Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e2093baf-9227-4159-b7ff-180369fe3bda.roa
File: e2093baf-9227-4159-b7ff-180369fe3bda.roa (raw, json)
Hash identifier: AHiZWyk3jsWpxGAS6z1pze7JZSs6y+VJvdmt2UCZRCc=
Subject key identifier: 27:07:BF:BC:AE:24:CD:5E:A2:46:66:11:05:54:91:7B:A6:49:C9:F9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5C44874C85CEE2536B4F55A261C35AE21DB838AC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e2093baf-9227-4159-b7ff-180369fe3bda.roa
Signing time: Fri 07 Aug 2026 05:40:13 +0000
ROA not before: Fri 07 Aug 2026 05:40:13 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.88.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:44:87:4c:85:ce:e2:53:6b:4f:55:a2:61:c3:5a:e2:1d:b8:38:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:40:13 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=151182fe23a3ece3a9fa73fa4ac18f3c8d94eb78b0bd7a0221c0e9555b287485, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:ce:08:5e:ac:e2:bd:6c:95:c3:1d:60:8e:
ea:de:69:91:02:31:eb:79:1d:99:8f:29:bb:15:ce:
99:25:0e:79:37:10:e3:39:10:6b:0c:9d:c6:5a:b1:
ff:96:39:4f:16:0c:41:88:3a:b9:a5:03:d5:99:c0:
3b:aa:b7:7d:6e:be:40:f8:29:5d:86:19:73:5b:33:
15:f3:02:41:e2:03:f6:16:2b:d6:67:e4:29:c2:c7:
dd:54:a8:b0:ed:61:e1:c8:a6:e4:0e:19:2c:a9:51:
a5:6b:14:e7:96:28:9c:d0:83:6e:01:06:f8:15:fb:
d4:39:2a:65:0a:b1:c5:0e:6d:4d:50:a6:7e:52:7a:
27:00:68:86:04:7b:7e:e6:bf:ec:73:d4:3d:cb:34:
57:e6:dc:3d:17:d1:8b:09:0c:2e:60:17:53:2a:6a:
74:ae:bd:5f:5c:20:ed:54:0e:3c:7b:50:d0:cf:1c:
4f:b9:13:6f:9e:66:5e:f1:8e:70:41:f3:1b:b9:fc:
4e:1d:b1:9a:7f:85:de:22:0b:36:ab:3b:68:58:98:
87:c6:5b:ba:f1:d5:88:e6:db:94:4b:3a:04:18:83:
bf:f1:ae:80:c0:7f:5a:f4:c1:1e:23:16:c7:b2:a5:
c1:d9:fc:96:c6:8c:33:91:1b:72:f2:ee:7f:a8:0b:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:07:BF:BC:AE:24:CD:5E:A2:46:66:11:05:54:91:7B:A6:49:C9:F9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e2093baf-9227-4159-b7ff-180369fe3bda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.88.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:32:21:50:78:36:1b:c2:e6:28:de:64:68:85:4c:f0:90:26:
27:77:0d:67:59:fb:cb:c7:03:22:eb:f6:77:7b:5a:73:1b:75:
3f:13:a6:d5:bf:38:26:12:08:3d:0b:16:c1:e7:6a:71:bb:02:
f8:14:b7:cc:c8:c3:f1:d8:84:8e:7c:71:07:ea:1c:0d:79:4b:
12:cd:1b:6c:85:2b:7d:7e:ae:09:47:e0:30:4a:1f:dc:1f:45:
1e:53:a5:98:4f:91:7d:af:08:ea:d9:8d:67:c6:cb:6e:4c:b0:
e7:72:96:cd:90:7d:ca:ee:8f:f4:46:76:9a:5e:83:01:cc:74:
87:db:af:b8:37:64:97:1e:52:c4:c9:88:f5:0a:6b:96:3e:97:
0f:9e:14:7d:9b:38:e5:cb:a6:cf:b8:9d:80:c8:a1:9d:7c:da:
6d:ae:ad:0c:f5:53:ae:5f:6a:02:c1:8e:3e:57:23:4a:02:3f:
33:e9:48:30:dc:b3:e1:ab:b6:15:80:82:02:c3:eb:3e:b1:0d:
f8:1c:5c:d9:f8:9e:ba:19:a2:da:6e:c6:37:54:13:5d:f9:50:
a0:2e:b2:2e:4d:cb:91:be:fe:f9:a8:c9:8f:cd:c5:b8:4a:16:
1a:21:0f:06:b2:db:27:50:6a:9d:02:d9:52:b0:35:bb:22:f2:
c9:20:f1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:06 2026 by rpki-client