Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa
File: fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa (raw, json)
Hash identifier: eBaxoj06jDbqQlqqv7b5SKD5Hc3cNW6J0rRyaveeaE0=
Subject key identifier: 56:2C:45:F0:A1:E1:4F:69:3D:10:9D:ED:6F:79:09:9A:59:D0:80:18
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4705F59734C2C5F4DDAD3D2E51706B02FAFE5124
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa
Signing time: Fri 07 Aug 2026 05:50:46 +0000
ROA not before: Fri 07 Aug 2026 05:50:46 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.76.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 18:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:05:f5:97:34:c2:c5:f4:dd:ad:3d:2e:51:70:6b:02:fa:fe:51:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:46 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=7d06d2d84226b86621036619e27313e32ad42181a5170b0b591dd1a18e96b57d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:41:c2:57:f4:2c:0a:6d:06:8b:f8:ee:7f:17:
3a:fb:e9:66:0d:96:5f:68:0c:9e:b7:3a:be:0a:25:
4d:e1:87:eb:a3:67:35:4f:5d:07:af:65:6b:e5:bb:
2a:4a:b8:51:ac:5b:ce:63:1d:df:7b:ca:73:a4:ce:
ab:14:94:57:22:68:b4:e4:65:aa:96:37:e6:ec:44:
9a:ec:f4:d6:76:40:9f:90:2e:e4:d3:81:20:59:b0:
44:dc:42:46:ab:69:47:43:f2:9e:7d:1c:75:45:3a:
d4:f9:39:2e:43:27:d8:06:81:23:3b:76:7d:fb:cf:
73:6a:32:18:d3:a7:c2:84:a9:7e:49:93:45:63:02:
32:e0:17:05:3b:42:2a:73:3d:de:53:48:50:fa:5c:
17:e3:ac:70:2f:07:bf:17:ac:15:a1:8e:29:8f:f0:
c8:f1:07:93:61:14:1f:ee:6e:a9:c5:4a:77:0a:fb:
91:01:e3:69:2a:d0:2b:81:da:94:69:11:83:a2:07:
72:f8:a1:b2:b5:35:8c:33:ec:70:4f:ee:97:e5:13:
d8:58:0e:46:e5:ad:b6:b3:6a:70:04:4f:f8:c3:09:
c0:a6:e0:13:7c:3a:e4:de:c2:98:c4:ae:4f:95:40:
7b:2c:a0:5c:9c:8d:50:61:e7:32:20:ff:e3:7b:1d:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2C:45:F0:A1:E1:4F:69:3D:10:9D:ED:6F:79:09:9A:59:D0:80:18
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fa9f76b3-644f-4e7b-96b8-a50117fd4d67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.76.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:96:1b:03:d3:92:a0:21:55:32:76:aa:91:bb:28:6b:60:4d:
0d:e3:d9:02:17:aa:cb:a8:70:21:34:dd:f0:26:32:86:1b:ac:
12:a2:48:83:e4:88:36:c0:3c:fc:dc:94:ac:65:f4:13:f1:b6:
53:f0:87:7d:98:9f:c4:73:8c:1a:90:7f:0b:bd:fe:b6:df:c7:
b3:dd:c1:bd:8c:9f:60:20:52:fd:2a:3a:bd:5d:25:af:1a:98:
4c:8e:05:0c:10:3b:3a:36:5d:75:4d:b6:ab:44:aa:b7:25:09:
c1:84:35:20:3e:65:c6:df:60:c2:91:ce:f4:4c:69:73:7a:a4:
6b:2c:dc:b4:1e:08:60:68:00:e7:8c:31:22:86:04:02:2b:63:
c6:bc:d6:9f:42:d5:52:7d:d9:e6:08:6b:83:11:bc:a6:f9:5a:
a7:07:62:45:13:c1:f2:8c:23:e2:2c:62:b9:0a:73:66:26:11:
dd:06:06:0a:16:ce:de:eb:91:da:d7:e6:23:29:f7:a2:cc:61:
29:b6:a2:b0:4d:af:26:98:c6:d0:69:86:33:9d:a0:07:98:3a:
d0:51:e7:e9:aa:5f:fc:d5:41:11:63:dc:e6:45:fe:60:45:6f:
0c:f6:31:4d:4b:bc:f7:71:23:fd:69:bd:bc:1b:4b:8b:b7:dc:
fb:b6:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 03:22:19 2026 by rpki-client