Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bacf843a-17ee-4ca1-9e3b-8f3728814d21.roa
File: bacf843a-17ee-4ca1-9e3b-8f3728814d21.roa (raw, json)
Hash identifier: kQHiZN3LUmob8FBn4fQiDyZAYUYLL0DsPZiwLdmjVzU=
Subject key identifier: D6:65:F6:2D:97:E7:7F:48:EF:C1:16:82:13:23:E1:04:49:0A:8B:80
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 32F691AB6C35B557AA33958DDA3801DE04B3E31C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bacf843a-17ee-4ca1-9e3b-8f3728814d21.roa
Signing time: Fri 07 Aug 2026 05:50:15 +0000
ROA not before: Fri 07 Aug 2026 05:50:15 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.100.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f6:91:ab:6c:35:b5:57:aa:33:95:8d:da:38:01:de:04:b3:e3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:15 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=f138b6a3df8b7dbb07ef9d8bee02f84666672f5dc3c5c95cb365b79eb9164bc7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:40:40:1d:6b:6e:af:60:53:21:eb:74:9d:41:
1e:e8:4a:3b:54:c3:84:62:14:a7:73:a1:79:23:f3:
9f:77:1a:cd:2a:3d:b2:5b:d8:19:8b:ac:af:b0:0a:
0f:b9:43:57:0f:12:cc:ee:c5:42:8f:99:6b:bb:a9:
c3:d2:e2:fa:41:fa:9c:5c:b9:ee:2e:8c:bf:82:15:
53:5d:23:2b:8c:a7:1d:1a:87:c4:53:75:87:e1:42:
a7:c1:8b:6d:54:91:a0:75:45:5a:4a:d6:9d:e2:54:
f4:22:d6:5e:6a:0a:c9:61:c1:b4:06:9e:33:63:c8:
8e:4e:eb:72:af:5f:88:8c:4a:9c:59:c6:8d:78:f4:
d2:7b:36:50:72:1a:b0:f2:f3:90:56:d2:9e:83:d6:
2b:37:79:fc:07:2b:db:4a:d4:28:f8:4c:8a:f6:18:
2c:73:6a:26:9b:4f:92:a9:78:f7:01:77:c5:5e:d8:
6f:31:f3:c8:e4:48:d3:73:06:0c:56:a4:82:ad:38:
d7:78:c4:cd:51:4e:cc:d4:5f:82:41:bf:f4:42:64:
66:21:55:db:4a:9b:40:ff:31:25:a4:db:2a:d8:fc:
55:56:98:6b:c1:7c:02:30:a6:98:9f:30:16:18:83:
04:17:92:d1:e3:46:47:84:ac:56:fd:83:fa:8f:68:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:65:F6:2D:97:E7:7F:48:EF:C1:16:82:13:23:E1:04:49:0A:8B:80
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bacf843a-17ee-4ca1-9e3b-8f3728814d21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.100.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3d:2e:0f:25:25:87:86:a2:00:67:3f:f1:4a:0c:a8:e8:61:29:
fe:79:3a:e7:f9:79:37:e4:bf:0f:9d:0b:08:44:af:85:01:04:
f9:b2:af:9f:64:76:18:c7:fc:cd:1a:1d:79:c6:b4:74:93:d7:
a3:83:d5:fa:d0:8b:f4:6e:0e:a1:4f:b8:bf:31:8f:ee:e9:32:
c0:3a:77:17:fe:af:cf:11:f1:70:f4:3a:2d:4a:74:79:91:d3:
8b:83:33:d6:c5:6c:31:c8:cb:dd:88:70:c7:50:32:85:91:c9:
69:88:82:8e:f6:c7:e6:7f:bc:8f:8c:16:c0:89:1e:dd:04:93:
0d:f6:ed:9f:12:cb:12:cd:c8:26:f9:e2:77:b1:ce:77:9c:c4:
87:4f:c2:e8:8c:2b:73:5b:c7:6e:7d:04:b2:da:4d:c7:e6:ae:
13:b4:30:ea:be:dd:d3:8c:4d:1d:27:d4:81:bb:83:be:99:b0:
e1:b3:66:da:ef:85:e1:48:e2:b8:6b:32:e7:5f:a6:64:16:c8:
87:54:75:ea:b5:d9:09:af:aa:52:c2:9c:df:45:3a:24:57:0f:
13:70:2d:1f:6d:f4:cd:cd:03:3c:37:d2:e3:28:47:c1:be:d3:
1f:54:a8:a6:e4:a8:09:0b:49:39:c8:97:67:07:5b:f2:0d:ba:
b8:93:85:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:30 2026 by rpki-client