Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0edc1795-89f2-4f7e-aaa7-1083ec00eb3a.roa
File: 0edc1795-89f2-4f7e-aaa7-1083ec00eb3a.roa (raw, json)
Hash identifier: vtV/PQNIvtLCYMRUABLIdtah2aP6VfD9XRSG9eJwwDA=
Subject key identifier: 96:A7:63:8A:59:86:D8:F9:F1:11:09:A8:4A:77:C2:D6:A4:55:B9:47
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1A2EC7F0CC744E26BD98AD1C992BA3A391899588
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0edc1795-89f2-4f7e-aaa7-1083ec00eb3a.roa
Signing time: Tue 27 Oct 2026 01:02:13 +0000
ROA not before: Tue 27 Oct 2026 01:02:13 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.200.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:2e:c7:f0:cc:74:4e:26:bd:98:ad:1c:99:2b:a3:a3:91:89:95:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 27 01:02:13 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=3e7faa40861026ca65b44f500e4e9a59c1c3f6f2a4d104fb7cdb3de254e7a46f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:6e:f4:ea:6b:2e:cb:08:d0:40:62:45:19:
4b:3a:8b:d3:44:81:7d:bc:9f:08:5a:31:92:6c:2f:
00:15:91:ed:d3:27:43:25:0e:f8:3d:75:31:b6:40:
d7:2f:73:a8:34:82:c0:46:2d:05:23:50:a5:55:d4:
e2:17:de:b3:ee:d0:e9:cc:49:3c:44:55:70:48:2a:
df:f0:12:ad:7a:a4:68:31:29:c6:6e:c2:15:fc:6f:
db:2d:85:a2:db:3a:22:00:49:10:d8:68:a2:d4:14:
a0:82:b0:b7:f9:c6:7b:db:83:86:95:da:82:3e:4f:
8b:9f:41:22:cb:53:a2:87:ad:ed:99:30:9d:41:01:
7e:30:d0:b0:c7:f8:77:b9:a9:4c:03:cf:d6:6e:9e:
fb:5f:da:6c:65:60:05:ad:ff:70:93:b9:05:b6:53:
49:12:3a:f7:aa:c3:a9:52:e5:8f:8e:4f:54:8f:3b:
74:f1:6f:89:e7:60:84:63:48:9a:b4:5b:38:f7:3b:
4a:4b:83:15:1a:4e:2e:f4:fc:78:d2:53:44:2b:16:
b3:ce:69:61:f7:69:24:e7:d4:9d:90:17:dc:f3:eb:
7a:d1:d6:e9:a8:39:6e:82:a3:a1:9e:52:d8:c2:22:
fd:08:ed:01:93:62:e7:74:1a:e4:8c:c2:f3:34:50:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A7:63:8A:59:86:D8:F9:F1:11:09:A8:4A:77:C2:D6:A4:55:B9:47
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0edc1795-89f2-4f7e-aaa7-1083ec00eb3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:50:bc:1a:ad:ce:1b:d2:9e:4b:da:ae:52:86:f9:79:74:ac:
78:12:e7:2a:6d:ae:1a:f5:6d:30:c2:8b:18:de:ad:b6:76:00:
18:83:d2:31:18:11:5e:e6:f5:fc:a1:aa:f3:36:5e:70:ec:67:
e5:b9:2f:22:7b:53:43:10:56:5e:9c:e2:e6:cf:82:38:88:7a:
88:dc:50:9d:16:57:34:01:28:2a:61:4e:bc:43:ab:ee:ed:57:
cb:33:e5:9a:ba:2c:42:16:af:ea:33:66:4f:27:b0:02:7d:39:
fc:37:b1:a8:f6:92:ec:36:e1:78:05:36:de:9d:76:2b:dd:2f:
c0:a3:a1:53:e7:9c:34:e7:4b:cc:12:7d:c2:c7:13:37:bd:0d:
e1:58:de:d7:df:7d:5c:54:82:e6:4d:9f:27:56:db:ab:c1:44:
59:b9:9d:31:3d:c0:0a:52:ac:01:28:20:28:48:bc:3e:68:5f:
53:d4:e5:db:78:4d:70:08:39:a8:95:d4:06:f7:82:5c:ad:fa:
26:22:4e:ae:e2:7c:f4:48:91:fd:1a:87:b3:78:2c:84:09:90:
b4:4c:1b:b4:cd:cb:b1:9d:c7:b4:97:8b:67:84:c7:01:e6:03:
0a:23:65:7a:8f:08:2a:8d:7c:79:fb:0d:21:a6:0d:71:04:e1:
be:d1:c8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:04:04 2026 by rpki-client