Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/42efa1a8-f804-47c5-8a3d-6f3ea05e1a5b.roa
File: 42efa1a8-f804-47c5-8a3d-6f3ea05e1a5b.roa (raw, json)
Hash identifier: alA81C7Jf4/2EdbqhdjURDI8ZiDeTdOk8+0xKL0KEuc=
Subject key identifier: 77:8C:86:17:9C:18:66:E0:00:97:2A:BB:72:90:0F:F5:D9:78:09:80
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7AFBFA9E06D989DBA1C864B2DE279C62B43455D7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/42efa1a8-f804-47c5-8a3d-6f3ea05e1a5b.roa
Signing time: Mon 26 Oct 2026 05:50:53 +0000
ROA not before: Mon 26 Oct 2026 05:50:53 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.164.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:fb:fa:9e:06:d9:89:db:a1:c8:64:b2:de:27:9c:62:b4:34:55:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:53 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=29f0248f09109ceb3c9622d9bf081d1ba398cf49da0aef0fc5aaad2ba78e2745, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:83:7a:07:00:b1:9e:0e:6d:04:6d:a5:1a:
bc:54:a5:5d:a2:2f:64:93:24:6a:1c:7e:ff:dd:33:
34:20:09:d2:1d:25:f4:b4:74:96:3f:31:ca:17:2f:
cf:db:2f:9a:01:60:3e:af:f6:db:4a:1a:a8:93:34:
04:79:77:a2:70:8f:2f:53:9e:dd:8b:05:4a:3e:82:
18:7e:f9:4f:ca:3a:46:02:10:c1:9f:37:d5:13:1c:
ed:27:b6:68:c5:03:2f:f7:9e:03:6e:06:c4:68:1f:
87:43:e2:2d:0b:ba:a9:22:4c:86:bc:6d:a5:d8:13:
83:2b:28:ca:40:44:a2:0a:4e:06:af:38:91:fc:07:
dd:d3:5f:62:1a:c1:3b:f9:70:84:4c:18:73:2c:85:
d3:cd:f7:b9:0e:89:ca:aa:35:44:52:43:d9:00:11:
8c:40:98:45:27:b7:e0:86:80:a5:ef:12:12:c7:b8:
5d:1e:61:04:23:1a:9d:0c:97:b7:9b:58:bd:e6:18:
1b:79:70:b3:e2:ec:87:b1:ed:d3:8b:23:3a:f0:e6:
0e:61:c6:ee:85:64:ce:61:db:81:09:f1:4c:05:a5:
d6:7b:64:7c:70:31:b5:a6:3c:2f:2b:d0:f8:d8:62:
32:62:f5:d6:30:73:5c:c6:df:52:ad:be:bc:d8:83:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8C:86:17:9C:18:66:E0:00:97:2A:BB:72:90:0F:F5:D9:78:09:80
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/42efa1a8-f804-47c5-8a3d-6f3ea05e1a5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.164.0.0/15
Signature Algorithm: sha256WithRSAEncryption
ca:6c:70:7e:45:49:97:c5:d5:c9:91:5f:0b:a6:f6:f8:5e:08:
18:bf:4b:d8:3a:3c:29:78:55:bf:d0:09:a4:16:3c:c5:2b:f4:
9e:15:2e:b9:5e:16:98:1a:88:e4:d6:ae:84:30:df:dd:fe:7a:
2b:bc:75:3c:a0:18:c6:7e:1f:d9:3d:b8:05:ed:90:69:be:b9:
9f:01:63:09:64:46:2e:5d:ba:08:1b:35:7f:3d:13:97:45:2a:
ec:14:ee:4a:7e:a9:94:4a:95:d4:f3:f3:2b:2d:df:80:7d:a2:
3a:ae:b8:79:3a:38:ef:59:91:c0:c0:9e:d1:e8:07:44:6b:45:
a5:48:23:7e:4c:67:7b:ba:be:0c:2c:e7:6a:c9:da:ac:b6:f0:
c2:76:5a:27:18:0f:80:a4:a8:e7:aa:71:10:34:b0:01:05:74:
ba:a9:bb:0c:9d:47:e8:1c:eb:89:44:c4:0c:ae:d1:3a:bc:c0:
d0:ed:86:1e:89:c1:59:1f:60:8f:f3:71:5a:cc:95:86:27:29:
86:f7:81:a8:6c:a4:81:6a:9e:e7:02:81:5f:9e:06:e3:95:03:
bb:fd:87:89:04:75:58:a1:ee:ba:26:f3:1d:0b:72:8d:50:42:
e9:b8:95:9a:40:6a:50:47:0a:e6:f9:0a:68:91:f9:34:00:7f:
20:3f:49:e6
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUevv6ngbZiduhyGSy3iecYrQ0VdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTUwNTNaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDI5ZjAyNDhmMDkxMDljZWIzYzk2MjJkOWJmMDgxZDFiYTM5OGNmNDlkYTBh
ZWYwZmM1YWFhZDJiYTc4ZTI3NDUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMd5g3oHALGeDm0EbaUavFSlXaIvZJMkahx+/90zNCAJ0h0l9LR0lj8xyhcv
z9svmgFgPq/220oaqJM0BHl3onCPL1Oe3YsFSj6CGH75T8o6RgIQwZ831RMc7Se2
aMUDL/eeA24GxGgfh0PiLQu6qSJMhrxtpdgTgysoykBEogpOBq84kfwH3dNfYhrB
O/lwhEwYcyyF0833uQ6Jyqo1RFJD2QARjECYRSe34IaApe8SEse4XR5hBCManQyX
t5tYveYYG3lws+Lsh7Ht04sjOvDmDmHG7oVkzmHbgQnxTAWl1ntkfHAxtaY8LyvQ
+NhiMmL11jBzXMbfUq2+vNiDjBUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBR3jIYX
nBhm4ACXKrtykA/12XgJgDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NDJlZmExYTgtZjgwNC00N2M1LThhM2QtNmYzZWEwNWUxYTViLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATOkMA0G
CSqGSIb3DQEBCwUAA4IBAQDKbHB+RUmXxdXJkV8Lpvb4XggYv0vYOjwpeFW/0Amk
FjzFK/SeFS65XhaYGojk1q6EMN/d/norvHU8oBjGfh/ZPbgF7ZBpvrmfAWMJZEYu
XboIGzV/PROXRSrsFO5KfqmUSpXU8/MrLd+AfaI6rrh5OjjvWZHAwJ7R6AdEa0Wl
SCN+TGd7ur4MLOdqydqstvDCdlonGA+ApKjnqnEQNLABBXS6qbsMnUfoHOuJRMQM
rtE6vMDQ7YYeicFZH2CP83FazJWGJymG94GobKSBap7nAoFfngbjlQO7/YeJBHVY
oe66JvMdC3KNUELpuJWaQGpQRwrm+Qpokfk0AH8gP0nm
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:16:09 2026 by rpki-client