Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2a59044d-ec7e-45ff-a5bb-b9ab54f5cfb8.roa
File: 2a59044d-ec7e-45ff-a5bb-b9ab54f5cfb8.roa (raw, json)
Hash identifier: SkQVguUBXsH0zazEqhrhjqy6Ph95kVUupLhf8zcC5uM=
Subject key identifier: C1:8F:BB:30:2E:38:A4:4E:85:8A:8C:28:97:5F:E8:A9:5F:71:57:6A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 15B5D47F04DD23928BA02B365DABE570CB583DB9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2a59044d-ec7e-45ff-a5bb-b9ab54f5cfb8.roa
Signing time: Thu 17 Sep 2026 00:00:04 +0000
ROA not before: Thu 17 Sep 2026 00:00:04 +0000
ROA not after: Wed 16 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 57.81.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b5:d4:7f:04:dd:23:92:8b:a0:2b:36:5d:ab:e5:70:cb:58:3d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 17 00:00:04 2026 GMT
Not After : Dec 16 23:59:59 2026 GMT
Subject: serialNumber=5c4c6363595455d62fd0b6f3de46e9658034facc77d95949080759ca9ca61896, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:bd:2b:ed:61:34:bf:1d:59:b9:58:56:f2:
53:71:57:c6:8d:82:d0:9d:11:1f:38:3e:d0:bc:18:
b5:dc:03:b2:ac:f9:1a:3e:fa:2a:c2:9b:eb:72:7c:
42:07:f6:50:d0:b4:33:cc:a7:69:70:96:23:dc:ac:
95:ac:99:4f:ea:e0:43:97:23:04:81:95:ff:ed:2b:
8e:b2:1e:e4:45:ea:35:be:f0:62:03:be:2e:5a:82:
72:0e:cb:93:b4:82:97:cd:fb:44:97:13:14:e4:38:
32:fa:71:e3:85:12:52:e5:f5:43:72:6d:4d:bc:de:
fa:a9:22:d7:68:fc:7b:8d:55:24:1f:81:e9:da:f4:
a1:15:b1:23:41:1c:70:9f:7e:4d:37:d8:10:52:21:
ae:e2:c8:0e:99:8a:c2:91:02:5e:6b:2c:9d:5e:57:
da:b4:67:23:9e:f4:c3:ac:5a:15:45:9e:5a:aa:cc:
42:9e:20:e9:b7:e7:83:c6:5a:c1:1c:d9:d4:52:c4:
7b:01:27:19:2f:53:9e:9f:f2:8a:e6:f1:72:3c:ac:
0c:75:5b:84:24:fc:8d:b1:ef:e8:eb:d3:36:f9:1a:
00:29:70:a6:f1:85:54:35:70:a6:21:7f:8e:b2:79:
5a:7b:c1:38:17:4d:87:a2:59:79:c8:4a:e3:82:aa:
ce:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8F:BB:30:2E:38:A4:4E:85:8A:8C:28:97:5F:E8:A9:5F:71:57:6A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2a59044d-ec7e-45ff-a5bb-b9ab54f5cfb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.81.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c3:40:18:9c:99:0f:b9:12:53:be:89:3c:d9:75:4c:38:a4:7e:
fe:39:3d:33:2c:45:e8:4a:ad:42:e7:2d:3c:9a:64:c0:20:3e:
29:fc:36:6d:63:39:45:51:28:6e:88:e9:d4:50:df:53:76:72:
bc:e9:37:24:4a:52:14:41:86:e5:ca:26:6f:e9:35:18:05:28:
4e:e6:6e:8c:e4:bd:ce:72:9c:28:ba:21:97:1d:bb:42:96:38:
c7:e6:bd:b7:7e:81:22:4d:3e:25:3c:0f:71:7f:e0:e6:f3:06:
f4:03:1d:c7:10:3c:d9:fa:95:2e:b6:57:0f:6d:f3:ee:83:1c:
df:5e:a4:4a:2f:74:7a:ec:33:50:2a:32:56:0f:ea:d9:c4:1c:
df:6f:66:ce:f4:b5:bb:15:c3:9b:57:ca:67:77:3c:63:70:85:
a7:80:03:56:f7:dc:45:42:5b:a6:8d:3c:05:a1:6e:90:fa:f7:
21:20:e4:17:5b:7b:83:5b:ea:8a:66:16:32:2f:86:ba:b6:58:
7f:e2:0d:ec:54:e9:bf:57:4a:f4:61:46:2f:0f:8e:76:c6:dd:
b3:81:e5:cb:2f:8e:98:c0:8f:e9:6e:ab:8e:0f:8a:c9:ff:5c:
59:24:78:8f:99:35:04:87:01:21:fe:9e:1e:e7:32:0d:54:fe:
ed:28:a6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:40:26 2026 by rpki-client