Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d241761a-4c6e-4db3-ba0a-26b2eda6222a.roa
File: d241761a-4c6e-4db3-ba0a-26b2eda6222a.roa (raw, json)
Hash identifier: 4mPG8mkGAz1Z/W3eZRm+8tL9HwhB6PTANkzniBTOpHM=
Subject key identifier: C9:5C:8D:D4:EC:09:B5:2B:32:6F:0F:6E:FF:9B:E1:28:55:81:A8:12
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 68609513C43B326AB106371AD68DD065A5C88EE6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d241761a-4c6e-4db3-ba0a-26b2eda6222a.roa
Signing time: Fri 07 Aug 2026 05:50:49 +0000
ROA not before: Fri 07 Aug 2026 05:50:49 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.110.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:60:95:13:c4:3b:32:6a:b1:06:37:1a:d6:8d:d0:65:a5:c8:8e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:49 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=e85cc23468724b2b6866a652c7216a575d10c17c785d43477f93ff4b5d556913, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:89:0a:6c:32:bc:bc:e8:a8:40:cb:43:97:
c4:9d:f8:e2:86:14:01:28:0d:fa:ec:48:e5:4b:57:
c7:c9:29:2e:d8:31:4d:fb:2b:d9:48:c9:bb:c9:8e:
60:9a:8b:d4:fc:b7:0a:22:0a:30:a8:22:87:76:09:
e9:34:78:21:f9:dd:c4:c9:eb:a7:d0:3e:28:4c:45:
38:3b:14:68:84:0c:10:97:ee:2c:e5:0d:30:01:28:
62:46:2c:6f:85:a9:88:50:29:bb:f6:7e:16:ac:d3:
b0:ab:35:7b:32:58:62:25:6f:69:be:c9:23:c1:43:
4f:d4:95:15:a0:86:7e:c9:0b:7d:52:8d:8b:da:16:
90:74:0b:30:e9:af:05:3f:ab:96:9d:85:f9:e7:a6:
42:45:33:40:64:de:d5:d3:d3:32:98:99:33:e1:eb:
5e:17:7d:5c:13:f4:7a:58:45:0c:c7:74:3d:d5:b2:
6d:9d:09:9d:96:bf:32:e2:4d:b8:17:4d:da:4f:a5:
46:05:c5:96:d3:0b:e6:2d:d3:cd:44:c1:6e:06:cf:
03:af:27:f4:2a:4a:df:b6:76:03:ae:43:43:ab:b4:
7e:72:b9:9d:c2:f3:6c:04:fe:9f:c1:23:bb:aa:de:
d1:83:5f:5e:69:a8:09:e5:3a:fb:fd:ee:62:26:55:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5C:8D:D4:EC:09:B5:2B:32:6F:0F:6E:FF:9B:E1:28:55:81:A8:12
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d241761a-4c6e-4db3-ba0a-26b2eda6222a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:c7:23:4c:84:fb:28:e8:14:3e:5f:3e:d5:ad:86:eb:b2:67:
86:da:49:97:7c:be:c6:8a:78:bf:ea:b8:69:85:5c:f3:aa:bd:
74:79:39:5c:11:25:4a:0f:82:39:70:29:a5:e5:8c:4e:ad:ba:
6a:62:60:68:fb:29:e5:bc:36:c4:9b:bc:0d:b8:85:60:ea:31:
41:31:ff:dd:32:8b:bd:60:75:f7:6d:22:09:13:b9:2e:55:71:
8a:52:e1:ec:70:83:c6:21:c1:de:59:4c:6b:5b:13:ea:de:1d:
cb:fb:76:78:17:51:12:99:3b:58:42:1d:d2:09:9a:76:57:66:
73:55:74:bf:c9:d6:74:90:8a:e2:d8:d1:ba:b1:50:e2:3d:fc:
a6:38:63:7b:6b:fa:cc:79:10:ee:63:f9:d2:04:31:05:59:d6:
a2:16:2f:81:cf:7a:94:2d:33:f0:16:dd:43:59:d2:86:e7:7a:
31:ca:77:9a:c8:8b:1c:dc:05:15:15:c0:9d:be:17:87:bf:bd:
65:50:28:66:c9:3b:06:14:65:1a:68:2d:25:10:60:22:9d:b3:
a8:3f:4c:aa:e2:53:94:b2:95:fd:b7:37:04:eb:c5:81:b4:dc:
a7:5f:ba:91:16:53:d8:f7:c3:13:bd:da:1f:2f:d8:33:ec:21:
e8:46:29:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:02 2026 by rpki-client