Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c50006d0-c65f-4259-ace3-46351e9d23c5.roa
File: c50006d0-c65f-4259-ace3-46351e9d23c5.roa (raw, json)
Hash identifier: 7w72WFaL2Plh66UVdI+8i0JNQiQM3mlJ7knReobfE7w=
Subject key identifier: 7F:81:FC:5D:D2:B6:9D:4D:BA:3C:E1:E5:85:64:7E:D0:C3:CE:7F:77
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5E8A3785F05F47847165B2941693AE77F4BDD0A3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c50006d0-c65f-4259-ace3-46351e9d23c5.roa
Signing time: Sun 04 Oct 2026 00:40:09 +0000
ROA not before: Sun 04 Oct 2026 00:40:09 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.84.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:8a:37:85:f0:5f:47:84:71:65:b2:94:16:93:ae:77:f4:bd:d0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:09 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=1322f3b09eafc580f2fc1372715bb9728cce4ad7d879d2962e38c9c9bea8f9a7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:5c:1d:9b:27:5e:80:c4:0f:5b:b0:62:25:
8f:66:b0:d2:0d:a3:3e:ca:a3:3a:cd:bb:4c:c4:dd:
33:59:cb:82:fb:ea:2f:17:39:19:70:ca:3a:4e:cf:
c4:65:47:c6:c5:d2:7a:6c:34:11:74:74:45:8d:83:
c5:d5:c6:7a:c4:5b:dc:30:8b:06:f9:d4:e0:1a:ce:
29:2e:ac:ba:17:70:cb:2d:5a:8c:05:bc:85:25:7b:
14:f2:60:d0:8a:c5:d0:fb:70:0f:8e:72:f7:be:78:
47:0a:3e:5b:a3:ec:e1:ee:80:1d:b6:ad:e0:95:d5:
e9:5b:86:3a:3a:97:2e:9e:9c:6a:ad:97:e7:b9:57:
6f:19:6f:f1:d9:cb:4a:11:73:57:d7:c7:d5:3a:ae:
f7:a3:a8:13:df:d4:19:5d:6a:32:b9:5f:1f:86:8d:
04:8f:ad:a7:f9:e8:ef:24:fc:ea:75:fc:9d:06:6a:
7f:5f:68:82:df:5a:fd:92:f2:a6:a0:01:60:23:03:
5a:da:ed:e6:fc:16:50:e1:29:f9:ba:86:c7:dc:a0:
ae:e6:ab:29:a9:8e:8d:f2:4e:6b:62:f1:84:87:2a:
37:e1:23:d3:be:bd:3f:0d:83:84:5e:30:1f:57:f1:
af:6d:b2:41:b5:34:1c:41:ff:58:a1:f4:71:93:4d:
09:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:81:FC:5D:D2:B6:9D:4D:BA:3C:E1:E5:85:64:7E:D0:C3:CE:7F:77
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c50006d0-c65f-4259-ace3-46351e9d23c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.84.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:59:d7:d0:98:e7:f1:dd:d2:49:26:ef:3e:54:09:b0:ab:c2:
9e:a5:a8:08:c2:19:54:c5:07:87:4f:9c:69:b2:43:8d:50:03:
53:70:4d:97:dd:cb:42:39:46:60:f9:4b:07:eb:71:3f:54:d2:
1e:02:8c:bb:94:31:4b:5e:71:b5:07:9d:34:08:41:85:39:b1:
0e:ec:1a:51:5b:90:50:63:d7:b2:d9:ae:7f:57:de:cd:9f:bd:
db:68:1e:fb:c2:f1:44:53:cf:32:03:da:ff:93:c4:29:4f:a2:
6f:43:1a:2a:09:c0:b8:d0:64:80:bf:d3:46:a7:5c:71:5b:23:
93:fb:20:4f:ef:01:d3:35:ca:76:d9:fd:72:b5:cd:4b:19:73:
0e:79:6d:48:bf:e6:81:7c:46:c9:f5:37:51:1e:e3:f0:80:27:
ed:32:ab:2d:ff:54:21:e7:e5:a9:c5:df:65:e6:bd:16:79:60:
6b:55:08:cc:0d:da:48:ca:c8:46:7d:b0:18:2f:40:7f:77:bd:
88:3f:c4:2b:b1:31:78:4b:ab:a7:90:f9:33:ff:c4:a4:9b:d7:
01:ee:c9:dc:38:d3:f7:e3:7a:b3:96:e8:dc:29:3c:07:f6:ab:
b6:54:39:3f:37:0e:81:fb:16:81:69:26:c1:3d:28:37:33:00:
74:ae:2c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:35:53 2026 by rpki-client