Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/08532a3b-bc60-420c-8033-3462a779789f.roa
File: 08532a3b-bc60-420c-8033-3462a779789f.roa (raw, json)
Hash identifier: EvaLD8Gj5cSG9LAO33FXae6g2TXe+J+BAbBvOjCUNaM=
Subject key identifier: C5:C3:22:52:7B:18:3F:7B:42:C0:B8:28:3C:9C:00:98:74:43:9A:99
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 463E2710D3F9FC954319265B7D52C59D0F1D2FAD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/08532a3b-bc60-420c-8033-3462a779789f.roa
Signing time: Sat 31 Oct 2026 00:02:44 +0000
ROA not before: Sat 31 Oct 2026 00:02:44 +0000
ROA not after: Fri 29 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.202.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3e:27:10:d3:f9:fc:95:43:19:26:5b:7d:52:c5:9d:0f:1d:2f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 31 00:02:44 2026 GMT
Not After : Jan 29 23:59:59 2027 GMT
Subject: serialNumber=0b9aecc80a8bc9025948de56f2fa986ebf9b0c5a331d741e512ed4c362b858f2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:d0:e3:80:12:f1:7e:01:e6:3b:d7:7e:80:
9d:53:2b:57:a4:12:2e:09:dc:98:e2:f0:81:db:48:
f6:f4:20:5b:67:e8:0f:15:e7:e4:66:03:ce:62:b0:
02:27:b5:e0:09:7f:cd:4c:76:ee:9c:f6:15:f3:8d:
9e:cc:fe:a6:ac:59:d5:1d:f1:51:32:48:22:53:8f:
d8:ec:2a:c0:71:98:30:c5:80:6e:81:11:8e:67:cb:
bd:f3:29:0a:d8:b3:95:5c:41:c8:21:7c:bb:de:c7:
4c:d7:e9:15:c4:f7:fd:60:7c:5e:57:cc:e1:d6:05:
95:6c:ce:bb:66:a7:d2:c0:7f:37:56:5b:ad:6e:bb:
c1:be:8c:0c:a1:e7:f4:e1:0a:04:11:84:bd:aa:60:
e2:5c:de:8a:f6:78:d9:d4:39:75:cc:5c:89:8b:46:
15:f3:88:29:b2:a1:d3:87:f1:ad:9f:2e:89:67:cc:
ab:36:d1:0d:36:f4:b3:5a:1a:9d:8c:9d:f1:cf:83:
2b:aa:0e:99:a5:a5:1e:83:b1:19:c6:c7:01:f6:31:
2d:b0:17:20:d8:51:83:63:f2:2d:f3:6a:fa:40:4a:
49:64:cf:77:15:2e:35:75:e6:99:f4:8d:d6:51:fc:
bf:a8:0a:8e:a7:89:b4:27:4f:37:bd:08:07:7e:ac:
56:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C3:22:52:7B:18:3F:7B:42:C0:B8:28:3C:9C:00:98:74:43:9A:99
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/08532a3b-bc60-420c-8033-3462a779789f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.202.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:db:03:2a:a9:35:0d:51:1d:0d:a6:b0:8b:ed:37:90:da:de:
52:06:72:6f:88:f5:88:81:c7:e5:68:73:4e:00:26:80:f2:ec:
06:da:de:61:3d:56:95:83:41:5e:d3:c9:93:ff:25:c6:8a:e6:
77:1e:4d:eb:9a:87:06:12:80:f1:c4:92:2d:4b:5f:25:53:c0:
ef:75:e3:1b:27:5f:64:19:ff:6b:53:b9:37:1d:70:83:52:d4:
ca:2f:bb:a0:8f:9e:a0:20:eb:b5:77:ae:5c:3f:85:b4:be:fe:
7a:cb:cf:a7:7f:b2:91:20:f1:81:8f:ab:89:bb:6f:64:76:72:
5d:c8:39:71:38:65:e8:c7:91:df:63:64:e4:59:a4:6d:49:c3:
6b:6d:58:29:4a:13:9e:d0:f1:ed:75:76:d9:7c:ee:8a:e9:66:
86:fc:fb:7b:48:7c:66:0e:6b:6e:42:ab:b6:68:71:dd:be:d6:
85:f3:1b:58:77:08:3b:b0:a1:b4:13:c1:5d:14:2a:3a:e1:4e:
7e:9d:e7:35:e4:53:71:0e:be:0a:0c:07:e4:fa:cd:be:64:74:
f5:04:bc:38:eb:f8:34:12:77:21:20:4a:f9:a8:1e:b1:79:66:
2c:9c:bd:51:e1:bc:05:fa:c3:11:98:49:e8:fa:50:a6:b2:24:
59:ce:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:14:58 2026 by rpki-client