Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa
File: e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa (raw, json)
Hash identifier: u4yvs9sSt0snrAHEoGeX6s7XYQBFmw4WSR4AsiIdD74=
Subject key identifier: BF:1E:D7:36:42:2D:38:08:FE:97:C0:1B:46:D3:D8:27:AE:0D:88:D6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 66EE1685E35D7731C6839D845E9137205EE40760
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa
Signing time: Fri 07 Aug 2026 05:50:07 +0000
ROA not before: Fri 07 Aug 2026 05:50:07 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.204.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ee:16:85:e3:5d:77:31:c6:83:9d:84:5e:91:37:20:5e:e4:07:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:07 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=dfa5072fd4383e3ab8962c4ad3e88ea17d4584d177db6ae71041d907a04df35c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:fe:ea:3f:21:fd:9b:ec:8c:4e:80:24:c8:
5e:65:ab:26:7a:9d:9b:ed:f2:c2:1f:6b:c3:84:dc:
c1:71:2c:f2:6f:b2:68:04:91:91:d5:c3:bf:94:47:
23:5f:58:f2:52:68:8a:94:ae:0b:b9:0e:48:6b:9c:
49:6d:52:7a:2a:ba:3e:a2:20:bd:48:2d:6b:b6:54:
0e:9c:e4:14:41:52:d4:a5:9b:d8:ad:da:ad:69:31:
98:7e:2e:df:f6:8b:2b:68:36:84:46:4a:56:ae:8c:
0f:c5:9e:29:4f:b9:56:2e:f9:b2:df:fa:c1:cc:56:
10:d9:3d:11:6e:bc:1a:03:3d:f6:13:4d:02:b2:84:
d6:f8:df:f6:3f:24:8a:e1:5a:13:bd:7f:a9:f6:31:
ae:6c:70:b5:34:36:8c:d3:44:e2:bc:bc:6c:c4:e8:
5d:dc:c9:89:96:5d:a5:3f:5a:2f:36:96:d6:3c:52:
87:48:20:0d:1c:66:51:39:9f:a7:11:41:2d:8c:a2:
01:44:38:d9:15:71:c4:29:f9:e0:a2:52:12:d0:b3:
4f:b5:ef:8a:6a:28:55:d9:28:b3:36:d6:b7:13:2a:
41:24:cf:67:fe:72:f4:5c:30:30:74:18:f9:68:cf:
c2:f8:a1:b0:dc:a2:80:e3:6b:4c:29:96:4d:e8:d8:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1E:D7:36:42:2D:38:08:FE:97:C0:1B:46:D3:D8:27:AE:0D:88:D6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.204.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1d:df:0d:ec:14:9e:a8:61:b2:90:0d:39:f2:e4:d9:b9:91:b4:
27:f5:8b:a7:1e:3e:5b:25:a5:ad:15:e8:c0:fb:c6:ec:4c:f6:
2f:9f:91:31:b8:26:53:19:f4:6e:ec:96:98:45:d1:0b:bb:af:
08:eb:49:b9:a1:2c:bd:7f:04:a8:ad:47:26:12:38:e0:fc:e7:
76:69:ab:9c:04:18:ac:30:12:64:cc:36:e3:1e:cc:09:1c:b3:
66:30:21:ca:3a:37:a9:9c:af:ae:36:3b:6d:fc:0e:de:97:8c:
bf:f8:ed:09:51:c5:4d:8f:33:6f:67:75:11:81:24:a2:95:c5:
84:ce:cf:0d:71:b6:44:13:35:0f:cf:d1:08:90:a8:2c:6c:e6:
ee:21:4f:3f:d3:15:2a:49:5d:88:86:e5:65:66:85:83:08:32:
31:76:7d:af:db:5d:1d:b0:61:d7:bf:3e:0f:31:4d:71:7b:54:
a8:49:17:cd:d4:a8:52:84:79:a0:f2:72:1d:82:fd:9e:56:a4:
0b:dd:1d:57:db:c5:d1:50:39:71:5d:48:58:30:0d:73:c7:fb:
86:c1:37:59:c4:02:c4:61:d5:79:14:32:cf:93:ba:78:95:f7:
15:af:f3:ae:2c:4c:a2:36:ef:3c:12:01:40:64:b8:bf:65:1f:
06:7d:5d:bb
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUZu4WheNddzHGg52EXpE3IF7kB2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDcwNTUwMDdaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGRmYTUwNzJmZDQzODNlM2FiODk2MmM0YWQzZTg4ZWExN2Q0NTg0ZDE3N2Ri
NmFlNzEwNDFkOTA3YTA0ZGYzNWMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANAc/uo/If2b7IxOgCTIXmWrJnqdm+3ywh9rw4TcwXEs8m+yaASRkdXDv5RH
I19Y8lJoipSuC7kOSGucSW1Seiq6PqIgvUgta7ZUDpzkFEFS1KWb2K3arWkxmH4u
3/aLK2g2hEZKVq6MD8WeKU+5Vi75st/6wcxWENk9EW68GgM99hNNArKE1vjf9j8k
iuFaE71/qfYxrmxwtTQ2jNNE4ry8bMToXdzJiZZdpT9aLzaW1jxSh0ggDRxmUTmf
pxFBLYyiAUQ42RVxxCn54KJSEtCzT7XvimooVdkoszbWtxMqQSTPZ/5y9FwwMHQY
+WjPwvihsNyigONrTCmWTejYkH0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBS/Htc2
Qi04CP6XwBtG09gnrg2I1jAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZTliNTljZDItNDNlZi00NTMzLWE1YTUtNTg5MjQ3MWFiNjRjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPMMA0G
CSqGSIb3DQEBCwUAA4IBAQAd3w3sFJ6oYbKQDTny5Nm5kbQn9YunHj5bJaWtFejA
+8bsTPYvn5ExuCZTGfRu7JaYRdELu68I60m5oSy9fwSorUcmEjjg/Od2aaucBBis
MBJkzDbjHswJHLNmMCHKOjepnK+uNjtt/A7el4y/+O0JUcVNjzNvZ3URgSSilcWE
zs8NcbZEEzUPz9EIkKgsbObuIU8/0xUqSV2IhuVlZoWDCDIxdn2v210dsGHXvz4P
MU1xe1SoSRfN1KhShHmg8nIdgv2eVqQL3R1X28XRUDlxXUhYMA1zx/uGwTdZxALE
YdV5FDLPk7p4lfcVr/OuLEyiNu88EgFAZLi/ZR8GfV27
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:31:52 2026 by rpki-client