Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49c0599f-0613-4e9d-86e2-6493f86864b0.roa
File: 49c0599f-0613-4e9d-86e2-6493f86864b0.roa (raw, json)
Hash identifier: gevRYnI9809sknM/N4wBc2CnQfZM/+whpZ2e1KT8kMY=
Subject key identifier: 80:BD:37:76:CC:83:2B:50:04:45:11:90:DA:19:B6:38:99:46:EA:93
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 673AC0CFAC3A91785697ECABDB096102AB863A29
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49c0599f-0613-4e9d-86e2-6493f86864b0.roa
Signing time: Tue 28 Jul 2026 00:30:13 +0000
ROA not before: Tue 28 Jul 2026 00:30:13 +0000
ROA not after: Mon 26 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.102.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:3a:c0:cf:ac:3a:91:78:56:97:ec:ab:db:09:61:02:ab:86:3a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 28 00:30:13 2026 GMT
Not After : Oct 26 23:59:59 2026 GMT
Subject: serialNumber=704f83aaf72d7fe12f682fc1d0a6601aca6817c89f9fe690a7bb7aa1e221cba6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ef:57:f0:91:a3:88:04:fe:68:8d:db:0b:d8:
1a:9c:3b:2c:0e:de:73:d8:6a:dd:d0:ed:92:46:e3:
98:8f:93:99:ff:ce:b6:40:c8:7c:42:a7:4e:38:e4:
5a:59:cd:55:9f:c2:18:94:1f:a5:75:c8:c5:fb:47:
db:06:c3:ec:84:eb:3e:5a:7d:06:1f:b8:14:88:39:
01:c4:f8:8e:e2:da:11:35:c3:56:f5:72:9e:78:89:
87:e4:fc:11:be:40:0b:41:b2:bd:2d:21:47:45:47:
c6:0c:f2:b4:41:2c:09:ba:40:75:91:72:bc:6f:2a:
25:f4:c1:32:14:67:47:3e:c6:f9:3f:c2:b0:68:a9:
d0:db:05:1e:fd:fe:0c:28:65:46:4b:b8:ad:1b:6a:
7c:4c:af:7a:de:dd:52:49:fa:71:bb:03:38:5a:b3:
f3:80:16:07:f9:92:91:60:5c:10:6c:0a:2a:9a:09:
61:be:c6:c9:8b:80:ca:11:53:48:77:4d:93:09:a8:
8b:73:96:66:09:83:47:cc:59:6b:44:bc:c1:49:c0:
9f:e9:56:82:10:a5:3d:40:8d:ab:0d:a0:e0:5f:da:
65:1e:b1:41:d0:e2:53:4e:0d:3a:a4:93:bb:4f:a3:
a0:da:68:43:06:90:be:ec:a4:3b:8d:25:9a:47:84:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BD:37:76:CC:83:2B:50:04:45:11:90:DA:19:B6:38:99:46:EA:93
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49c0599f-0613-4e9d-86e2-6493f86864b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.102.0.0/17
Signature Algorithm: sha256WithRSAEncryption
56:72:5d:c2:3e:db:e1:aa:79:8f:d9:5f:12:da:39:3a:be:d3:
22:55:0c:50:7f:3e:d5:76:72:bd:1f:83:6a:4b:84:8a:f2:2b:
d4:5d:40:06:7f:25:f5:c5:43:2c:56:40:20:ee:ea:06:00:e0:
4e:0d:48:bc:b9:4c:b0:46:b9:9e:64:40:1e:81:1c:73:a8:57:
df:82:73:fa:39:0f:63:ac:da:a9:c3:0d:e2:9c:9c:ff:01:10:
f7:ee:8c:a6:90:2c:fc:20:c0:33:73:03:98:d7:f6:07:f5:e9:
e0:55:d2:4f:aa:dd:10:e8:5e:28:e3:e3:a3:b0:e5:75:29:7a:
d0:cc:4a:e7:45:10:1c:3b:93:bd:a7:cd:08:0a:58:35:ef:63:
9f:9b:e6:f9:9a:8a:58:44:9d:ed:a8:a4:9f:d8:78:28:08:df:
58:d7:98:56:d7:16:39:77:77:4c:72:85:bd:a6:86:e5:51:f5:
dc:d7:3f:66:b5:cd:2b:b8:f3:bd:81:59:19:e8:36:d8:49:02:
92:3c:a8:88:72:89:75:5d:c8:25:1b:12:07:f7:ab:b0:93:47:
93:64:33:94:99:bd:87:52:c0:36:46:3a:02:b4:76:0a:02:cb:
83:8a:06:64:bf:b4:e0:d4:d5:4a:99:b7:9b:83:76:6b:8d:8b:
22:7a:96:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:59:36 2026 by rpki-client