ad:b9:b0:d2:
43:d8:91:94:c5:bd:ff:c1:2c:74:96:c5:25:3d:d1:
c1:a3:9a:0c:05:66:ee:b0:bd:2b:c0:10:35:f4:2a:
01:f3:c5:bb:f4:b0:4e:e5:74:f5:6f:ce:3b:6f:2d:
f3:29:d4:f6:31:37:23:52:a0:9d:2b:9c:0d:04:4a:
e1:db:2b:2d:38:00:7c:b4:85:d7:8d:15:ce:54:2f:
8c:39:61:81:0e:7b:25:a0:8d:7e:d4:46:32:f3:ae:
38:5c:96:9c:d4:c1:39:f3:a4:90:70:ad:27:6a:88:
61:45:6e:74:9e:aa:0d:75:c7:0e:9d:75:c7:5f:23:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:28:3F:D2:3F:4E:4F:F5:0A:05:44:D3:89:0E:AF:48:7B:42:6B:F6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/af8582f5-d209-4e12-aacf-31186289c430.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.216.0.0/15
Signature Algorithm: sha256WithRSAEncryption
64:da:df:ca:1e:7b:25:75:c9:5e:4c:bd:fc:0f:be:34:dc:66:
e4:07:55:18:05:8a:84:70:5c:30:c6:34:ab:9b:2c:fa:4a:23:
1f:3d:62:f0:27:bd:91:93:0d:f2:0b:80:6c:a2:a0:35:a9:0d:
47:7c:9e:f9:31:f9:50:20:e1:2a:34:48:86:29:2f:31:d2:3d:
18:e8:72:8c:56:72:44:93:7d:7f:c0:a9:8a:69:9b:8c:6c:b4:
9f:01:3f:23:21:49:c7:38:99:0c:1a:71:65:a9:03:ac:7b:b5:
ad:1b:53:f6:f1:69:43:5e:cc:08:d8:68:43:00:49:2e:0d:c7:
39:8c:8b:95:b1:68:23:73:a4:3e:fb:49:53:ce:04:e8:48:ec:
13:a8:d5:a5:1a:5c:ea:e9:4f:20:63:13:6f:84:dd:5c:6a:a2:
55:4a:38:eb:32:85:27:90:06:e1:1a:80:6d:18:54:80:e8:bb:
cd:59:c4:e2:1f:c4:9c:53:c6:6e:c7:41:f6:9e:b8:e4:bb:00:
d6:e7:bb:f6:c3:92:da:75:e7:11:58:31:04:f1:ba:7e:03:9d:
3d:14:f0:8a:5a:ed:5b:7f:d0:84:a4:31:a6:1b:ae:fc:59:f6:
08:95:6e:5d:7e:a1:95:63:99:34:25:a4:26:fc:3c:40:f1:3d:
93:ee:74:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:24 2026 by rpki-client