Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4a1cdc-1f22-4e81-a455-f69665f973f0.roa
File: fe4a1cdc-1f22-4e81-a455-f69665f973f0.roa (raw, json)
Hash identifier: Q9gX049+gcCUd/HMaBFbS2RuaTk5A8P2v7felV6mFzs=
Subject key identifier: 69:3A:1E:B4:28:89:39:D6:F3:31:45:77:07:98:54:76:04:24:ED:1A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6851D71FEB9F50CA35EC383655ED131957A25299
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4a1cdc-1f22-4e81-a455-f69665f973f0.roa
Signing time: Fri 07 Aug 2026 05:50:37 +0000
ROA not before: Fri 07 Aug 2026 05:50:37 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.184.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:51:d7:1f:eb:9f:50:ca:35:ec:38:36:55:ed:13:19:57:a2:52:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:37 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=10021d435136c3eb4e7613d7eadd08b343973e6215c26854763690e82a4bbda5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:18:a9:2b:e5:a6:16:4e:02:34:e0:89:a8:
b3:31:92:69:db:48:30:2a:fc:04:46:94:05:61:c1:
b3:f4:dd:1e:8c:f5:98:28:5d:97:f7:e9:8f:22:02:
25:b2:3a:af:03:dc:11:0e:b7:45:56:73:29:1e:bb:
ad:bf:6d:22:2c:4b:b2:38:f7:ff:b4:1d:7c:35:74:
41:2f:9a:64:39:83:23:6f:ad:7f:54:d9:1a:78:52:
96:20:de:50:ee:57:19:74:40:64:64:aa:c6:12:c2:
78:f4:1a:90:cf:b4:95:9d:f0:80:da:5f:b8:ac:e5:
00:3a:84:62:ac:70:94:4e:1f:2b:1b:a9:17:b3:86:
c9:e0:75:2a:c2:8b:d6:d6:9e:e3:2d:ba:c8:c9:50:
d4:c4:50:4c:f9:1e:30:c4:56:c5:79:ff:5e:dd:e0:
59:5f:c7:25:49:f6:c6:8a:57:42:65:60:e3:d7:a6:
be:3a:a3:32:28:92:c7:39:1e:41:b2:19:75:89:4c:
3f:27:98:60:6d:f9:2a:ed:de:bb:a5:95:4e:3c:5a:
7a:29:53:02:05:fc:42:f8:ee:4b:e7:06:db:cf:bb:
fc:d7:d9:91:86:ef:8a:e5:c0:00:65:06:67:97:4c:
0a:01:4a:62:78:a5:58:19:70:78:53:7f:a2:b5:06:
40:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3A:1E:B4:28:89:39:D6:F3:31:45:77:07:98:54:76:04:24:ED:1A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4a1cdc-1f22-4e81-a455-f69665f973f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.184.0.0/15
Signature Algorithm: sha256WithRSAEncryption
52:8f:ce:28:56:28:c7:ba:b7:b4:3d:89:c7:8c:fd:bf:b2:0f:
bf:10:67:3c:0a:60:2c:8c:95:ca:03:71:5c:59:62:78:bf:2e:
d2:96:b7:e1:4b:82:4e:50:54:d7:d0:f1:d8:86:19:e6:50:16:
a8:dd:bd:94:13:25:b4:35:e6:79:3a:69:b3:66:31:18:d8:2c:
99:86:b4:62:d9:3c:e9:93:34:63:08:46:66:4b:d9:d8:d2:2b:
bc:97:71:71:a6:96:e3:71:fe:f6:e8:33:91:2f:61:b9:e2:cd:
b4:ca:f1:c2:53:92:7a:a0:e7:04:de:74:71:33:e5:1b:3c:b3:
75:13:a4:4f:18:cb:ed:0a:8e:a4:30:82:78:5a:8c:f7:7d:8a:
42:7f:4f:12:fd:97:df:ae:a5:63:96:06:8f:fc:e2:17:d0:c2:
1c:64:f7:d4:bc:28:ea:2e:7e:b9:e8:e1:43:09:5b:0a:b6:8b:
12:0a:74:6f:ab:06:22:e8:90:ab:15:ec:0c:7a:32:6d:a0:0e:
35:99:26:bc:f7:20:0f:3d:f7:93:a2:27:cf:60:fa:20:48:cb:
3c:a7:45:13:fc:d1:8c:19:ec:96:bd:1d:29:72:3e:f3:ef:3b:
25:8d:bc:c1:0e:0d:bb:f3:89:e5:29:41:96:92:73:55:c0:48:
fb:a3:93:a4
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUaFHXH+ufUMo17Dg2Ve0TGVeiUpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDcwNTUwMzdaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDEwMDIxZDQzNTEzNmMzZWI0ZTc2MTNkN2VhZGQwOGIzNDM5NzNlNjIxNWMy
Njg1NDc2MzY5MGU4MmE0YmJkYTUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKG0GKkr5aYWTgI04ImoszGSadtIMCr8BEaUBWHBs/TdHoz1mChdl/fpjyIC
JbI6rwPcEQ63RVZzKR67rb9tIixLsjj3/7QdfDV0QS+aZDmDI2+tf1TZGnhSliDe
UO5XGXRAZGSqxhLCePQakM+0lZ3wgNpfuKzlADqEYqxwlE4fKxupF7OGyeB1KsKL
1tae4y26yMlQ1MRQTPkeMMRWxXn/Xt3gWV/HJUn2xopXQmVg49emvjqjMiiSxzke
QbIZdYlMPyeYYG35Ku3eu6WVTjxaeilTAgX8QvjuS+cG28+7/NfZkYbviuXAAGUG
Z5dMCgFKYnilWBlweFN/orUGQA0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRpOh60
KIk51vMxRXcHmFR2BCTtGjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZmU0YTFjZGMtMWYyMi00ZTgxLWE0NTUtZjY5NjY1Zjk3M2YwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATO4MA0G
CSqGSIb3DQEBCwUAA4IBAQBSj84oVijHure0PYnHjP2/sg+/EGc8CmAsjJXKA3Fc
WWJ4vy7SlrfhS4JOUFTX0PHYhhnmUBao3b2UEyW0NeZ5OmmzZjEY2CyZhrRi2Tzp
kzRjCEZmS9nY0iu8l3Fxppbjcf726DORL2G54s20yvHCU5J6oOcE3nRxM+UbPLN1
E6RPGMvtCo6kMIJ4Woz3fYpCf08S/ZffrqVjlgaP/OIX0MIcZPfUvCjqLn656OFD
CVsKtosSCnRvqwYi6JCrFewMejJtoA41mSa89yAPPfeToifPYPogSMs8p0UT/NGM
GeyWvR0pcj7z7zsljbzBDg2784nlKUGWknNVwEj7o5Ok
-----END CERTIFICATE-----
Generated at Fri Aug 28 20:40:30 2026 by rpki-client