Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05a39f1a-73ed-434c-b9e0-b1dc5d56a0fd.roa
File: 05a39f1a-73ed-434c-b9e0-b1dc5d56a0fd.roa (raw, json)
Hash identifier: IrRFWKZu+ovRU+GMemThu0UfKIoCiwXy92bjx/UW/Ig=
Subject key identifier: DD:E3:18:C4:9F:5E:C4:D1:3A:E0:70:F9:67:5F:C9:5F:28:6B:79:9A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 57733B8C54D206A1215ED641B0A48CDEEFD713F9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05a39f1a-73ed-434c-b9e0-b1dc5d56a0fd.roa
Signing time: Tue 28 Jul 2026 00:30:11 +0000
ROA not before: Tue 28 Jul 2026 00:30:11 +0000
ROA not after: Mon 26 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.102.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:73:3b:8c:54:d2:06:a1:21:5e:d6:41:b0:a4:8c:de:ef:d7:13:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 28 00:30:11 2026 GMT
Not After : Oct 26 23:59:59 2026 GMT
Subject: serialNumber=e009a40e0865de3c6d44f565992e4c2aa42ce92fd24204cace927c3266e5dab0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:49:71:ef:48:3f:3d:89:18:d8:27:75:a3:66:
28:7c:7a:e4:f4:9a:6b:e3:2c:51:20:d5:8e:c2:ba:
c5:52:32:a5:cd:c0:51:a1:51:c5:b4:38:1e:d1:67:
df:41:43:a4:d1:62:4c:e2:13:e3:6f:0e:2f:5a:cd:
c0:1f:02:74:82:c7:d9:82:d3:09:1b:7f:a9:2d:48:
0f:c0:67:09:51:d1:a5:32:c0:38:80:00:29:7c:30:
f9:66:6d:b1:82:10:16:21:4e:f3:08:c6:a4:44:8f:
52:13:f3:69:34:fa:a7:1b:bd:c7:0a:ba:af:38:06:
8a:e5:7e:84:97:d1:36:24:6a:02:b7:a6:cc:fa:de:
60:2c:d7:d8:4b:ca:ba:4f:0f:1c:b2:30:97:d6:f4:
c6:9b:86:57:a3:57:bc:97:0a:a3:b4:dc:f6:e7:35:
70:04:76:91:d4:38:53:4a:bc:dc:f4:b0:54:7b:d5:
34:62:8d:67:dd:89:e2:91:b3:00:ef:57:a2:aa:51:
9c:91:6b:14:88:14:56:a1:b2:81:59:10:da:91:ec:
6e:dd:86:b8:c7:b1:af:80:28:f7:da:5c:c4:0e:81:
d4:e7:60:7f:ae:77:53:ee:df:41:e2:b2:83:48:51:
15:25:7c:7b:a2:97:9e:1d:23:93:3c:28:ae:4c:6d:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E3:18:C4:9F:5E:C4:D1:3A:E0:70:F9:67:5F:C9:5F:28:6B:79:9A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05a39f1a-73ed-434c-b9e0-b1dc5d56a0fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:da:40:f3:53:f5:c6:82:5b:d0:37:92:ad:b0:59:01:5c:6d:
93:cd:96:98:6e:7c:49:fe:bd:13:04:70:96:5f:bc:7a:34:e4:
23:27:6d:67:4e:86:c0:20:c6:7b:05:06:42:63:83:ff:27:fc:
9f:f8:30:12:bf:b9:e9:6d:a4:a9:18:3f:7b:aa:45:b1:63:22:
d1:22:ee:4b:f1:05:9c:9e:3f:52:2b:83:7a:66:44:50:c4:0d:
7e:35:62:f6:59:cf:c0:4e:a4:ff:a8:d1:0e:9b:ba:53:fe:e2:
a1:78:13:dc:13:19:d2:94:be:b2:ef:76:da:8f:6f:27:19:46:
36:43:78:6b:fc:e7:17:34:71:65:78:c7:5c:60:75:63:68:8e:
40:4e:e7:40:78:18:87:81:d9:d0:da:c9:bf:b9:9e:ed:dc:1d:
6e:43:64:96:4b:aa:26:85:1a:0e:67:30:ae:0a:05:3c:9c:7f:
57:f8:84:32:82:30:f1:2b:70:d2:c7:5b:c8:04:f0:36:d4:ad:
05:50:53:86:bd:63:2f:62:c6:88:eb:b4:13:b0:61:46:f3:76:
ca:75:a0:92:41:02:d6:fc:62:7e:3f:5b:bc:d8:14:b1:eb:54:
2f:c1:e6:f1:4e:05:45:de:1b:b5:ec:af:03:fc:85:b2:55:72:
fd:75:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:16:58 2026 by rpki-client