Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49c83c56-0135-4229-aac4-d34487bd842d.roa
File: 49c83c56-0135-4229-aac4-d34487bd842d.roa (raw, json)
Hash identifier: LxZI+ThLm2ufCF0EyUbqgMedokhrSJ43dP7xOVCo40w=
Subject key identifier: 8E:12:59:80:5E:F9:89:1E:B7:89:DB:05:56:7F:07:7F:9D:69:75:B6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7B1439B943B5303816E5C0688D84F73E9B640ADF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49c83c56-0135-4229-aac4-d34487bd842d.roa
Signing time: Tue 28 Jul 2026 00:30:12 +0000
ROA not before: Tue 28 Jul 2026 00:30:12 +0000
ROA not after: Mon 26 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.102.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:14:39:b9:43:b5:30:38:16:e5:c0:68:8d:84:f7:3e:9b:64:0a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 28 00:30:12 2026 GMT
Not After : Oct 26 23:59:59 2026 GMT
Subject: serialNumber=82ddcade36a272f28c52ad8178255597108fd903b2eabe8846139ddc2952e297, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:7d:e8:39:37:ae:58:01:63:1a:56:38:8f:
2b:63:a1:e0:8b:88:cc:24:1d:fb:df:f6:5d:95:e5:
fd:89:55:9f:9d:40:50:3a:b4:c0:95:04:aa:ea:0e:
b7:ee:5d:8f:01:22:cc:38:30:65:e1:1f:b0:2f:ba:
60:f1:74:d3:43:22:26:d4:f4:d8:8d:df:48:f3:c7:
50:42:b9:14:d8:40:89:0f:c1:05:6b:99:01:33:bd:
35:fd:cd:3f:82:05:33:c7:41:7b:52:a9:2e:3b:f1:
dd:e7:3d:f6:8b:4e:46:55:88:6b:e4:93:d8:3b:27:
24:e9:ea:b5:c6:42:31:29:ee:e9:15:4d:24:2d:f6:
69:38:01:c1:e4:71:26:c8:8f:47:86:9a:54:31:98:
e9:4b:1c:a5:45:ee:a9:77:70:4b:46:35:d8:95:9e:
6c:9c:37:a8:3f:37:7e:da:5b:0f:34:58:78:f1:f9:
48:29:41:45:c4:d8:f2:f8:79:a3:16:5f:ab:b9:a4:
6c:6d:94:98:73:20:11:42:ed:2c:ef:24:f3:c3:a2:
5b:8b:2b:ac:74:b3:c7:e1:09:8d:b4:a4:f6:c3:a0:
ff:ad:f5:a4:5c:04:5b:4e:ea:24:c1:df:bf:b7:b3:
27:44:99:2a:49:60:66:b5:86:e6:69:93:97:d7:72:
c4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:12:59:80:5E:F9:89:1E:B7:89:DB:05:56:7F:07:7F:9D:69:75:B6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/49c83c56-0135-4229-aac4-d34487bd842d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.102.128.0/17
Signature Algorithm: sha256WithRSAEncryption
58:73:ee:d0:82:88:d5:e1:e0:a3:7e:23:37:33:b2:9c:1d:ae:
66:1e:4b:fd:5c:58:db:15:dd:b7:52:40:0a:63:e6:d5:60:67:
c6:92:0e:e2:14:c0:ad:72:be:b4:81:6c:b4:b6:95:5f:08:95:
ae:07:c3:28:31:3f:e6:4d:83:3b:ed:30:c2:68:e0:f9:09:00:
e2:56:48:73:87:47:3e:f9:33:d9:4e:f4:99:de:22:62:01:fe:
db:cb:ec:9e:59:83:80:47:dc:83:83:34:89:e0:1c:16:84:c4:
4b:9e:e6:a9:63:17:ca:87:36:f4:f8:94:d0:68:dd:67:39:4f:
41:f0:0d:1e:5b:d0:21:7a:61:5a:4b:85:e3:d3:0f:38:68:d1:
ae:aa:32:e6:5c:25:73:ef:44:83:8d:bf:6f:51:99:38:c1:a6:
69:d5:17:47:9b:3f:c2:92:81:cb:a9:9d:e3:38:15:40:d3:ff:
c2:9d:c4:4d:76:32:61:a7:2b:6c:46:ca:2e:48:94:24:cb:62:
e0:79:7e:4e:a6:12:8b:b5:3c:de:61:e2:dd:3f:1b:97:52:25:
0d:53:8f:20:13:31:fc:80:09:76:c4:e2:b9:72:ca:25:cc:74:
4a:ac:0e:aa:6a:e8:55:e1:32:46:9c:bc:97:db:7e:ef:6c:aa:
c6:03:f0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:01:19 2026 by rpki-client