Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2ce9a789-9599-4c9d-a093-ead3033f60d1.roa
File: 2ce9a789-9599-4c9d-a093-ead3033f60d1.roa (raw, json)
Hash identifier: oyNjUqxTYB1HWQQCe639teFKi4tFbG9puxPsEikYF3I=
Subject key identifier: B1:4D:9A:EF:34:92:40:AF:ED:0B:9C:7D:04:65:CE:A9:51:4A:12:A6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 414AE885B4E4F349B9C6761D262EC34494EC0694
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2ce9a789-9599-4c9d-a093-ead3033f60d1.roa
Signing time: Mon 26 Oct 2026 05:40:35 +0000
ROA not before: Mon 26 Oct 2026 05:40:35 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.34.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:4a:e8:85:b4:e4:f3:49:b9:c6:76:1d:26:2e:c3:44:94:ec:06:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:35 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=abddd602f9f375488d6df0f2e9a7a8d919ca9e5a6bf63005a5d2be09ea5fbc68, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:26:c9:f8:11:b0:59:47:91:8b:dc:30:87:ec:
87:36:1d:86:87:62:b9:9a:13:74:30:cf:60:36:2a:
5a:31:86:78:f6:09:ed:21:4c:11:87:7c:0d:c6:e0:
a0:71:54:7c:03:2d:5c:82:c0:79:98:05:ff:7c:a0:
33:92:9b:aa:93:1a:09:c9:23:2c:2b:de:db:19:16:
76:59:3f:5c:93:45:77:0b:4d:31:69:cf:47:ab:fb:
4b:1e:25:2c:f3:43:5e:17:e7:ca:1f:61:a1:98:0c:
66:52:2d:4d:77:58:7f:07:95:c1:b1:6f:22:17:89:
37:c9:e8:72:e3:6e:99:ef:75:bd:0c:03:4d:26:77:
74:ef:3b:88:41:00:6b:2b:57:a0:43:64:bf:95:95:
60:b5:1a:c6:b1:3c:38:e1:70:6f:3b:6a:68:4b:95:
00:20:1d:19:5d:f7:5b:78:e4:b5:e2:f7:e5:d1:be:
2c:d5:4b:5f:e5:45:d2:ef:a9:86:bf:1e:62:cf:c2:
8f:5e:3f:27:91:78:eb:41:ca:f9:c8:06:dc:99:20:
b5:8a:50:5f:8d:55:42:a6:0e:5d:03:1d:b9:1c:fc:
9b:dd:07:ae:95:d0:88:e4:75:63:4f:65:ba:7e:62:
8d:63:09:8d:0c:1d:1f:c2:20:33:84:ba:57:84:4b:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4D:9A:EF:34:92:40:AF:ED:0B:9C:7D:04:65:CE:A9:51:4A:12:A6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2ce9a789-9599-4c9d-a093-ead3033f60d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c9:12:23:b6:a7:25:56:15:d3:44:9d:a8:53:1f:fe:35:b3:fc:
70:0c:2d:93:93:40:b2:a0:38:99:aa:e5:fc:f0:90:de:66:6d:
cb:ca:ab:c4:e6:77:31:1b:36:04:47:fd:39:22:d1:e8:b5:e4:
67:dd:8a:1e:60:67:4f:1a:12:86:08:db:e9:f1:a1:b4:f4:0f:
cf:02:ab:d0:01:e2:b3:53:63:2b:57:bd:b4:e2:83:39:8c:ac:
96:df:9f:23:8e:3f:db:3e:2b:35:49:54:2a:50:6a:92:6a:b3:
e2:86:19:72:fe:84:78:1e:e1:4d:62:51:52:5b:f8:1c:ce:09:
a3:3b:16:0d:38:f9:f6:4e:a0:9e:84:af:4b:b1:2b:96:eb:3e:
3f:c1:61:5d:27:54:0b:db:e6:fd:fe:61:54:5e:1c:20:25:66:
4f:71:74:f3:c1:ec:85:0c:65:81:af:f0:43:a7:fd:4c:3c:ec:
3b:e0:cc:92:db:ae:e5:c6:7a:a7:81:e7:df:2d:18:30:5b:4b:
63:30:fb:de:fd:19:6b:df:76:26:49:7e:ec:0a:3d:5f:f2:74:
bc:a3:6e:65:60:35:41:38:67:85:3d:83:4a:fd:d7:c2:71:9c:
f2:04:0b:1c:b1:9b:7f:35:af:ab:0c:ad:b9:2e:24:24:9f:3e:
06:84:32:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 08:22:22 2026 by rpki-client