Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b39e8644-b3a5-4477-b7b6-d340235a9010.roa
File: b39e8644-b3a5-4477-b7b6-d340235a9010.roa (raw, json)
Hash identifier: LsisU8XmtTGNtsfTQbEnI1D9zoDr9urX+/6ItTCYupI=
Subject key identifier: DA:A6:A6:F5:98:DC:9C:35:34:9A:D9:93:B5:D6:0E:64:1B:57:18:72
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 724A68D29207688C3A6406F140423F76ACB0E5F2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b39e8644-b3a5-4477-b7b6-d340235a9010.roa
Signing time: Mon 03 Aug 2026 00:00:18 +0000
ROA not before: Mon 03 Aug 2026 00:00:18 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.168.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:4a:68:d2:92:07:68:8c:3a:64:06:f1:40:42:3f:76:ac:b0:e5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 3 00:00:18 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=33864c54c11b4cc6ae5ec7b427e72a92e174989a54f10f788330b1ce3e9b3345, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:f1:26:a7:79:ec:a1:c9:c8:15:98:58:3e:
62:df:14:6b:d2:0a:1d:34:65:22:38:b2:ed:fd:18:
f3:f3:b6:df:95:68:53:0f:8a:24:a4:8e:42:c3:d8:
4e:3a:7e:94:35:37:21:2a:7f:08:b3:0d:ca:c7:fd:
62:d7:42:8f:27:7c:b2:22:3b:cd:04:fc:61:33:f0:
59:7e:21:c2:20:ee:c1:29:83:59:f8:de:e3:5c:96:
cc:cb:13:38:27:d0:a7:a3:0c:35:77:b2:54:85:6f:
ec:1a:51:19:9f:96:3e:03:38:e2:b5:12:4b:28:80:
ef:b9:f8:42:db:ae:7d:11:52:6d:43:14:9b:c7:6d:
03:c1:a1:f8:58:20:a1:03:f9:19:f7:d3:e2:40:fc:
fe:3e:bf:61:6b:40:dc:c3:11:6e:3a:2b:e9:91:0d:
7e:29:c2:20:18:23:df:02:36:06:d2:36:38:9c:6a:
71:2e:01:91:ef:4b:5c:74:b5:1c:1d:dd:e0:01:36:
13:37:c9:9b:6e:74:a0:f9:31:08:56:b0:8b:80:c3:
cb:24:ee:f1:5d:0f:7a:9b:58:46:55:11:4a:99:c0:
d7:68:63:36:ae:48:f3:79:d1:d6:f7:fb:5d:23:84:
4b:45:6f:ce:44:5f:6e:76:98:d2:13:87:65:74:53:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A6:A6:F5:98:DC:9C:35:34:9A:D9:93:B5:D6:0E:64:1B:57:18:72
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b39e8644-b3a5-4477-b7b6-d340235a9010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.168.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b6:82:20:29:e9:3f:66:ff:aa:43:42:37:57:81:2e:7b:74:58:
99:90:35:e3:8a:ea:6f:f3:a3:7d:88:a0:ac:65:b9:b5:44:1e:
aa:c8:03:82:f6:80:ad:5b:33:b9:66:d2:64:6d:76:e1:fb:13:
2a:a4:a6:76:18:4a:ee:88:bb:6f:d5:4d:f0:37:3f:7c:32:0a:
09:f6:da:12:f0:d6:21:ce:ec:a1:39:70:4c:37:9d:4f:11:e5:
14:4f:bc:90:40:f3:94:a9:48:3e:be:39:6a:8a:b9:60:34:5c:
ba:4f:3f:ad:5b:3c:a4:b9:77:d6:ab:a8:20:89:2d:ad:70:7e:
23:1c:d7:f6:23:a3:cc:d3:54:2a:97:b9:47:6f:7c:fb:58:87:
9e:63:03:79:ba:8a:7f:f0:a6:4e:da:71:ec:e6:0f:96:04:e9:
f1:c3:84:66:d7:eb:90:37:ee:0f:f7:0b:bb:bd:34:22:77:a5:
d0:91:24:fb:aa:d4:06:df:0a:77:3f:d3:c0:0f:44:54:53:97:
9a:f5:51:87:d8:89:e7:7a:03:7e:ba:3b:25:5e:c1:16:3d:ca:
b9:12:59:5a:92:a5:81:2e:73:f8:25:cc:fe:0c:25:19:46:df:
eb:97:45:80:5c:d1:05:af:22:f7:b3:bd:ab:88:6a:44:21:dd:
ac:48:81:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:24 2026 by rpki-client