Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d7fdedfc-2bdc-42cd-a714-2abbc02deae9.roa
File: d7fdedfc-2bdc-42cd-a714-2abbc02deae9.roa (raw, json)
Hash identifier: RxpywCxgtlpQD/gMQhZG+8XGXYOSYHD+ubn8+5Gvqxs=
Subject key identifier: F8:4F:32:91:60:18:24:42:4E:8E:85:21:82:E8:1D:87:3C:B4:9C:3D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 31C3322F3EAC8AE495BCCD6AEB3B40D003C5595E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d7fdedfc-2bdc-42cd-a714-2abbc02deae9.roa
Signing time: Mon 26 Oct 2026 05:50:52 +0000
ROA not before: Mon 26 Oct 2026 05:50:52 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.151.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c3:32:2f:3e:ac:8a:e4:95:bc:cd:6a:eb:3b:40:d0:03:c5:59:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:52 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=19a3c21bca23cb8bb4973d8e56bca24bad5bb419a3b14fe6c54b5a4ada22d428, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:f0:93:db:d9:59:c1:cf:02:57:b6:97:5c:
04:f4:52:b9:bb:8d:e4:7d:13:ac:b5:18:53:1f:9f:
1b:2f:43:58:5f:58:3e:5e:b2:a1:f4:9f:ea:3c:53:
67:1f:a6:0a:7d:49:29:57:0a:80:1e:38:52:e7:7e:
f5:d9:87:3d:eb:82:89:39:1c:9d:36:f6:b6:89:56:
05:74:cd:d7:32:6c:ef:34:66:12:75:5b:6f:0b:f7:
31:43:c2:fe:10:49:ee:30:a8:82:a1:b4:ab:e5:b3:
44:f7:62:e2:73:2b:13:de:ad:35:d0:9c:3f:7c:8c:
2a:54:57:09:6f:12:da:5d:78:b8:34:60:9e:dd:bd:
8a:f0:5f:ec:55:a0:79:ae:02:e3:23:a9:52:06:db:
02:4f:65:43:4e:f6:03:c1:cf:9d:f1:fd:5c:f3:91:
cf:d6:98:f7:ca:88:7f:e6:a2:56:d4:d6:da:85:a2:
a8:b8:63:cb:49:42:8a:8c:6b:3a:01:16:4b:48:2b:
f3:ea:49:af:4e:ab:b2:be:8f:55:dc:1d:2d:c6:db:
1a:c5:07:49:68:c7:ee:a9:b4:b1:c7:40:99:14:07:
a8:09:de:c4:e2:58:17:37:a9:ce:22:1a:e3:1c:2b:
ca:35:a3:af:74:1c:57:40:f9:0c:eb:dd:c0:d4:3b:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4F:32:91:60:18:24:42:4E:8E:85:21:82:E8:1D:87:3C:B4:9C:3D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d7fdedfc-2bdc-42cd-a714-2abbc02deae9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d0:aa:7b:ae:6b:d8:f7:66:42:9a:45:1d:da:4f:2b:16:df:04:
52:31:d0:61:3f:ff:8f:12:c9:e2:c0:0a:3b:00:3d:08:97:3d:
04:fa:8a:49:29:fe:e9:61:b2:71:c4:4c:11:55:6d:87:f9:02:
02:d3:16:b2:f7:4a:4c:8d:c7:3f:af:2f:47:4a:78:46:d6:ee:
d3:a0:28:d9:ed:bd:e1:6a:69:48:cd:8a:0a:48:d2:de:81:eb:
11:6b:78:b1:e2:9a:e0:bc:a6:3d:f7:af:92:14:1d:17:76:59:
6a:d2:8e:36:50:9e:11:b1:76:96:3c:29:f2:e0:51:78:fb:ac:
8c:00:00:4c:9d:74:77:19:36:e0:da:8a:7f:20:3f:e9:59:58:
19:7d:16:f5:bd:04:c6:8c:34:1c:2c:7a:ba:79:d5:99:0a:71:
92:34:a1:cc:d3:c1:c3:5e:a1:b6:87:14:2a:7a:e3:35:cb:da:
22:31:d0:af:fd:38:be:68:0d:10:8e:24:8e:2d:43:ad:cc:7f:
e1:0f:7e:64:a8:7d:36:11:f1:97:95:4a:2f:ab:78:35:e0:5a:
d7:1d:3c:06:b8:a0:d1:1b:fd:54:e6:63:cd:a2:1b:33:f0:e6:
5e:7d:dd:e5:d0:8d:8d:68:f2:06:e6:ba:5a:78:7e:12:e3:c5:
1c:0f:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:25:43 2026 by rpki-client