Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2740a5f5-ec55-42ac-b7df-f4c863c83981.roa
File: 2740a5f5-ec55-42ac-b7df-f4c863c83981.roa (raw, json)
Hash identifier: ql9E4ajREIUY6CfcffiN8yuOA5A72DLz9dMGqUkqYcA=
Subject key identifier: 6E:AA:C4:98:5A:82:DD:D7:13:5A:34:C4:EF:AB:EF:02:E7:CB:2B:1B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 725122B6DE2C12AAFEA0406AA250226C6ECD6ADB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2740a5f5-ec55-42ac-b7df-f4c863c83981.roa
Signing time: Mon 26 Oct 2026 05:40:08 +0000
ROA not before: Mon 26 Oct 2026 05:40:08 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.125.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 06:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:51:22:b6:de:2c:12:aa:fe:a0:40:6a:a2:50:22:6c:6e:cd:6a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:08 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=71020bc79af81c112274bdc1c8c77c6f2b1b6fd9ef43802a7957bfc9d49eb397, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:c8:cb:f2:90:d6:8b:0d:90:97:44:de:c8:
87:93:0b:47:55:e0:bf:74:24:1f:8c:41:f1:89:c6:
66:89:be:95:92:53:e8:83:ff:1f:00:ef:1d:d1:a7:
60:7d:26:14:9b:de:67:04:8d:1e:84:de:c5:e0:3e:
9d:65:58:e6:e0:f6:54:5e:5f:05:75:a3:73:44:7d:
11:dc:84:c6:68:0b:34:7c:4e:0a:25:eb:21:12:44:
9f:7c:d4:d4:d2:1a:1b:55:d0:75:3b:2a:92:c0:a7:
8e:da:f0:98:6d:2b:df:e7:ad:e0:cc:51:98:ba:0f:
e9:5e:aa:50:cc:b0:44:ad:22:06:46:3c:01:cf:cf:
fb:39:38:26:79:84:5c:da:b8:f6:49:2b:e9:3c:30:
61:a7:a7:51:90:4d:23:50:0f:46:34:ce:ec:13:b5:
10:4e:d4:71:94:98:16:e7:ee:0e:54:b1:8c:67:e4:
dd:9a:5e:32:fa:c0:45:07:d0:0f:1c:86:6e:16:c8:
6c:45:d3:40:2c:b3:a4:b4:c9:fb:70:35:08:b7:c8:
7d:29:ff:09:f3:c6:92:9a:fd:d6:65:1c:3c:7e:64:
b2:c5:5b:10:79:f3:ad:e9:6b:54:1b:7e:49:45:06:
40:2a:b1:85:57:0c:c9:21:24:1b:68:7c:5f:ab:17:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AA:C4:98:5A:82:DD:D7:13:5A:34:C4:EF:AB:EF:02:E7:CB:2B:1B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2740a5f5-ec55-42ac-b7df-f4c863c83981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:33:63:b1:e5:08:3e:03:c6:4d:d9:85:1b:b3:a3:86:94:c8:
93:2d:81:84:f4:c1:b3:54:f6:39:e6:0d:06:99:b5:b8:ef:78:
1b:29:ef:3b:09:6c:30:4f:d8:be:fa:03:18:02:b5:19:79:46:
c8:27:52:8f:13:5e:c8:b7:30:e4:12:b8:83:aa:ce:66:6a:e2:
89:96:95:1f:c2:ce:ad:a9:e6:d2:fd:a9:90:29:a0:5a:16:a5:
3d:eb:20:3b:30:e6:14:00:e0:a2:b1:cc:50:bb:e2:69:85:09:
6f:92:31:41:61:b7:27:52:ab:53:f4:db:e4:d3:ec:2b:05:3e:
46:a8:cc:d1:16:60:ef:2d:50:d2:ff:20:94:a2:b1:f7:5f:db:
2f:e4:f0:1b:57:cf:ae:ca:32:11:f7:5d:c4:d3:bd:0d:94:1f:
a1:03:ba:e1:95:7a:4c:95:eb:59:bd:9a:77:a0:75:ce:1e:a5:
d4:f0:37:94:00:c0:2c:ff:6e:6d:88:18:e8:47:f3:af:82:13:
db:fc:2e:7f:d1:10:61:59:ee:60:fc:c1:68:e0:1a:9e:0c:59:
10:d5:85:54:16:e1:40:5b:4a:fd:9f:dd:37:00:9e:f5:7b:c6:
c3:cd:3c:91:ed:a6:64:d5:90:bc:a9:4b:4a:93:bd:71:ae:e6:
30:3d:58:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 17:58:32 2026 by rpki-client