Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d13d26ae-36b1-4815-a7f0-4dc090d15b78.roa
File: d13d26ae-36b1-4815-a7f0-4dc090d15b78.roa (raw, json)
Hash identifier: txn4RJUUQ0Afu9hDLz55cDI4b0zDATN7q6PAuD/unPk=
Subject key identifier: 5F:62:6B:F3:91:3F:45:36:41:61:7B:B7:A9:70:EB:1E:B7:F3:B8:B0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4B0D3A8895730A4D839333B37C3F6CBA29DFCB49
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d13d26ae-36b1-4815-a7f0-4dc090d15b78.roa
Signing time: Fri 07 Aug 2026 05:40:14 +0000
ROA not before: Fri 07 Aug 2026 05:40:14 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.129.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:0d:3a:88:95:73:0a:4d:83:93:33:b3:7c:3f:6c:ba:29:df:cb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:40:14 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=2f0c556cc3eceacddae3cf6b25d7758b180a003aaa8a4d4b8b46fb5aa1209f92, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:61:fc:17:57:ed:9d:d0:f1:75:bd:f1:d6:
72:37:e2:e8:20:7c:42:a4:91:3b:d9:40:3a:e9:97:
ec:8b:6e:8c:0c:c2:53:72:37:1a:30:47:42:f0:36:
13:2a:80:3c:31:fc:1e:80:f3:bd:65:d9:d7:54:09:
9a:5b:c9:ad:cb:e2:f6:29:71:9f:bb:8d:b0:2d:d7:
85:d2:18:f7:d6:f8:43:28:87:52:00:19:d6:0d:7c:
73:61:cb:60:69:cb:3a:60:99:a9:52:3f:76:f6:24:
60:37:7f:49:0e:a3:02:fe:dc:fd:61:25:f0:a8:55:
46:f5:80:e7:c4:c8:9e:77:51:56:73:f7:89:14:ec:
53:3a:62:4b:bf:5e:3d:96:e2:45:e8:9f:0a:d7:5b:
57:0b:ce:09:3d:54:ed:4f:ed:0f:9d:a9:05:52:f6:
42:dc:eb:cf:3b:6b:1e:7d:a3:4e:74:ca:4a:39:b1:
bd:31:28:6f:0f:f8:58:1a:67:39:29:70:01:bf:6d:
a6:91:c1:f8:ed:58:25:c4:a3:17:c6:17:67:01:13:
5c:c9:3e:f5:84:c1:cf:03:79:e6:70:ab:80:45:5e:
fa:d3:38:44:7b:76:af:2b:23:7f:2c:c9:4f:4a:b0:
6b:94:12:ce:b8:c1:6b:b5:0c:d4:dc:25:74:3a:e7:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:62:6B:F3:91:3F:45:36:41:61:7B:B7:A9:70:EB:1E:B7:F3:B8:B0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d13d26ae-36b1-4815-a7f0-4dc090d15b78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b4:19:d7:15:e6:26:f8:c0:61:f1:f9:cf:b7:ca:3b:b9:0e:02:
23:f3:3d:1f:56:04:f1:85:8b:e2:9e:07:63:4d:e1:b0:59:88:
34:e9:95:5a:ba:1a:86:f3:ff:ce:f5:e8:49:58:61:70:90:14:
ce:bb:74:74:9e:65:77:85:49:c1:6c:6c:85:04:c8:89:7c:5b:
92:cc:04:0b:b4:19:a5:d5:c8:80:b5:15:2e:8f:d9:e9:49:85:
42:e0:0e:a9:fb:8c:9c:f3:98:48:e9:af:ba:cc:87:75:e9:32:
51:24:63:6e:e7:65:88:83:db:43:9c:a8:50:b5:9a:49:8a:73:
60:42:2e:18:cf:3a:09:fd:bd:75:5f:26:53:51:7d:ee:f8:5a:
ec:cc:fb:ef:e4:b4:42:87:7d:55:15:68:1e:49:ef:a9:b8:e5:
3d:40:bf:c5:c2:49:ad:22:c9:d9:3b:42:d1:d8:1f:09:67:e2:
d2:de:62:89:69:7c:86:f1:26:c4:f2:fe:5e:a7:c9:69:ec:40:
47:90:81:3b:ec:0a:e9:82:fc:f3:50:57:64:5d:2d:6f:73:3a:
38:ee:fa:41:c6:ac:fa:6f:41:5c:29:be:21:9d:27:a0:93:ce:
51:97:e0:81:6a:e8:59:26:04:9c:16:1a:1d:bc:f5:e7:e9:7c:
f2:f4:3e:b1
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUSw06iJVzCk2DkzOzfD9suinfy0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDcwNTQwMTRaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDJmMGM1NTZjYzNlY2VhY2RkYWUzY2Y2YjI1ZDc3NThiMTgwYTAwM2FhYThh
NGQ0YjhiNDZmYjVhYTEyMDlmOTIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJgLYfwXV+2d0PF1vfHWcjfi6CB8QqSRO9lAOumX7ItujAzCU3I3GjBHQvA2
EyqAPDH8HoDzvWXZ11QJmlvJrcvi9ilxn7uNsC3XhdIY99b4QyiHUgAZ1g18c2HL
YGnLOmCZqVI/dvYkYDd/SQ6jAv7c/WEl8KhVRvWA58TInndRVnP3iRTsUzpiS79e
PZbiReifCtdbVwvOCT1U7U/tD52pBVL2QtzrzztrHn2jTnTKSjmxvTEobw/4WBpn
OSlwAb9tppHB+O1YJcSjF8YXZwETXMk+9YTBzwN55nCrgEVe+tM4RHt2rysjfyzJ
T0qwa5QSzrjBa7UM1NwldDrnOZUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRfYmvz
kT9FNkFhe7epcOset/O4sDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZDEzZDI2YWUtMzZiMS00ODE1LWE3ZjAtNGRjMDkwZDE1Yjc4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADOBMA0G
CSqGSIb3DQEBCwUAA4IBAQC0GdcV5ib4wGHx+c+3yju5DgIj8z0fVgTxhYvingdj
TeGwWYg06ZVauhqG8//O9ehJWGFwkBTOu3R0nmV3hUnBbGyFBMiJfFuSzAQLtBml
1ciAtRUuj9npSYVC4A6p+4yc85hI6a+6zId16TJRJGNu52WIg9tDnKhQtZpJinNg
Qi4YzzoJ/b11XyZTUX3u+FrszPvv5LRCh31VFWgeSe+puOU9QL/FwkmtIsnZO0LR
2B8JZ+LS3mKJaXyG8SbE8v5ep8lp7EBHkIE77ArpgvzzUFdkXS1vczo47vpBxqz6
b0FcKb4hnSegk85Rl+CBauhZJgScFhodvPXn6Xzy9D6x
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:42:59 2026 by rpki-client