Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0edc1795-89f2-4f7e-aaa7-1083ec00eb3a.roa
File: 0edc1795-89f2-4f7e-aaa7-1083ec00eb3a.roa (raw, json)
Hash identifier: U2zLtygb6DxeEv1FRVaT3X4DY5wFlk0l+mdEN9ikSDM=
Subject key identifier: C5:D9:9D:DC:94:8D:13:F0:90:7C:BD:6E:8B:C8:D7:BB:2C:4A:12:6D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 20E4FBAD1903CAA25840C90F7BB06749F0FFABD7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0edc1795-89f2-4f7e-aaa7-1083ec00eb3a.roa
Signing time: Wed 20 May 2026 21:47:13 +0000
ROA not before: Wed 20 May 2026 21:47:13 +0000
ROA not after: Tue 18 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.200.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e4:fb:ad:19:03:ca:a2:58:40:c9:0f:7b:b0:67:49:f0:ff:ab:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 20 21:47:13 2026 GMT
Not After : Aug 18 23:59:59 2026 GMT
Subject: serialNumber=788f739190dae3510da116690903211f52919fb4fb11074828861f48339a9117, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:4e:0f:e0:a7:46:71:0a:f3:dc:00:9a:24:
f5:65:4e:2b:13:72:f7:7c:c8:22:66:f5:78:ce:fc:
8a:b7:2a:a2:a8:1a:e8:46:d1:b7:78:8d:3d:be:75:
05:b8:b7:64:9b:cd:a0:35:7e:ee:60:09:64:df:e9:
f3:df:d1:22:a3:c2:5b:30:01:54:81:e2:12:5b:fb:
13:b9:7a:96:48:da:10:c4:bc:f5:4d:ac:9c:8f:14:
fe:d0:1c:68:d4:4f:6f:4b:b8:26:c5:e7:11:36:7d:
03:ba:5c:47:dc:f4:48:16:81:13:0d:72:03:cc:74:
c3:b0:6d:0c:0a:8a:e0:09:94:e6:ef:47:a1:81:26:
49:ae:5c:b3:46:40:11:d2:3e:8b:a4:a3:57:28:a4:
ba:b3:42:3a:5b:9f:09:c5:5d:0a:0f:89:d4:42:f2:
92:66:46:97:51:7e:21:37:5f:58:53:9c:e6:80:fc:
0f:8a:08:46:55:1c:ca:2c:45:ab:f6:aa:8f:a9:fe:
79:ca:09:9e:c2:e4:13:75:4b:91:da:df:b8:d4:bb:
5c:54:6f:96:45:f5:6f:b3:99:c0:5b:88:01:f8:49:
90:9a:4f:84:54:51:07:ba:49:42:11:b2:43:9f:92:
9c:ab:68:0e:19:40:21:fb:3d:99:50:2b:31:df:82:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D9:9D:DC:94:8D:13:F0:90:7C:BD:6E:8B:C8:D7:BB:2C:4A:12:6D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0edc1795-89f2-4f7e-aaa7-1083ec00eb3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:70:90:fa:03:39:64:6a:17:d5:7f:9f:f8:f7:06:8a:c8:b9:
fd:5d:0b:ac:f0:b9:bf:4e:0f:29:ef:51:43:89:3c:46:6a:a6:
00:ef:f0:91:1f:34:be:9e:34:f0:9c:50:7a:5e:6f:ef:cb:d1:
1a:91:84:42:3e:9d:bc:98:4a:5f:a8:65:17:68:96:c8:23:a9:
10:62:53:1d:a8:ee:1c:ad:6c:41:a2:cc:bb:6a:b4:5c:4d:ec:
44:85:d4:6a:15:c8:1b:a9:a4:0b:fa:b9:85:70:6a:a3:53:99:
fd:f2:09:15:75:d7:e9:cb:a8:53:a7:ba:16:f3:b9:5a:37:04:
8f:a3:f3:db:e8:fb:d8:c5:c2:49:bd:a5:e5:f1:25:e6:7a:9f:
df:bd:2c:ea:d6:d2:c1:7c:fe:55:6f:07:6b:3a:57:80:f7:1f:
6d:fc:d9:8b:27:1f:80:eb:43:2a:57:a3:21:d6:90:4b:18:d5:
39:1f:0a:c5:7e:ed:9b:d1:8c:8b:86:65:b6:6b:ea:38:02:a3:
ad:2f:0c:2a:08:b3:fb:3c:5f:78:82:1b:98:a1:e1:b1:46:59:
f6:84:f3:51:78:24:f9:07:5c:ec:92:da:51:ce:e1:98:2f:27:
b3:09:71:f7:d1:60:13:38:1d:97:03:94:ce:41:23:9b:24:5a:
39:7a:08:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:03:37 2026 by rpki-client