Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b299221a-2748-4498-90ac-96752a05dfbd.roa
File: b299221a-2748-4498-90ac-96752a05dfbd.roa (raw, json)
Hash identifier: t58IFvLJgOcJat0L8GiOv9ArrXB5TrWtwEUkU4JMUv4=
Subject key identifier: 20:58:0C:58:66:25:A3:F4:03:AD:3A:55:96:A8:59:39:EC:E7:7D:AA
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5B08C0D6877CB73002CB309834111F9CC0851DDA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b299221a-2748-4498-90ac-96752a05dfbd.roa
Signing time: Sat 08 Aug 2026 01:00:07 +0000
ROA not before: Sat 08 Aug 2026 01:00:07 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.201.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:08:c0:d6:87:7c:b7:30:02:cb:30:98:34:11:1f:9c:c0:85:1d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 01:00:07 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=e699b8d4343822b151bb60b771eb7dbcaf9e3701984c0c1dca9fcfcc5c6ea3c6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:26:d0:91:7d:33:fe:5b:a0:62:a1:bb:c7:
f8:a3:f1:97:69:98:3a:1a:49:03:cd:1a:68:fd:68:
38:90:99:dc:a0:b1:21:4b:5d:d8:7a:67:8f:ca:4f:
a7:97:c2:d3:98:61:e7:59:4b:05:85:b9:c9:36:16:
86:2a:d3:09:3a:50:40:2a:58:94:22:a7:d0:45:99:
e6:30:be:d6:b8:32:18:7a:aa:d9:d0:93:9d:b9:4d:
17:77:1f:da:a7:6a:63:5c:9a:43:e4:95:d3:bb:ba:
3f:bb:b3:8d:80:03:0f:72:33:6d:25:12:28:15:dc:
e5:38:b4:d7:98:f0:1d:7d:f8:bc:cb:85:2e:51:ef:
b8:8c:e5:ad:54:0d:92:ad:7c:10:25:11:f2:7d:34:
6a:d9:d4:62:37:11:fc:dd:3d:61:cb:47:3c:65:e2:
f6:80:0f:b6:83:72:f8:d5:18:12:b2:87:da:95:7c:
48:a5:2b:98:a5:90:cd:13:d1:81:79:b1:5c:dd:fe:
9e:c3:46:77:1a:2e:df:66:f4:8f:dd:76:05:30:01:
a0:98:be:fb:56:9a:bb:b6:35:77:e9:56:7c:6a:4f:
56:dc:52:ae:d1:cb:e4:0e:e5:77:42:57:02:21:30:
c2:eb:25:47:27:6f:1b:a0:08:7c:28:3a:6d:58:61:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:58:0C:58:66:25:A3:F4:03:AD:3A:55:96:A8:59:39:EC:E7:7D:AA
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b299221a-2748-4498-90ac-96752a05dfbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.201.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b2:aa:cb:ae:aa:96:7b:c1:58:9f:f0:1f:fa:1f:df:1a:df:a1:
21:11:1f:63:c8:3d:7a:17:ba:4a:c9:c6:d0:24:75:b3:67:2e:
8e:33:bb:88:2b:3c:94:86:28:4d:51:49:d7:99:fa:ea:1e:c6:
1b:7a:57:af:7f:19:ae:1b:05:3c:0a:b3:aa:d8:3a:82:2e:bd:
c1:92:f2:92:d6:c9:c9:c2:16:2b:f3:cc:dd:6e:89:ce:ca:80:
45:61:a7:cb:6c:39:84:62:c6:85:ad:f1:36:86:a2:98:d9:8c:
34:93:a9:86:d2:03:25:77:af:30:72:55:ff:79:53:c2:61:b4:
19:e0:a7:9a:2b:c3:62:44:c4:14:b8:35:7e:23:70:d8:8f:fb:
aa:5d:7a:05:d3:1f:99:39:22:47:48:9d:de:23:0b:02:6b:db:
65:2c:a4:42:d7:50:24:96:22:2b:ea:3e:4b:15:7f:c1:ed:82:
06:e9:e2:1b:e3:87:6d:60:c3:ca:d3:4a:f3:e6:e2:30:1b:bf:
c0:f6:4d:a7:ef:38:d9:cc:7e:7b:55:97:16:09:d7:b9:e2:ab:
36:a8:c8:37:53:84:60:13:74:ef:94:23:b0:8f:1b:04:54:0a:
83:04:51:45:0d:86:3f:08:53:e9:64:9c:2d:70:63:b5:30:e8:
31:27:3e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:22 2026 by rpki-client