Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/18d9a632-05fe-446e-aca9-1adb271dcda8.roa
File: 18d9a632-05fe-446e-aca9-1adb271dcda8.roa (raw, json)
Hash identifier: 3N4PMMBaNrGgc3WagahV7Yilv4sUY8Tac/I+EutMKnA=
Subject key identifier: 8B:BE:F4:09:3F:09:CA:EC:DB:63:FC:40:20:61:15:0D:24:D3:02:91
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4E03DD784BB1BED7C38E55CF5DF63E06CCE3D32F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/18d9a632-05fe-446e-aca9-1adb271dcda8.roa
Signing time: Mon 26 Oct 2026 05:50:06 +0000
ROA not before: Mon 26 Oct 2026 05:50:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.196.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:03:dd:78:4b:b1:be:d7:c3:8e:55:cf:5d:f6:3e:06:cc:e3:d3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=7e58b0ca60b5aeca27c84a5d0c2eaff087845b7d1f8eebd313b5fa009c468f6e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:b1:7e:45:6c:80:5d:ae:b6:a1:3f:fe:ce:
8e:38:7a:52:b2:b1:e9:44:98:67:f2:68:b5:95:78:
eb:3e:87:b6:a6:a4:8b:32:43:20:f7:f0:82:eb:8e:
20:d6:37:a3:5a:63:b9:59:f3:56:c9:86:4d:a2:88:
18:80:b5:f9:f2:de:86:04:2f:14:1c:6f:42:10:9b:
ec:a3:5e:95:c8:62:40:42:02:1c:21:5e:37:96:ca:
be:f1:61:77:b1:db:8b:e3:4f:c2:7c:13:ed:db:d2:
22:1c:66:20:a3:d9:1b:8b:4a:ad:b6:a0:fa:39:ae:
49:e7:23:5f:2c:54:a7:dd:06:a8:97:32:bb:d5:4b:
00:fe:cd:97:83:57:19:54:93:ef:f0:8e:93:5f:82:
f1:dc:0b:0a:d1:26:03:8e:95:cb:c2:85:98:bb:a5:
09:4c:cd:1f:e9:4e:4f:4c:07:d0:c6:c1:67:dd:85:
28:75:4c:ed:65:81:2b:84:e6:19:bf:5e:96:5b:b8:
24:62:51:0e:92:8c:c2:ec:4c:10:fc:6f:41:e3:35:
95:65:b7:26:48:58:cf:0b:1b:de:f3:e5:cd:fc:34:
b5:a0:b1:31:08:c7:76:f3:72:ad:c6:56:fa:aa:9d:
77:27:47:1f:54:ec:11:d2:53:bd:4c:ce:4e:ac:38:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BE:F4:09:3F:09:CA:EC:DB:63:FC:40:20:61:15:0D:24:D3:02:91
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/18d9a632-05fe-446e-aca9-1adb271dcda8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.196.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b5:37:62:07:e6:86:65:e6:52:75:a7:59:5f:a7:d3:76:6f:a0:
2e:e0:73:04:03:d8:a9:2a:c8:a2:2b:92:03:5e:bc:4f:65:be:
2b:d4:b7:26:96:d3:eb:43:ef:20:cd:42:2b:2e:2e:be:16:cd:
72:98:33:a6:b0:fd:be:68:3f:d3:62:e0:6b:e2:2c:fb:05:43:
57:c5:a3:d5:1b:9a:a1:6e:1b:df:c7:5e:ba:e8:2b:af:8b:f5:
a4:6e:59:11:c7:f4:f3:8c:0e:39:9b:c1:02:49:e1:ad:6d:e4:
b7:ca:9d:a2:83:ce:da:63:6e:cd:1b:9e:ff:86:ac:97:a9:3f:
09:33:86:84:4c:c5:f9:df:de:b6:cc:54:28:9d:de:1f:dc:3c:
93:44:b7:c6:26:ca:30:43:f7:89:b2:4b:81:5b:77:95:0d:61:
a4:1c:f0:b4:47:27:cb:9a:c5:fb:ba:bf:e3:9e:f8:20:4d:0d:
84:27:f7:f3:ba:5e:1a:96:cd:2f:43:71:bf:c8:e4:f7:64:96:
48:e5:3a:0a:d9:d1:ae:c9:4f:04:bf:af:86:09:84:de:72:8d:
77:6b:29:89:e3:94:9a:19:36:22:65:39:0d:cb:3b:2e:c3:f8:
c6:5f:ea:14:b8:a3:40:08:05:ba:e9:2f:dd:c5:47:84:41:ca:
16:a9:db:26
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUTgPdeEuxvtfDjlXPXfY+Bszj0y8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTUwMDZaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDdlNThiMGNhNjBiNWFlY2EyN2M4NGE1ZDBjMmVhZmYwODc4NDViN2QxZjhl
ZWJkMzEzYjVmYTAwOWM0NjhmNmUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMy2sX5FbIBdrrahP/7Ojjh6UrKx6USYZ/JotZV46z6HtqakizJDIPfwguuO
INY3o1pjuVnzVsmGTaKIGIC1+fLehgQvFBxvQhCb7KNelchiQEICHCFeN5bKvvFh
d7Hbi+NPwnwT7dvSIhxmIKPZG4tKrbag+jmuSecjXyxUp90GqJcyu9VLAP7Nl4NX
GVST7/COk1+C8dwLCtEmA46Vy8KFmLulCUzNH+lOT0wH0MbBZ92FKHVM7WWBK4Tm
Gb9ellu4JGJRDpKMwuxMEPxvQeM1lWW3JkhYzwsb3vPlzfw0taCxMQjHdvNyrcZW
+qqddydHH1TsEdJTvUzOTqw4UI8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSLvvQJ
PwnK7Ntj/EAgYRUNJNMCkTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MThkOWE2MzItMDVmZS00NDZlLWFjYTktMWFkYjI3MWRjZGE4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPEMA0G
CSqGSIb3DQEBCwUAA4IBAQC1N2IH5oZl5lJ1p1lfp9N2b6Au4HMEA9ipKsiiK5ID
XrxPZb4r1LcmltPrQ+8gzUIrLi6+Fs1ymDOmsP2+aD/TYuBr4iz7BUNXxaPVG5qh
bhvfx1666Cuvi/WkblkRx/TzjA45m8ECSeGtbeS3yp2ig87aY27NG57/hqyXqT8J
M4aETMX53962zFQond4f3DyTRLfGJsowQ/eJskuBW3eVDWGkHPC0RyfLmsX7ur/j
nvggTQ2EJ/fzul4als0vQ3G/yOT3ZJZI5ToK2dGuyU8Ev6+GCYTeco13aymJ45Sa
GTYiZTkNyzsuw/jGX+oUuKNACAW66S/dxUeEQcoWqdsm
-----END CERTIFICATE-----
Generated at Thu Nov 5 11:18:11 2026 by rpki-client