Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5576ca6-a1ae-4a46-b6ed-04a48efc19c7.roa
File: f5576ca6-a1ae-4a46-b6ed-04a48efc19c7.roa (raw, json)
Hash identifier: 0IHxLJDEjIEEQiU6dET3lm1jintjOHoJhL6zVcWIAfo=
Subject key identifier: D7:AE:81:98:A4:69:0B:6A:A7:69:3D:B9:5C:2C:BF:F7:D3:FD:26:4C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4AA0B0E543F2A18F327201DF505D721067593101
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5576ca6-a1ae-4a46-b6ed-04a48efc19c7.roa
Signing time: Sun 04 Oct 2026 00:40:09 +0000
ROA not before: Sun 04 Oct 2026 00:40:09 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 51.46.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:a0:b0:e5:43:f2:a1:8f:32:72:01:df:50:5d:72:10:67:59:31:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:09 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=df043f0746e6f1a049e500e77b9b669d14ddf29ca7917275f909fc135f9c278b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:dc:75:a6:6a:55:c4:a8:be:17:2a:e5:15:
57:0d:a3:29:de:72:54:c8:47:02:d0:d0:f2:6c:e5:
eb:36:3b:7e:22:f2:37:c2:f3:5c:a3:2d:6d:ab:d1:
1c:2d:26:f5:50:b5:c1:c8:f0:49:be:58:94:1f:fb:
16:02:f0:48:51:a5:0b:7d:25:6f:92:eb:fd:79:b7:
bc:19:37:b3:17:cd:9d:f9:43:f7:4b:01:2d:bd:ae:
e3:01:6f:f5:60:77:eb:6f:09:a9:28:ce:b6:df:8b:
3c:36:64:a8:9b:d8:fe:a4:f9:3b:f0:b5:3f:6c:d0:
23:44:49:33:f7:48:e0:2b:34:5c:02:13:49:1f:2c:
67:37:5b:33:00:3d:a9:76:e8:9a:3d:12:1f:db:78:
c3:ff:10:0b:eb:5c:a7:5b:c7:ed:5c:9b:f1:65:b8:
03:1e:4c:dd:bc:a5:a3:b8:b1:89:f3:c6:69:9a:7d:
5c:01:ad:46:37:a3:4c:6f:07:61:6a:43:56:42:74:
e0:be:20:b2:1f:b5:49:2f:d1:96:2b:66:0c:1f:71:
71:1c:a4:ca:31:21:8c:be:67:75:0d:a2:75:ab:3c:
a4:58:46:65:33:31:0a:27:55:d4:9a:bd:3d:aa:d5:
37:b8:76:89:9a:d7:c5:a3:aa:c1:df:82:fd:2e:3f:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AE:81:98:A4:69:0B:6A:A7:69:3D:B9:5C:2C:BF:F7:D3:FD:26:4C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5576ca6-a1ae-4a46-b6ed-04a48efc19c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.46.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7d:59:49:48:03:b8:59:ad:12:74:97:0a:c9:a2:a3:de:05:3c:
ea:de:75:ce:35:c0:b5:3b:97:25:4f:17:11:2a:78:f7:a4:a4:
5a:74:70:5d:59:92:10:81:b9:84:e1:7c:c5:b0:e1:b1:de:6c:
54:46:a1:c6:7a:10:0a:c4:53:21:0d:8e:9e:92:24:d7:15:5e:
20:ba:0e:46:7e:ef:bc:59:3f:43:15:53:2b:1b:88:6e:fc:cc:
4e:dd:f7:e2:ec:ec:d7:30:de:3f:7e:ad:74:16:27:39:33:7b:
5b:98:38:92:e6:d2:b7:2f:14:d2:64:7d:6e:8f:43:a6:b1:36:
29:cf:42:fb:25:36:e1:46:06:84:9d:1d:9d:fe:be:cf:56:36:
7f:81:8a:c6:4b:2e:60:06:41:da:bb:69:29:1c:07:2f:3b:1a:
ad:1b:be:ac:e8:9c:40:11:da:72:d1:fb:22:95:9a:d2:8a:d4:
93:9d:0d:95:cf:cf:d6:6a:c5:99:68:8f:9f:3c:31:47:ac:36:
c3:3a:53:9a:ea:b4:57:3a:3a:13:3b:0e:ca:86:f8:69:e6:eb:
7e:ba:d0:8c:74:ca:ab:3f:b4:39:e7:74:af:61:14:39:92:f8:
91:54:93:ea:ca:04:24:c2:b1:e6:19:a2:34:d5:8c:ce:bc:85:
e3:ca:ad:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:23:30 2026 by rpki-client