Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa
File: 1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa (raw, json)
Hash identifier: h/jwux9XxpmqC59DFdLBY1DqSDLg+UDGOVJkwdQZxWw=
Subject key identifier: 54:19:CA:59:35:99:02:2E:11:0D:3D:9A:DF:46:A8:46:E4:AB:8A:37
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0E5716FBEBF09C1187288D63A9AC2193E055E250
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa
Signing time: Tue 19 May 2026 06:00:32 +0000
ROA not before: Tue 19 May 2026 06:00:32 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.134.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:57:16:fb:eb:f0:9c:11:87:28:8d:63:a9:ac:21:93:e0:55:e2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 19 06:00:32 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=29c7a695899cb31037e8528dbd09eaf11276831682af821aab6b8dd4cd1d3969, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fc:8b:4e:d5:ac:a0:23:97:1d:38:ab:e3:ff:
f5:13:c9:b8:04:4c:6e:6f:e1:ee:2e:d1:76:5a:23:
c2:1f:bd:99:6b:54:36:34:6c:96:69:b0:d7:a5:e3:
c6:ce:af:1c:f8:82:88:8d:62:cb:87:ca:05:56:36:
ad:f6:10:05:44:93:33:e5:c2:bc:26:5c:06:67:f8:
be:40:08:af:8d:75:02:17:a4:9d:3c:07:d4:9f:6c:
4a:37:31:3e:47:d4:ea:a5:5b:9c:ba:1f:bf:aa:63:
f9:51:f1:81:1d:92:09:65:e2:8d:5b:29:ef:1f:f5:
9c:1d:3d:a0:11:c3:91:3a:57:1e:a8:02:ca:bc:89:
30:48:96:5b:5c:75:ab:7a:e5:4f:87:94:6a:27:b1:
95:41:5f:5c:de:db:0d:55:c4:10:db:a4:64:48:77:
52:a2:28:6a:fe:83:3a:49:6b:34:3f:68:f2:29:2e:
3e:73:47:38:f5:4c:c9:ed:9d:19:46:8b:65:f7:4d:
27:5b:0e:c0:78:48:35:da:9a:df:8e:ab:bd:40:fb:
6f:4e:44:12:55:82:14:02:29:c2:75:d5:3e:6c:62:
ac:16:a9:5c:8e:cc:ca:2e:c0:0d:32:40:42:1e:e3:
2c:ba:24:27:8b:06:33:be:fe:aa:b0:b5:99:39:30:
c6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:19:CA:59:35:99:02:2E:11:0D:3D:9A:DF:46:A8:46:E4:AB:8A:37
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.134.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:2a:c3:82:b1:4a:9c:b4:8a:dc:89:31:22:91:92:63:46:c7:
45:9b:b6:1b:22:fb:f6:a4:77:fd:b0:30:76:89:18:61:4d:7a:
71:0d:6d:14:15:4d:90:37:c8:f1:b4:5a:2a:3c:c1:7f:65:c0:
fe:ad:6a:92:92:1c:6f:62:71:39:1c:ac:15:d0:77:b4:27:3d:
bc:57:11:6c:17:e4:ff:fa:81:3f:19:76:99:49:c2:89:f5:24:
0a:f3:bb:99:77:4e:63:48:eb:14:1f:40:34:66:fe:3c:da:18:
9f:23:4d:a8:ce:aa:a0:b3:41:f0:6c:21:86:23:c2:3d:4a:dc:
ad:c6:a3:ec:3d:6d:a1:12:e1:cf:18:0e:6d:5a:dd:30:30:9b:
7a:5d:3a:d2:24:48:8d:9c:ca:e7:35:24:83:61:56:b3:92:d9:
ad:c5:dc:9d:77:7c:ac:ff:c8:7e:fc:6e:f2:6f:4d:cb:38:6b:
74:cb:af:97:96:22:1c:d8:38:80:4d:8c:4e:97:1c:93:b0:06:
e2:5d:a2:b4:d7:dc:11:76:ff:0d:4d:bd:69:2a:13:8b:84:d0:
24:9b:dc:72:5e:dd:e9:54:f1:76:43:05:c2:54:fe:a9:8d:49:
bb:ff:80:7e:3d:cb:13:96:06:6e:f2:e7:9c:a0:75:cd:cc:25:
7c:0e:89:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:40 2026 by rpki-client