Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/41cf150b-3a44-4332-b5cb-786e4f10560a.roa
File: 41cf150b-3a44-4332-b5cb-786e4f10560a.roa (raw, json)
Hash identifier: vb1neVdMDIBqwK/n0r/xg1ZujXKIJc7ZVHdxnjgdHIs=
Subject key identifier: 38:82:20:7A:4D:08:55:DE:BD:12:33:E7:8B:DF:BF:EB:D5:7C:52:EC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 42FB1CC572BD76E5F040BB2DD43837903F941E31
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/41cf150b-3a44-4332-b5cb-786e4f10560a.roa
Signing time: Mon 02 Nov 2026 00:02:30 +0000
ROA not before: Mon 02 Nov 2026 00:02:30 +0000
ROA not after: Sun 31 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.24.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:fb:1c:c5:72:bd:76:e5:f0:40:bb:2d:d4:38:37:90:3f:94:1e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 2 00:02:30 2026 GMT
Not After : Jan 31 23:59:59 2027 GMT
Subject: serialNumber=79073746a70c15299e73d58003d78ee900f9f1355435567e4fc49096c64481eb, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:37:c1:6f:a3:5c:51:78:80:1b:f5:98:c7:
52:ee:d9:65:c4:a5:d2:07:bf:17:6a:bf:54:1b:f9:
55:ae:a7:c0:11:27:01:9b:80:8b:88:7b:5e:67:70:
d3:bc:19:a1:90:32:4d:b9:f2:82:58:25:6f:f5:3c:
28:60:4a:82:2b:77:15:e9:e0:54:75:52:34:4a:cd:
2e:4a:91:18:2c:61:b0:dd:8b:24:ea:34:3b:dc:8b:
70:1b:80:35:9e:35:57:b3:45:9b:d7:68:0c:12:2f:
f7:59:fb:84:da:00:ec:8b:a0:6e:de:14:a9:69:a6:
3d:d7:2b:77:32:27:0f:13:c0:85:e4:38:30:8d:98:
75:34:5a:33:db:6c:31:74:85:83:89:a1:32:c2:0c:
30:10:4d:66:4c:fa:6f:f2:1d:77:e0:cb:34:5c:b1:
86:4b:90:1b:20:6d:0d:06:e4:c3:eb:35:4b:3b:80:
2a:c7:eb:21:3c:c0:f3:a5:8b:56:d6:bc:93:7f:5d:
08:06:82:56:c3:00:05:04:58:34:bd:38:13:38:fb:
08:93:af:01:ea:fb:4b:5f:ae:a0:ab:d8:bf:c0:06:
dc:b1:03:b6:16:8c:92:1f:8a:e0:5b:f6:04:99:a2:
43:66:6d:97:44:94:3f:bf:4d:3f:d2:b3:b4:6a:4d:
3e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:82:20:7A:4D:08:55:DE:BD:12:33:E7:8B:DF:BF:EB:D5:7C:52:EC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/41cf150b-3a44-4332-b5cb-786e4f10560a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.24.198.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:be:59:a9:c9:ad:e7:f5:67:88:97:47:05:21:c5:83:27:84:
0d:6f:01:7d:a8:2d:5e:5a:14:cc:58:12:7b:24:c9:53:f8:6e:
f0:26:23:99:b8:41:a9:2d:3f:d1:04:3f:bd:39:17:db:a3:30:
6c:38:7b:96:47:cc:b0:20:44:14:f8:90:70:9c:ca:81:c1:20:
f5:8a:53:ce:57:98:ae:f3:5a:81:be:da:34:80:05:d6:d7:63:
2a:05:6d:b5:bd:4e:93:b2:b2:77:c7:f3:a1:b0:59:d9:89:2f:
ba:e8:d9:30:18:78:fa:a3:f9:0b:74:d5:e7:f2:f7:b1:be:63:
35:b6:a8:25:17:f0:36:63:6d:fe:2c:61:a7:99:83:03:5d:5f:
bd:3b:3c:95:d6:de:c1:c9:98:63:8f:26:1a:fc:33:0b:dc:da:
b0:ce:de:87:f7:32:67:8a:32:1c:cc:51:40:3a:e7:26:45:90:
31:a6:45:15:ba:58:fa:10:3b:96:7f:70:26:a9:47:96:a4:83:
08:c4:db:97:af:db:ba:a5:fd:f0:d9:bc:b6:fb:63:01:9e:db:
44:37:e1:00:65:15:fd:bf:e9:77:8e:c4:40:11:ce:89:0d:ee:
50:a7:2e:9e:fb:e4:6a:72:26:d6:58:7d:57:91:15:bd:3c:cd:
a6:92:fe:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 20:05:05 2026 by rpki-client