Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f060e190-89f7-4009-9831-b2d429343b80.roa
File: f060e190-89f7-4009-9831-b2d429343b80.roa (raw, json)
Hash identifier: fgTiYuIDaO8qj37wcjVXm6VeGKAv8MUV7bG0oKhrQtg=
Subject key identifier: 64:37:90:BD:88:1E:E6:00:0D:07:B8:38:9A:6C:92:3E:E9:22:A9:19
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4599F3BD9063B743EF4A7B879ACA6804E05A788D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f060e190-89f7-4009-9831-b2d429343b80.roa
Signing time: Sun 04 Oct 2026 00:40:10 +0000
ROA not before: Sun 04 Oct 2026 00:40:10 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:99:f3:bd:90:63:b7:43:ef:4a:7b:87:9a:ca:68:04:e0:5a:78:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:10 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=c5119eb07f5f7784407a78955095d0fb28ae03084046ef9f92132ccacf96bb51, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:6b:3f:f0:de:9f:af:a6:50:4b:d5:ba:fb:
e7:63:1e:a8:c1:b6:16:20:21:74:8c:65:5d:0d:36:
71:e6:8a:26:6d:a6:a5:af:6b:c0:7c:bf:0c:18:97:
75:08:48:b5:06:67:9c:07:7b:08:02:4b:b9:87:07:
be:4b:fe:68:91:9d:3d:ef:35:1e:91:bf:82:b4:1c:
59:22:09:b4:29:cd:28:3f:cf:22:03:6a:e0:83:3b:
0e:f3:88:1c:d1:f4:c6:a6:9a:36:d9:59:af:1b:c5:
0e:32:33:52:47:c0:32:8a:94:96:44:61:03:7c:8e:
7b:e8:90:65:5c:ab:da:9f:4a:1f:3e:cb:0d:5a:eb:
36:76:55:cf:30:12:5e:3b:b2:61:4f:ab:e0:9d:41:
99:bc:7f:43:06:1d:ac:83:df:56:a3:8b:ea:6d:4e:
5f:12:d2:dc:21:ff:3e:4b:17:b0:5f:e5:67:53:f4:
32:42:c6:5f:87:53:84:c7:5d:9c:15:b2:5a:bd:a0:
33:89:14:10:17:d0:22:2e:26:a5:44:1c:27:1b:20:
8b:90:07:4d:e9:11:61:35:9f:dd:5e:d1:6c:20:6b:
f4:e0:2d:e2:c8:ee:e2:f1:76:f9:a2:36:9b:33:4f:
68:6f:64:dd:c8:63:94:65:7d:9c:bb:87:10:e0:69:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:37:90:BD:88:1E:E6:00:0D:07:B8:38:9A:6C:92:3E:E9:22:A9:19
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f060e190-89f7-4009-9831-b2d429343b80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.0.0/15
Signature Algorithm: sha256WithRSAEncryption
d0:3c:0b:1c:cd:f8:82:36:b1:e7:eb:c2:de:d2:99:1b:29:5f:
0f:ee:89:0c:36:0a:5c:ca:af:33:fb:9e:df:88:70:80:ec:4a:
4f:19:d8:93:9d:e5:2e:1c:f3:d5:8c:48:55:42:05:e3:0f:29:
2e:41:4c:e9:b2:5d:cd:7b:78:06:9c:a4:3b:4a:66:69:ad:6c:
be:69:44:19:69:1a:e9:08:bd:02:5e:79:9b:f2:81:b2:30:61:
62:a6:7a:81:91:fe:c7:95:7f:5a:87:e4:4b:7f:0e:7d:5c:73:
2d:e4:7e:27:0f:bc:a6:c8:8c:1a:68:02:b6:6e:d8:cb:f3:ed:
84:9e:77:54:d2:99:ba:20:ba:1c:b9:60:45:f8:2c:f0:b8:d3:
1f:ac:75:fe:1c:ef:6c:94:9d:e1:0b:83:07:44:04:5d:ce:65:
04:05:17:04:ef:3d:40:cc:be:c0:3b:3e:af:26:6a:36:49:7f:
ba:f8:6e:6f:8b:45:a8:1e:c6:57:40:22:bc:4f:ca:0d:a2:d8:
cc:a5:5a:80:25:e7:4d:39:35:61:14:59:b5:d5:1e:90:22:9c:
ec:a2:58:4a:0d:b5:1e:7e:25:43:d1:9e:4a:ca:a0:90:e3:b5:
5f:1e:1a:7d:ac:47:ed:e6:23:9e:a6:cf:5c:fa:80:58:73:c2:
49:48:d5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:34:41 2026 by rpki-client