Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa
File: 1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa (raw, json)
Hash identifier: i2RoFNqOLhmR1QPt7+4RQQr28z5CvUKLZjrquwm3NUc=
Subject key identifier: D1:DD:D4:BA:D1:CA:71:5C:35:22:9E:98:F2:31:47:CC:6F:F2:6E:69
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3A1D78609375A5A0A024A791CB2B1654F29F1881
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa
Signing time: Sat 28 Feb 2026 06:40:37 +0000
ROA not before: Sat 28 Feb 2026 06:40:37 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.134.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:1d:78:60:93:75:a5:a0:a0:24:a7:91:cb:2b:16:54:f2:9f:18:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Feb 28 06:40:37 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=30f404019d0882907b2a14c6841828020beddfc040154fc97a16694238c633eb, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:62:37:99:c0:fd:46:95:b2:de:d5:22:ff:
d0:50:95:8c:5a:52:90:6b:33:11:ed:9a:89:98:a3:
67:6c:e3:9f:58:d9:1f:00:1b:1f:79:76:dd:70:27:
11:b3:6d:6f:ca:61:3f:da:88:ae:b6:b4:37:e0:02:
4c:23:62:3e:a8:fc:43:dc:98:04:26:71:5d:eb:bf:
66:b0:4a:28:17:b5:cb:4b:9b:6a:21:59:fb:32:99:
dc:7b:af:95:bd:64:5c:ec:14:37:dd:cd:35:ed:9b:
37:ab:cc:03:e9:21:d7:2f:1a:78:88:ba:24:d4:67:
fa:df:b9:39:90:0b:18:ec:ee:8d:b8:59:e9:97:cc:
d5:3d:87:6b:05:68:e0:c4:4b:39:3f:02:a0:a5:dd:
f2:56:d0:1e:f4:f8:0a:40:fc:e6:0c:14:9c:fa:24:
b8:b2:fe:53:3b:86:7e:24:d3:a2:53:e8:31:91:59:
ae:b0:ea:a5:a3:d2:70:31:a2:da:22:6a:f4:40:2b:
bb:d1:95:db:06:dd:fe:d5:28:7d:c1:33:12:10:b7:
d1:19:f8:5a:bc:00:57:65:f0:46:63:69:e4:ee:87:
6d:9e:b8:0e:24:d1:b2:13:56:f6:95:76:c9:bc:15:
47:66:b7:b2:09:a8:3d:0a:8c:bc:38:90:95:a7:bd:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DD:D4:BA:D1:CA:71:5C:35:22:9E:98:F2:31:47:CC:6F:F2:6E:69
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1b39e9a7-4f3d-4cfc-975f-d9eaceed0ed2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.134.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:ec:d5:73:c8:1e:c3:60:4d:a0:a1:01:d1:69:53:fb:3e:9c:
d6:d1:85:26:8b:35:06:83:a0:cc:0e:87:3f:54:43:76:e2:13:
23:9d:dc:28:f3:b7:b5:5e:73:f9:f6:77:09:d7:1c:5a:ec:91:
b3:ab:b6:36:76:30:5c:35:cb:f7:b0:5e:ee:ac:01:ee:b1:30:
13:a7:22:c7:71:8b:0e:51:6f:da:b2:45:ba:f8:8a:1e:b5:09:
83:a1:7c:55:b7:5e:13:13:71:4f:96:e8:18:d2:b8:95:1d:34:
60:86:cd:b5:f0:15:d6:92:32:f3:f5:7d:54:49:30:56:ea:aa:
6f:fb:45:fa:5a:d7:1e:19:83:15:2c:2e:5e:99:72:0d:1a:a1:
d8:3a:63:7e:dc:fc:86:7a:55:dc:fd:f6:c6:5e:d2:7b:4d:92:
f2:f8:ba:78:33:c9:e1:b8:13:75:84:b9:9c:c4:1f:c7:43:1a:
32:56:e1:93:a6:9a:23:03:14:db:ec:04:91:6f:9d:c6:74:95:
1c:2f:be:40:8a:ba:ab:b8:83:ab:50:cc:33:56:bd:60:f9:92:
41:9d:72:20:00:82:9d:5d:84:86:62:4d:b7:94:15:2f:b9:71:
f9:55:83:0c:39:95:d5:55:28:48:f0:05:75:98:e3:a8:cd:cb:
46:bc:c4:af
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUOh14YJN1paCgJKeRyysWVPKfGIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjAyMjgwNjQwMzdaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDMwZjQwNDAxOWQwODgyOTA3YjJhMTRjNjg0MTgyODAyMGJlZGRmYzA0MDE1
NGZjOTdhMTY2OTQyMzhjNjMzZWIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKIjYjeZwP1GlbLe1SL/0FCVjFpSkGszEe2aiZijZ2zjn1jZHwAbH3l23XAn
EbNtb8phP9qIrra0N+ACTCNiPqj8Q9yYBCZxXeu/ZrBKKBe1y0ubaiFZ+zKZ3Huv
lb1kXOwUN93NNe2bN6vMA+kh1y8aeIi6JNRn+t+5OZALGOzujbhZ6ZfM1T2HawVo
4MRLOT8CoKXd8lbQHvT4CkD85gwUnPokuLL+UzuGfiTTolPoMZFZrrDqpaPScDGi
2iJq9EAru9GV2wbd/tUofcEzEhC30Rn4WrwAV2XwRmNp5O6HbZ64DiTRshNW9pV2
ybwVR2a3sgmoPQqMvDiQlae9KF8CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTR3dS6
0cpxXDUinpjyMUfMb/JuaTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MWIzOWU5YTctNGYzZC00Y2ZjLTk3NWYtZDllYWNlZWQwZWQyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADOGMA0G
CSqGSIb3DQEBCwUAA4IBAQCB7NVzyB7DYE2goQHRaVP7PpzW0YUmizUGg6DMDoc/
VEN24hMjndwo87e1XnP59ncJ1xxa7JGzq7Y2djBcNcv3sF7urAHusTATpyLHcYsO
UW/askW6+IoetQmDoXxVt14TE3FPlugY0riVHTRghs218BXWkjLz9X1USTBW6qpv
+0X6WtceGYMVLC5emXINGqHYOmN+3PyGelXc/fbGXtJ7TZLy+Lp4M8nhuBN1hLmc
xB/HQxoyVuGTppojAxTb7ASRb53GdJUcL75AirqruIOrUMwzVr1g+ZJBnXIgAIKd
XYSGYk23lBUvuXH5VYMMOZXVVShI8AV1mOOozctGvMSv
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:07:57 2026 by rpki-client