Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4e6b1e-120a-454b-8ea2-2504e0f34b7e.roa
File: fe4e6b1e-120a-454b-8ea2-2504e0f34b7e.roa (raw, json)
Hash identifier: iFG7UcIUyUbqeMZs/v3vQFhqN0pVogrgwtEK9lUCz6g=
Subject key identifier: 83:EA:AC:B6:07:E6:60:86:A2:CA:C9:1B:AD:BC:53:CA:03:4B:6E:9B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4F29AF226AED90227905251820E29B230FCC0080
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4e6b1e-120a-454b-8ea2-2504e0f34b7e.roa
Signing time: Sun 04 Oct 2026 00:40:06 +0000
ROA not before: Sun 04 Oct 2026 00:40:06 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.85.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:29:af:22:6a:ed:90:22:79:05:25:18:20:e2:9b:23:0f:cc:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:06 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=ebb0ad0cb4b53958beacb1a124e03c113770687954459bd3954fc3a911e15ef7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:8c:33:71:16:7b:b1:32:fd:80:bf:26:01:
1c:54:3a:8d:a2:ab:1a:0f:8c:6c:4e:bf:58:38:d7:
eb:34:fe:b5:db:50:d5:86:c7:9d:7c:5f:b1:56:51:
b9:29:47:be:b3:bb:79:72:c6:2b:c8:59:72:67:82:
16:5d:2d:4c:b7:fd:a6:b4:a1:27:8c:6c:89:8c:4d:
48:34:08:62:5a:8d:80:c3:ab:25:aa:83:c6:b7:65:
63:de:6f:22:b7:93:68:4e:b8:61:01:92:0c:25:5d:
75:10:bf:dd:f1:8d:6c:cd:d4:0c:89:4e:d2:c9:06:
4d:a3:75:e1:c3:e8:47:e3:c7:e9:9c:1d:98:f0:b2:
12:ca:b6:f4:c0:d1:d9:04:a7:d8:2c:86:87:f1:23:
ec:67:e3:ad:11:36:e7:53:59:45:1d:73:24:dd:d2:
3a:27:d6:48:d6:63:b5:3e:7c:b3:46:35:ce:f2:b3:
7b:6e:85:50:8c:2e:68:11:f4:a5:c1:17:11:b3:29:
26:1e:9d:b6:83:ec:cb:d2:4d:37:93:85:90:e3:e2:
6f:da:b3:0b:1b:e9:0d:55:83:47:4e:0f:f7:fa:b5:
97:c3:a9:fe:1d:69:b4:74:82:87:6c:52:2d:02:00:
37:15:a0:b7:08:63:1c:02:82:0c:83:73:a7:41:d6:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EA:AC:B6:07:E6:60:86:A2:CA:C9:1B:AD:BC:53:CA:03:4B:6E:9B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fe4e6b1e-120a-454b-8ea2-2504e0f34b7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:74:d6:1b:97:78:8c:34:e6:41:28:99:a5:40:cf:79:dc:df:
90:72:13:fe:96:59:48:a2:69:0a:a5:1b:fe:53:32:fb:94:57:
0c:2c:2d:95:f8:b5:59:8e:9b:a7:12:0a:71:76:30:bc:f7:1d:
df:99:0d:0b:5e:31:d0:ae:fa:2c:8b:a2:73:b3:7d:3d:a9:44:
c1:cf:9d:b4:f5:46:fc:59:98:b2:ef:65:c8:ea:ec:8f:d5:47:
9d:75:73:63:4a:1a:cc:52:44:54:21:e5:46:bf:23:49:b0:9d:
de:aa:5d:14:5d:9b:29:90:51:3b:21:09:7a:7f:d2:68:d5:a1:
3e:79:b8:13:16:b8:e8:69:7c:e0:a4:c7:20:e5:1a:b0:61:bb:
5b:1d:a3:9b:2d:54:18:3b:f7:30:3b:db:f5:45:fb:55:31:4e:
b5:1e:91:43:d1:72:da:90:ad:58:80:17:5b:9a:a1:3b:ee:de:
46:86:a2:94:c2:b9:0c:91:bd:f4:f9:e0:b4:f1:39:a1:d9:c2:
46:aa:8a:f4:6e:b9:c7:f8:1c:e3:2d:77:ba:8d:11:60:fd:24:
c4:07:7a:db:71:3a:2d:f4:1c:9e:01:9f:da:71:ce:7c:d4:17:
c5:8f:93:18:a2:80:76:b5:dc:4f:96:38:e4:4a:07:7f:14:75:
3f:0e:76:0b
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUTymvImrtkCJ5BSUYIOKbIw/MAIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMDQwMDQwMDZaFw0yNzAxMDIyMzU5NTlaMHoxSTBHBgNV
BAUTQGViYjBhZDBjYjRiNTM5NThiZWFjYjFhMTI0ZTAzYzExMzc3MDY4Nzk1NDQ1
OWJkMzk1NGZjM2E5MTFlMTVlZjcxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJsejDNxFnuxMv2AvyYBHFQ6jaKrGg+MbE6/WDjX6zT+tdtQ1YbHnXxfsVZR
uSlHvrO7eXLGK8hZcmeCFl0tTLf9prShJ4xsiYxNSDQIYlqNgMOrJaqDxrdlY95v
IreTaE64YQGSDCVddRC/3fGNbM3UDIlO0skGTaN14cPoR+PH6ZwdmPCyEsq29MDR
2QSn2CyGh/Ej7GfjrRE251NZRR1zJN3SOifWSNZjtT58s0Y1zvKze26FUIwuaBH0
pcEXEbMpJh6dtoPsy9JNN5OFkOPib9qzCxvpDVWDR04P9/q1l8Op/h1ptHSCh2xS
LQIANxWgtwhjHAKCDINzp0HWw1kCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSD6qy2
B+ZghqLKyRutvFPKA0tumzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZmU0ZTZiMWUtMTIwYS00NTRiLThlYTItMjUwNGUwZjM0YjdlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNVMA0G
CSqGSIb3DQEBCwUAA4IBAQBAdNYbl3iMNOZBKJmlQM953N+QchP+lllIomkKpRv+
UzL7lFcMLC2V+LVZjpunEgpxdjC89x3fmQ0LXjHQrvosi6Jzs309qUTBz5209Ub8
WZiy72XI6uyP1UeddXNjShrMUkRUIeVGvyNJsJ3eql0UXZspkFE7IQl6f9Jo1aE+
ebgTFrjoaXzgpMcg5RqwYbtbHaObLVQYO/cwO9v1RftVMU61HpFD0XLakK1YgBdb
mqE77t5GhqKUwrkMkb30+eC08Tmh2cJGqor0brnH+BzjLXe6jRFg/STEB3rbcTot
9ByeAZ/acc581BfFj5MYooB2tdxPljjkSgd/FHU/DnYL
-----END CERTIFICATE-----
Generated at Mon Oct 5 13:00:42 2026 by rpki-client