Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa
File: fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa (raw, json)
Hash identifier: 8aLW1pFmZdBP6DsrF4oyZBTgvRLhIDD+J2cvMlCWNb8=
Subject key identifier: 7D:8F:21:8C:7C:52:6F:D8:F9:1C:F0:4A:49:C8:D6:D6:B4:4C:9C:FC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 66DE42C4FC69169D98181C8DC0576358CB3260D5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa
Signing time: Mon 26 Oct 2026 05:50:21 +0000
ROA not before: Mon 26 Oct 2026 05:50:21 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.76.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:de:42:c4:fc:69:16:9d:98:18:1c:8d:c0:57:63:58:cb:32:60:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:21 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=910d994a0fe39263b5365d6707be3e7f19456848367c89b096439f77f00540c5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:bd:50:21:2f:da:55:66:9f:f7:a6:ea:a2:
33:6d:b7:19:85:fa:7c:80:6d:85:6e:25:c3:ed:80:
65:60:6f:e5:71:6d:fc:fe:2a:d5:54:36:7b:39:e9:
1f:70:12:52:14:f1:d1:53:50:a6:f7:b1:fb:75:36:
e8:08:7f:09:40:40:06:1a:ef:23:41:80:3a:36:e2:
a3:ff:6e:41:14:cc:30:d9:d7:19:97:8d:50:bb:7b:
8e:29:a9:4b:d6:00:c7:9f:31:52:ce:4c:1c:ab:c0:
c8:be:93:1d:bf:7c:5a:e7:6f:00:38:09:d4:ab:48:
8c:d9:89:a9:6d:0c:eb:4e:15:5c:39:61:5a:1d:e2:
7b:81:8b:08:e5:5a:0b:3e:cf:2c:77:c4:30:a7:a0:
b5:a0:49:10:07:ca:06:3c:f4:31:d8:44:3f:35:3c:
4d:f6:10:66:0e:6c:b2:63:56:8f:42:30:24:af:3a:
b1:f1:78:b5:e7:86:eb:98:b8:c0:44:2f:cd:8e:b1:
13:d1:44:99:30:79:57:b5:b8:ba:da:9d:71:f0:79:
e2:ea:ce:a7:04:13:75:fa:07:6d:d4:c4:4c:a1:6a:
04:0f:cb:47:51:bc:83:d9:1e:59:0d:5a:fa:e9:ea:
6a:ea:5d:3d:b3:73:a5:ed:d0:3d:f2:89:12:05:73:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8F:21:8C:7C:52:6F:D8:F9:1C:F0:4A:49:C8:D6:D6:B4:4C:9C:FC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.76.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:d1:42:b7:9c:5c:65:e5:59:4c:5f:19:5e:af:1b:8d:49:ed:
1b:3c:c0:81:b4:44:74:1c:4e:56:6b:e0:ca:5e:15:a0:f2:b1:
03:a5:61:6d:1c:fd:97:74:20:38:43:33:c5:1b:f2:ca:96:34:
e0:56:0d:5c:19:2a:b7:0c:20:27:e6:5d:ec:c9:46:3c:a6:46:
e3:96:9c:e9:4b:d0:ba:09:94:83:ee:4b:40:6f:45:c5:33:b1:
98:b9:49:ba:b8:4c:46:de:14:3b:a1:dc:16:d5:a5:93:89:5a:
1e:fb:7d:cb:86:6d:40:47:0a:80:88:36:e8:f8:2e:5b:02:04:
4a:c0:c8:3c:11:64:17:9a:fe:eb:9e:3b:3e:67:8f:e4:06:22:
4e:95:96:d4:9b:89:04:ec:23:32:25:70:6b:19:f4:37:c7:65:
86:5f:cf:41:4e:0b:a5:47:7a:70:c1:5c:1a:61:6c:a1:61:b6:
a6:97:08:87:07:5c:74:f4:cc:22:01:dc:b3:79:14:40:80:7a:
e2:db:97:f9:9a:9c:22:4f:ed:3a:1b:f6:42:6b:d1:f7:10:7c:
f7:9d:b6:8f:49:37:45:90:2f:da:89:cf:4c:24:1e:d1:d7:f2:
f8:7a:58:de:95:f2:e0:37:ee:5c:d5:03:76:e1:16:bf:39:3b:
79:46:f9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:21:24 2026 by rpki-client