Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c2c395e2-491c-4141-ba1e-1b3717841063.roa
File: c2c395e2-491c-4141-ba1e-1b3717841063.roa (raw, json)
Hash identifier: XNpAbM/lpqhsIjhXq9TWo6Vsq3Z+hO19RtztwtkWq4U=
Subject key identifier: 78:C9:57:08:4D:43:32:23:C6:73:47:14:58:47:AE:4F:57:66:D7:23
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1486D2A16CEDDEE346F2AD5D0FECFF7CA5AFE7F4
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c2c395e2-491c-4141-ba1e-1b3717841063.roa
Signing time: Fri 07 Aug 2026 06:00:16 +0000
ROA not before: Fri 07 Aug 2026 06:00:16 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.152.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:86:d2:a1:6c:ed:de:e3:46:f2:ad:5d:0f:ec:ff:7c:a5:af:e7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 06:00:16 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=027faa5c26d5c5cd0b2338a16693c251a07f5df3e1cfa5bdb272d8440aa615c9, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:02:03:4c:05:75:4e:fc:6a:d4:40:0a:43:
87:92:46:47:f4:14:8f:6e:62:18:76:94:cf:08:b7:
ab:4a:86:79:55:e7:1b:66:c4:a0:ed:6c:28:54:bf:
47:ef:ea:bd:3c:1e:c2:5b:16:71:44:37:aa:30:3d:
ba:86:2e:76:62:63:e7:48:c2:ec:01:a8:54:7e:31:
71:6a:69:14:4a:a6:42:2e:7f:6b:e0:2d:fd:f4:fe:
d9:82:81:de:17:c6:7f:41:ed:f1:c8:4d:a8:dd:8f:
02:97:e0:88:b0:a5:94:83:95:5f:92:04:b9:f6:2c:
4b:65:c8:cb:0c:b7:23:90:96:a8:21:5b:da:67:2d:
0b:f2:e0:d9:be:f4:cc:89:d7:78:08:11:b2:1f:40:
4e:59:cd:b9:0a:90:40:6b:76:16:5a:31:cb:c3:31:
b9:80:06:a3:33:0e:56:d1:90:fd:4b:68:9a:b7:d8:
7f:54:4c:22:24:50:c6:fb:d8:99:be:9f:9a:2f:34:
d3:35:12:1b:86:71:0e:b1:be:9c:4b:7a:bb:03:48:
73:54:ee:0c:5c:d5:a2:10:d1:ae:2a:a7:c2:24:93:
5f:8d:f4:ca:66:6c:dc:17:00:a0:b2:ab:e1:b7:d0:
fc:09:7d:91:ae:87:35:e5:48:a2:8a:ca:b9:9b:36:
3f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C9:57:08:4D:43:32:23:C6:73:47:14:58:47:AE:4F:57:66:D7:23
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c2c395e2-491c-4141-ba1e-1b3717841063.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.152.0.0/15
Signature Algorithm: sha256WithRSAEncryption
46:e3:21:09:35:92:6b:32:29:a2:dc:87:8c:ed:59:16:43:ae:
3b:28:d5:c1:0b:93:6e:e3:22:e5:50:bd:1c:bd:9e:5f:e9:42:
4e:97:b2:d3:8f:75:4b:b6:17:e9:83:34:6b:44:55:a8:23:da:
82:3d:dd:7d:c7:f9:6a:dc:cb:62:60:9b:b9:d5:47:55:09:46:
6d:89:56:d6:51:bc:15:83:0e:4e:d0:b7:27:35:6c:e5:d7:9f:
91:bf:b6:95:5c:48:28:76:d7:91:81:0e:ba:2c:13:20:41:ea:
42:ce:f5:06:dc:cd:6b:8a:6f:47:b0:f6:9d:bd:02:ed:62:a1:
fe:5f:42:52:20:d0:0a:1c:f5:2a:d8:9e:25:b9:7e:98:bf:7a:
30:69:12:6b:d2:89:03:73:8a:6c:d1:b1:5f:38:39:9f:06:ab:
95:4b:23:8f:1b:c8:ca:3c:9f:02:c1:77:c8:96:c8:4e:d3:64:
a2:cc:9a:49:92:1c:0f:2d:ac:38:0c:d7:b9:2c:0e:09:34:e6:
7a:33:eb:e6:f0:e6:25:ea:10:3f:a7:b5:91:71:d4:1b:ef:bd:
dc:a8:ae:b7:97:c8:7e:a2:50:a1:c5:11:61:ca:1a:e8:ce:a7:
fd:80:0a:1e:db:51:db:67:cf:32:ed:ac:e5:ec:15:48:94:cf:
35:cd:cb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:22 2026 by rpki-client