Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/465ffdf3-82ea-46dd-b114-e21ffa69798b.roa
File: 465ffdf3-82ea-46dd-b114-e21ffa69798b.roa (raw, json)
Hash identifier: aFOeJWA/NhmwQMFd1mUMYWAlPMeDCOmroEUlTIn7Tyk=
Subject key identifier: B0:CC:FE:DE:7D:1D:6F:45:D1:E2:4A:5E:2D:94:2B:4A:28:C4:81:D5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0A03A50C1B97925B8C560F0066028BF67053779E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/465ffdf3-82ea-46dd-b114-e21ffa69798b.roa
Signing time: Fri 27 Feb 2026 00:00:11 +0000
ROA not before: Fri 27 Feb 2026 00:00:11 +0000
ROA not after: Thu 28 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.118.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:03:a5:0c:1b:97:92:5b:8c:56:0f:00:66:02:8b:f6:70:53:77:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Feb 27 00:00:11 2026 GMT
Not After : May 28 23:59:59 2026 GMT
Subject: serialNumber=043c42d36c109b67fd00d2239078d96db3d732d46fc9a57a2ec203e2018e1cac, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f3:25:06:c5:36:58:fb:9d:c4:6a:ba:b5:85:
65:b7:2d:09:12:f2:47:ec:99:3c:db:76:d6:e9:19:
74:fb:2e:bd:5c:12:0a:43:2a:b6:a9:65:bf:0e:d7:
b4:d3:81:74:de:27:6f:2a:74:34:92:36:45:09:2f:
02:5a:9d:42:23:11:c4:fc:3c:62:0c:63:93:98:a2:
3c:54:b3:93:a3:71:99:1b:c3:76:89:13:71:ae:4c:
0a:d2:4b:3b:ae:b7:7b:8d:01:a9:35:c8:e4:df:2b:
9d:a1:0f:da:ab:f9:a7:fb:7f:01:be:ad:e8:78:3d:
aa:1d:8e:40:42:aa:54:4f:2d:db:c8:84:8a:ee:f7:
26:f1:9a:97:74:5b:30:76:af:f7:aa:2d:6d:35:6e:
64:8e:20:42:3a:cf:14:60:c0:bc:7a:31:b7:dc:2d:
22:00:1c:eb:8a:53:a5:f1:b4:b8:5c:e3:87:06:ea:
d9:76:12:ca:6e:bb:04:79:b1:c1:d4:ec:6a:64:d8:
7a:01:e4:ef:a2:a0:ab:42:92:c5:a4:ce:de:bf:38:
3e:88:f3:7d:39:bf:6f:43:66:ac:ed:f0:48:7d:a4:
89:70:30:b0:2d:b4:d0:1a:88:71:ed:1f:b1:7b:62:
6c:13:fd:96:5a:df:6f:8b:47:a8:2d:40:78:a3:4d:
5d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CC:FE:DE:7D:1D:6F:45:D1:E2:4A:5E:2D:94:2B:4A:28:C4:81:D5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/465ffdf3-82ea-46dd-b114-e21ffa69798b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.118.98.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:26:87:48:17:80:8f:03:0e:ba:97:ad:8b:3b:8f:fa:51:1e:
97:c3:d1:9c:f1:fa:9d:06:1c:7c:1f:d8:8e:f4:81:80:52:a5:
7e:af:71:74:9c:e8:a3:04:bd:e0:f7:f8:6c:9e:4b:6f:a1:7f:
8d:47:47:8e:0f:7c:fc:7c:2d:07:74:1d:77:a8:aa:db:c9:fe:
0f:95:24:a3:4d:18:2f:1d:4c:8b:16:74:f5:a0:e3:46:7e:eb:
27:e4:a8:87:19:76:5d:96:db:39:1f:c1:44:98:26:72:5c:fc:
ae:cd:28:21:32:dd:50:39:ee:16:a1:87:09:e4:40:69:2e:9a:
4f:56:4a:75:fc:8f:68:3c:ab:81:71:99:c3:ae:f3:a2:ee:1c:
ec:31:a2:11:56:2e:d6:fb:0b:1c:91:c7:14:55:cd:8e:6b:12:
1d:b1:a4:1e:e7:dc:d4:1f:d2:5c:81:8b:1a:d3:b2:7a:c6:db:
e9:58:c0:51:46:a6:9d:84:ec:9b:32:62:0c:9d:20:b0:e5:c9:
06:6d:0f:6a:b7:59:96:c1:73:32:b2:6f:0a:0e:42:ef:94:d2:
bb:73:2e:46:17:2e:8f:bd:42:93:78:4d:07:2b:e7:94:5c:f9:
8a:7b:99:66:f5:50:f5:d0:9a:f0:38:89:c6:54:ea:2f:3b:13:
82:af:52:f4
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUCgOlDBuXkluMVg8AZgKL9nBTd54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjAyMjcwMDAwMTFaFw0yNjA1MjgyMzU5NTlaMHoxSTBHBgNV
BAUTQDA0M2M0MmQzNmMxMDliNjdmZDAwZDIyMzkwNzhkOTZkYjNkNzMyZDQ2ZmM5
YTU3YTJlYzIwM2UyMDE4ZTFjYWMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO7zJQbFNlj7ncRqurWFZbctCRLyR+yZPNt21ukZdPsuvVwSCkMqtqllvw7X
tNOBdN4nbyp0NJI2RQkvAlqdQiMRxPw8Ygxjk5iiPFSzk6NxmRvDdokTca5MCtJL
O663e40BqTXI5N8rnaEP2qv5p/t/Ab6t6Hg9qh2OQEKqVE8t28iEiu73JvGal3Rb
MHav96otbTVuZI4gQjrPFGDAvHoxt9wtIgAc64pTpfG0uFzjhwbq2XYSym67BHmx
wdTsamTYegHk76Kgq0KSxaTO3r84PojzfTm/b0NmrO3wSH2kiXAwsC200BqIce0f
sXtibBP9llrfb4tHqC1AeKNNXSMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSwzP7e
fR1vRdHiSl4tlCtKKMSB1TAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NDY1ZmZkZjMtODJlYS00NmRkLWIxMTQtZTIxZmZhNjk3OThiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATN2YjAN
BgkqhkiG9w0BAQsFAAOCAQEAyCaHSBeAjwMOupetizuP+lEel8PRnPH6nQYcfB/Y
jvSBgFKlfq9xdJzoowS94Pf4bJ5Lb6F/jUdHjg98/HwtB3Qdd6iq28n+D5Uko00Y
Lx1MixZ09aDjRn7rJ+Sohxl2XZbbOR/BRJgmclz8rs0oITLdUDnuFqGHCeRAaS6a
T1ZKdfyPaDyrgXGZw67zou4c7DGiEVYu1vsLHJHHFFXNjmsSHbGkHufc1B/SXIGL
GtOyesbb6VjAUUamnYTsmzJiDJ0gsOXJBm0PardZlsFzMrJvCg5C75TSu3MuRhcu
j71Ck3hNByvnlFz5inuZZvVQ9dCa8DiJxlTqLzsTgq9S9A==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:21:41 2026 by rpki-client