Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46eb8bb9-8a91-491d-8f3f-9cc4afcf5ecd.roa
File: 46eb8bb9-8a91-491d-8f3f-9cc4afcf5ecd.roa (raw, json)
Hash identifier: yGfeKRWxVi7NLxABNRwfU67AouxfLEUWLJ2MloT4wHE=
Subject key identifier: B4:E0:EA:35:5E:D1:EA:AD:B4:EB:F9:12:DE:95:3D:F1:C6:36:55:CB
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5E15F7271AB2DD22FC50BC87755953BDB1386A7B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46eb8bb9-8a91-491d-8f3f-9cc4afcf5ecd.roa
Signing time: Sun 11 Oct 2026 15:20:21 +0000
ROA not before: Sun 11 Oct 2026 15:20:21 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.108.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:15:f7:27:1a:b2:dd:22:fc:50:bc:87:75:59:53:bd:b1:38:6a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 11 15:20:21 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=afac19f28d6b22bb723b42e124842214b7b18c003f61d3a870114f91d8a6bfd3, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:37:9e:58:53:eb:e5:35:d5:d3:bb:d5:81:
4b:cc:c6:05:a1:ce:e1:02:77:1b:04:0a:58:d6:55:
8e:72:d9:c4:2f:bb:b6:c0:3b:a1:ae:aa:0a:79:5f:
97:de:aa:6c:6f:51:84:e5:aa:ea:cd:f4:93:fa:47:
0b:d7:d9:ee:b3:46:ea:0b:c2:65:b5:62:50:e4:64:
f8:d8:50:83:cd:af:5a:42:a0:da:21:ab:a8:2d:5b:
a0:f8:98:d5:12:21:b7:08:ae:26:ff:ce:d9:88:f8:
d7:6b:dd:1f:80:0a:8d:90:53:8b:0f:90:27:ab:a2:
47:85:11:c5:4a:93:b6:aa:16:a1:e5:a1:64:a9:8c:
b2:e4:87:cb:f5:3b:bc:7a:78:0c:a5:c3:17:bd:03:
2a:c9:8f:5e:d8:a7:61:27:fe:50:4c:f8:2a:5b:6d:
70:f0:4a:c0:57:09:00:79:5d:ed:72:ce:de:d9:db:
31:a8:80:08:33:ec:00:c4:ef:89:2f:d5:8d:44:33:
50:7c:59:99:9a:a4:55:a0:ea:6a:3c:08:39:c8:60:
43:45:6f:ad:eb:87:03:56:6f:92:ee:53:91:52:e3:
fe:84:cc:93:fd:af:65:52:0d:4d:ab:89:02:b3:c2:
b4:7d:a1:d9:72:6e:9a:e4:7f:71:e4:ed:78:fa:b9:
c3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E0:EA:35:5E:D1:EA:AD:B4:EB:F9:12:DE:95:3D:F1:C6:36:55:CB
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/46eb8bb9-8a91-491d-8f3f-9cc4afcf5ecd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.108.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:29:66:dc:e2:b7:e4:b0:21:2b:f1:eb:18:56:66:b7:8c:ee:
89:6a:2f:d9:69:d8:76:01:68:a0:09:5f:7f:8a:e9:7a:00:64:
88:1a:e8:76:a7:45:85:b6:0c:be:a4:f4:f5:cd:66:b2:5e:c2:
ea:4d:93:e2:c6:20:72:27:81:5b:fb:46:d1:3d:71:c2:fa:06:
b8:43:d0:af:f8:5a:d5:b6:3c:21:25:ae:43:0f:c0:49:69:96:
36:f2:d7:e4:dd:c8:39:1d:35:b2:97:12:e8:58:20:20:8b:a6:
ee:89:49:1e:28:54:46:c6:d8:9a:e3:1e:be:ac:e6:ac:86:44:
b3:43:c1:a2:ab:b4:2c:68:40:42:68:64:ff:03:1a:2b:b8:38:
23:17:2a:a2:10:1a:4b:f9:6a:cc:ba:9a:f1:51:d0:d4:b9:50:
ad:8f:08:70:3d:34:4c:c8:73:fe:a0:86:5b:fa:42:4b:50:6f:
7c:9c:0d:9b:83:f9:e9:38:d1:cd:39:cc:b7:f9:9e:3e:31:17:
c7:68:cd:53:23:ef:38:b1:54:cc:58:b6:6b:84:0a:78:8f:80:
59:5c:f9:f3:ca:b7:c8:cb:96:54:7f:b2:58:ba:87:9e:70:f3:
a6:69:3b:2f:c5:7b:2c:2e:e5:24:ca:c6:2b:37:cf:38:8a:90:
c2:85:3f:2d
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUXhX3Jxqy3SL8ULyHdVlTvbE4answDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMTExNTIwMjFaFw0yNzAxMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGFmYWMxOWYyOGQ2YjIyYmI3MjNiNDJlMTI0ODQyMjE0YjdiMThjMDAzZjYx
ZDNhODcwMTE0ZjkxZDhhNmJmZDMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKdgN55YU+vlNdXTu9WBS8zGBaHO4QJ3GwQKWNZVjnLZxC+7tsA7oa6qCnlf
l96qbG9RhOWq6s30k/pHC9fZ7rNG6gvCZbViUORk+NhQg82vWkKg2iGrqC1boPiY
1RIhtwiuJv/O2Yj412vdH4AKjZBTiw+QJ6uiR4URxUqTtqoWoeWhZKmMsuSHy/U7
vHp4DKXDF70DKsmPXtinYSf+UEz4KlttcPBKwFcJAHld7XLO3tnbMaiACDPsAMTv
iS/VjUQzUHxZmZqkVaDqajwIOchgQ0VvreuHA1Zvku5TkVLj/oTMk/2vZVINTauJ
ArPCtH2h2XJumuR/ceTtePq5wzECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBS04Oo1
XtHqrbTr+RLelT3xxjZVyzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NDZlYjhiYjktOGE5MS00OTFkLThmM2YtOWNjNGFmY2Y1ZWNkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNsMA0G
CSqGSIb3DQEBCwUAA4IBAQADKWbc4rfksCEr8esYVma3jO6Jai/Zadh2AWigCV9/
iul6AGSIGuh2p0WFtgy+pPT1zWayXsLqTZPixiByJ4Fb+0bRPXHC+ga4Q9Cv+FrV
tjwhJa5DD8BJaZY28tfk3cg5HTWylxLoWCAgi6buiUkeKFRGxtia4x6+rOashkSz
Q8Giq7QsaEBCaGT/AxoruDgjFyqiEBpL+WrMuprxUdDUuVCtjwhwPTRMyHP+oIZb
+kJLUG98nA2bg/npONHNOcy3+Z4+MRfHaM1TI+84sVTMWLZrhAp4j4BZXPnzyrfI
y5ZUf7JYuoeecPOmaTsvxXssLuUkysYrN884ipDChT8t
-----END CERTIFICATE-----
Generated at Thu Nov 5 11:14:03 2026 by rpki-client