Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/465ffdf3-82ea-46dd-b114-e21ffa69798b.roa
File: 465ffdf3-82ea-46dd-b114-e21ffa69798b.roa (raw, json)
Hash identifier: RvCAhZMNqycT3eLbMfZcUsZfJZDPeay1NQKKn4YEpmo=
Subject key identifier: 03:84:6E:7A:F7:9A:69:51:7B:9F:7D:C7:09:DD:7C:4B:F1:75:31:D6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 667091E158F8849626F49D28225C02E9F7E7A138
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/465ffdf3-82ea-46dd-b114-e21ffa69798b.roa
Signing time: Sun 25 Oct 2026 00:02:44 +0000
ROA not before: Sun 25 Oct 2026 00:02:44 +0000
ROA not after: Sat 23 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.118.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:70:91:e1:58:f8:84:96:26:f4:9d:28:22:5c:02:e9:f7:e7:a1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 25 00:02:44 2026 GMT
Not After : Jan 23 23:59:59 2027 GMT
Subject: serialNumber=796eb4877a73367aec179d1ead3f6aafc75bdd9f16f2714bbd3ef3ef6a2a1254, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:80:17:91:4c:4f:19:81:f7:73:cd:a2:87:
0b:bc:1e:c2:0d:81:7b:3a:56:e2:21:f5:87:e0:78:
ec:42:cd:eb:17:2c:4b:ab:6b:66:9a:17:f4:a9:14:
61:a3:9d:9c:84:61:30:6c:db:d2:22:7f:29:27:79:
8c:a2:64:4c:56:73:92:70:65:2e:3c:2a:58:b5:2f:
0c:b5:2d:25:d5:56:86:44:1b:0e:f6:b9:9a:e8:01:
6e:d1:79:49:72:3c:a1:80:50:e3:8d:ad:53:02:93:
98:bf:be:6f:ae:24:1c:03:53:aa:81:b1:b4:9c:2c:
68:3e:f7:ef:e4:cf:3e:2d:9e:d8:92:b0:27:41:7d:
0b:1c:fe:90:e6:4d:27:c6:b9:c7:e9:38:0f:f6:ba:
73:51:7d:04:7e:24:f6:dd:55:2c:c6:1a:87:9c:be:
e0:41:d7:2d:17:13:6e:4b:51:fc:18:28:19:31:08:
4e:07:ec:ef:db:43:fc:ed:e2:fb:04:7a:33:a2:8c:
ab:fc:35:38:76:2d:4d:7b:ae:2e:b4:7b:db:fd:96:
8d:0c:5c:4f:de:4e:6e:49:d7:ab:80:78:ee:10:9a:
a8:d5:7f:54:73:12:37:12:0e:d8:b5:39:57:bb:d0:
60:ab:2d:68:17:75:be:dc:fd:6a:28:10:08:22:34:
a7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:84:6E:7A:F7:9A:69:51:7B:9F:7D:C7:09:DD:7C:4B:F1:75:31:D6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/465ffdf3-82ea-46dd-b114-e21ffa69798b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.118.98.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:3c:cb:57:72:01:02:04:95:52:a9:17:bd:e8:e0:1d:c7:b0:
54:47:fa:60:1f:1c:d1:c7:9e:a5:7a:e7:c6:ae:52:84:56:d3:
05:31:47:f0:b5:66:cc:6b:88:b0:2a:42:53:a0:78:5c:03:51:
de:5a:95:fe:0a:50:e6:2f:c1:85:fd:cb:ec:df:c1:4c:4d:ee:
83:ac:f9:08:ab:65:59:e6:58:73:d5:2a:f9:f4:3a:c2:09:89:
6f:3a:ee:f3:ad:da:65:f4:a7:26:b6:ac:f2:8c:1d:ec:cd:73:
4a:08:7e:fd:c9:85:83:b6:98:28:a4:2d:32:49:ca:d5:0b:a0:
99:06:fd:eb:fd:7d:92:41:73:15:23:08:b7:0c:9f:89:e6:fc:
01:32:8b:2e:d7:c1:96:9b:f2:5f:20:ec:e3:6d:19:b6:f5:03:
1e:fc:b9:b9:c5:b3:cd:57:16:41:1d:7b:47:dd:d2:8f:29:bb:
99:6c:10:f3:15:5b:f8:c3:0e:e6:71:e2:cb:af:de:98:7b:ce:
d3:6a:b6:4e:ef:c1:6a:e3:24:fa:d4:b1:e8:0f:b0:fe:f1:15:
0e:27:5d:e1:ae:99:b4:ed:04:b9:d8:81:18:c2:a8:c2:fa:c3:
3c:e3:b6:52:8b:86:cb:de:69:4c:d2:df:c3:5f:1b:13:d8:7a:
d7:4d:d1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:19:23 2026 by rpki-client