Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/de83ab0d-730e-4ba0-9d22-af2c8b7fd8f7.roa
File: de83ab0d-730e-4ba0-9d22-af2c8b7fd8f7.roa (raw, json)
Hash identifier: daz9P7jmoDqxWoP7nuCqDwhHoTKPHhu3niFlnu/DaD4=
Subject key identifier: 23:4C:35:38:48:C9:63:37:1C:A3:3A:15:2A:65:EA:1B:84:67:35:5C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 77C9930603990ED0ABDB6332F69B70F98692F1F5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/de83ab0d-730e-4ba0-9d22-af2c8b7fd8f7.roa
Signing time: Fri 07 Aug 2026 05:50:13 +0000
ROA not before: Fri 07 Aug 2026 05:50:13 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.40.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:c9:93:06:03:99:0e:d0:ab:db:63:32:f6:9b:70:f9:86:92:f1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:13 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=d5d0304268fd6bce7867fa71d9401a7829a702d7962a75d7f2123593483bf65f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:b9:f2:df:26:ab:28:ae:7c:30:1a:2c:f6:
8c:42:6f:9c:ee:17:31:9f:44:78:7e:1c:48:5d:20:
56:d6:a2:7e:32:66:ee:b3:cc:6c:69:a1:af:35:11:
5b:80:95:8f:32:a9:40:8d:5e:06:f5:ac:c8:5c:79:
fb:52:c2:b4:d5:41:33:b5:15:fe:2a:ea:5d:0c:32:
39:d2:0f:e4:cc:ad:35:06:1b:e2:43:69:f3:71:f0:
7b:47:60:47:9e:92:ff:dd:d1:19:00:66:68:cd:17:
6f:5e:18:97:a3:4d:00:f8:92:72:31:27:f5:a9:df:
b8:ef:06:80:ea:b5:b4:61:0a:a8:54:68:9e:3d:43:
5e:1e:d1:d9:1a:5a:43:35:28:20:47:76:ad:35:c4:
a7:1a:d0:1f:ec:15:9e:3c:12:cc:10:08:5b:fc:1f:
69:52:c1:78:b3:57:ba:8c:61:bc:93:d3:59:67:46:
49:56:1d:9c:51:f4:73:41:5e:34:70:40:f7:f5:5a:
2b:61:34:39:1b:f1:d8:89:b9:73:ce:2e:85:ff:98:
d9:3b:95:40:c6:17:80:bf:cc:f6:88:65:5d:82:00:
a3:18:1d:0a:dc:4d:52:f7:ca:ae:50:db:68:e7:86:
9b:c6:cb:ba:60:1f:f2:70:ef:a3:69:3e:ea:bd:bb:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4C:35:38:48:C9:63:37:1C:A3:3A:15:2A:65:EA:1B:84:67:35:5C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/de83ab0d-730e-4ba0-9d22-af2c8b7fd8f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.40.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:ca:97:88:fc:4c:a2:db:78:a6:9b:18:e1:ab:65:f6:43:0f:
c9:ca:04:39:a6:7f:f1:04:b2:04:e6:9c:22:99:a4:73:6c:a4:
42:7a:0e:92:fb:b2:8e:ad:45:27:ae:90:6a:90:6e:a5:ea:ef:
17:ea:4f:93:85:56:48:6a:1a:36:7f:8e:f0:d2:25:54:13:cb:
cf:fd:f6:54:d9:ec:6c:46:fb:10:0d:98:c2:3d:25:bb:36:f2:
9e:b4:2e:b9:ae:1e:e5:a0:6b:d1:bd:1c:af:20:4d:23:65:c4:
b8:7c:2f:25:d5:55:13:8f:74:a1:c5:cc:3f:47:c2:d3:4e:2d:
23:87:d8:d4:0f:9e:ff:b1:66:5f:a5:38:f1:88:1c:cd:c7:7e:
73:86:cf:78:6d:80:bf:d7:aa:0d:f8:d5:ad:de:0e:38:96:94:
5e:5b:e8:7a:ff:55:a3:e6:70:55:21:ea:02:9b:f2:cc:0e:21:
3f:cd:e9:7a:b6:83:b4:05:23:f6:ed:de:6b:a0:39:c0:b6:8b:
a0:7b:f7:18:c4:28:d5:ce:96:67:88:b7:f0:27:e7:a0:2b:54:
93:43:db:3c:77:76:99:7e:31:1a:dc:ac:e9:96:c8:43:03:45:
c0:ab:23:f1:a3:47:0d:e1:27:5f:ae:79:11:c0:21:c7:c7:d7:
44:8e:ac:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:44:14 2026 by rpki-client