Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d51a4935-8601-4ebd-a099-1d61b0a661b3.roa
File: d51a4935-8601-4ebd-a099-1d61b0a661b3.roa (raw, json)
Hash identifier: 0YgwWuEQ3/ZmE5duNf3sqPp6C1XagqYR4XWv8f/TIyA=
Subject key identifier: 6E:A1:85:39:72:96:D3:5A:C6:F2:18:AD:0E:C2:E5:48:6B:D2:6C:52
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 61130B91680CF1FAE0597472E714D4D04F7E31F8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d51a4935-8601-4ebd-a099-1d61b0a661b3.roa
Signing time: Fri 07 Aug 2026 05:40:15 +0000
ROA not before: Fri 07 Aug 2026 05:40:15 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.228.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:13:0b:91:68:0c:f1:fa:e0:59:74:72:e7:14:d4:d0:4f:7e:31:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:40:15 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=69cfa552b98958fba1d5eb3fc03f7dd79b0519733c984366593a49ff7be07686, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c1:22:8c:89:17:6d:0c:3e:1e:04:67:3b:ea:
6a:bb:75:07:59:df:a3:ac:59:81:d5:91:39:95:36:
8c:1d:fd:f5:16:01:fa:a5:fa:85:6f:e1:c7:ab:44:
dd:78:7f:49:83:b0:e7:b2:76:c2:a7:45:85:da:d2:
3b:60:20:af:8d:06:e1:0a:b4:c0:91:7d:3a:51:20:
92:16:e7:9a:68:7a:3d:b6:1f:32:80:3c:de:8a:d7:
c8:51:bd:00:1e:b0:e8:0c:a6:97:52:10:63:d3:d6:
65:59:51:45:ae:93:c5:60:43:ec:c5:ae:41:3e:f9:
47:65:dc:e8:e2:82:65:40:e2:46:03:a2:61:17:56:
5c:57:76:b2:47:9e:d6:fe:f3:8a:e3:db:ce:9b:1d:
90:d6:74:47:90:32:ea:93:2b:26:12:81:28:cd:af:
51:48:76:75:60:8c:63:52:79:6b:ac:0e:54:aa:56:
f6:2b:b2:67:7b:ec:4e:6d:31:35:fb:6d:98:62:14:
b4:ad:6a:c2:91:8f:b0:28:23:9a:61:43:59:09:f2:
70:9d:23:78:90:9c:8b:73:09:87:62:90:d0:18:59:
da:2c:86:69:d4:46:dd:68:d3:3f:ca:42:ea:c2:19:
b2:ab:dd:8f:05:d8:04:d9:0b:f5:d2:8e:11:44:5f:
b2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A1:85:39:72:96:D3:5A:C6:F2:18:AD:0E:C2:E5:48:6B:D2:6C:52
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d51a4935-8601-4ebd-a099-1d61b0a661b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.228.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b1:f6:f7:4e:e1:73:47:38:e6:5c:94:c1:dc:21:f4:45:d5:df:
2e:2f:00:fc:9d:80:ec:8d:11:7c:55:ff:7b:c8:e5:24:b9:fc:
48:6a:be:f9:44:43:1c:22:0f:cc:56:31:8e:8e:e4:78:b8:46:
f1:06:a5:e1:b5:a0:60:68:0b:ac:d3:37:b6:13:79:30:62:aa:
ff:7c:dd:40:d9:4a:dd:be:15:b1:e0:37:3e:6f:98:39:57:cd:
61:c9:50:d9:03:eb:01:af:0a:b1:2f:d6:d1:d5:1d:cb:f3:f9:
f1:36:00:6f:73:ca:c9:a9:11:65:8c:78:59:0e:f1:98:17:dc:
41:4f:a0:37:d0:ea:e3:81:79:77:ba:39:cb:4a:ae:39:64:f8:
b6:47:45:94:9b:9d:55:2b:2f:9b:f6:fa:a2:80:66:66:2a:46:
52:9c:50:a7:67:c5:92:3d:d1:75:f3:f2:da:d6:fb:7c:dc:b2:
6b:d1:48:76:a5:2b:63:94:e0:d5:8b:7d:dd:1f:36:a1:26:37:
62:ce:25:8d:6e:f2:1f:71:00:a0:38:74:cf:0a:1c:3d:28:e8:
0b:f5:19:65:c1:d0:b0:95:90:1f:03:d9:ac:77:63:1a:07:f8:
93:5b:4f:a8:ce:86:a5:b7:ce:a1:c9:ad:b5:3a:e8:fa:af:bb:
44:0c:88:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:42:59 2026 by rpki-client