Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa
File: 4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa (raw, json)
Hash identifier: n+cR4/Mb4ENr9W7xE9M66EY+YofvaYVO3xPoEHcBWBk=
Subject key identifier: 7C:B2:6E:89:11:4C:FB:30:27:C6:B5:8C:A0:57:4B:8C:A0:88:E5:15
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 53929FE3532BB394010E31C3E98912E9D206FDC7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa
Signing time: Mon 26 Oct 2026 05:50:53 +0000
ROA not before: Mon 26 Oct 2026 05:50:53 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 51.164.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:92:9f:e3:53:2b:b3:94:01:0e:31:c3:e9:89:12:e9:d2:06:fd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:53 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=634e8bb1095d22e069c0b76db7dbfc06d8567e4e600774497482d883471b0c29, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:81:14:0a:a6:ec:3a:05:d7:65:21:a2:f8:
e8:d2:a0:ca:22:22:4d:d6:05:41:95:49:be:c1:08:
4a:d0:89:1e:a1:0f:e3:83:9b:7b:37:bd:d1:78:59:
15:3f:00:07:03:4d:9a:a3:31:98:d1:ac:17:7c:72:
b6:c9:15:bf:f5:01:db:91:4c:d7:ac:0d:73:22:ed:
57:62:ec:2c:e9:43:04:25:6d:72:76:c3:9e:e3:45:
ce:93:78:57:cd:bf:83:b8:99:c0:72:91:2b:66:fd:
95:eb:2d:1c:83:b4:b5:34:7f:a0:3f:16:e6:73:a6:
06:28:c2:8f:2b:3e:0f:44:3e:c1:71:78:bb:7a:ad:
49:3e:3e:e7:4c:94:ff:ce:0c:5e:9d:62:7b:80:94:
93:00:2e:ef:58:c3:73:e3:30:12:f0:dd:e9:4c:b9:
79:37:62:a4:ff:71:69:fa:d5:7e:4b:3d:15:77:8d:
e0:a4:cd:23:c7:06:b8:fe:02:be:97:6b:cb:e6:8d:
94:88:91:7f:f1:94:53:8e:0d:90:c9:97:05:99:a2:
03:cb:51:34:ab:7d:bc:29:b2:15:1d:df:3a:88:ac:
a6:ea:59:cc:2e:82:9a:7c:0b:88:ef:54:76:c3:5c:
b0:11:39:01:0b:fb:85:eb:2a:50:ef:57:63:b0:71:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B2:6E:89:11:4C:FB:30:27:C6:B5:8C:A0:57:4B:8C:A0:88:E5:15
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.164.0.0/15
Signature Algorithm: sha256WithRSAEncryption
6a:58:96:f4:2a:f5:f8:4e:e5:63:bb:9e:1f:2a:9a:9a:0c:80:
ea:f6:cd:7b:1b:0d:46:fc:27:e7:3b:b7:7e:19:77:13:25:2e:
5b:10:90:d2:41:93:a8:e0:b2:20:ef:52:15:de:e4:7c:bb:c1:
62:5f:7b:c9:12:4e:3f:2e:01:41:6d:19:4a:9a:32:30:9d:dd:
b3:ae:63:7b:11:42:f0:4f:60:c3:3c:ec:a9:c2:84:a5:fd:37:
99:ff:97:7d:c3:7a:d3:e8:35:2d:18:20:89:68:5b:1b:1b:5a:
b4:08:c4:30:e2:80:8d:87:b7:0b:33:79:63:9f:4e:b5:77:15:
e1:d0:e9:d6:85:af:64:21:31:07:22:96:6b:91:af:ba:7f:cc:
f2:64:3c:e8:ab:8a:95:80:ff:c9:97:4f:c6:83:80:93:f3:88:
9d:a3:37:ef:43:5b:6a:d1:53:3e:04:58:b9:1e:97:2b:13:99:
35:a9:96:31:59:52:2d:00:d1:cb:f7:21:46:d2:17:ff:7a:e2:
17:d7:72:3a:1f:4f:7b:29:d8:e6:71:ab:1e:04:c8:4d:c8:cd:
35:cd:f7:bc:e4:a2:fc:14:6a:55:ba:b1:55:d8:65:7d:33:fe:
42:02:7d:ef:9b:7a:11:dc:96:1e:ba:0c:75:e1:69:59:78:10:
50:d2:e4:02
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUU5Kf41Mrs5QBDjHD6YkS6dIG/ccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTUwNTNaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDYzNGU4YmIxMDk1ZDIyZTA2OWMwYjc2ZGI3ZGJmYzA2ZDg1NjdlNGU2MDA3
NzQ0OTc0ODJkODgzNDcxYjBjMjkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL8GgRQKpuw6BddlIaL46NKgyiIiTdYFQZVJvsEIStCJHqEP44Obeze90XhZ
FT8ABwNNmqMxmNGsF3xytskVv/UB25FM16wNcyLtV2LsLOlDBCVtcnbDnuNFzpN4
V82/g7iZwHKRK2b9lestHIO0tTR/oD8W5nOmBijCjys+D0Q+wXF4u3qtST4+50yU
/84MXp1ie4CUkwAu71jDc+MwEvDd6Uy5eTdipP9xafrVfks9FXeN4KTNI8cGuP4C
vpdry+aNlIiRf/GUU44NkMmXBZmiA8tRNKt9vCmyFR3fOoispupZzC6CmnwLiO9U
dsNcsBE5AQv7hesqUO9XY7BxrucCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBR8sm6J
EUz7MCfGtYygV0uMoIjlFTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NGVhYWY5YWEtYmJjNC00MmE1LTllYWQtNzE2NGU3OTUzYWVlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATOkMA0G
CSqGSIb3DQEBCwUAA4IBAQBqWJb0KvX4TuVju54fKpqaDIDq9s17Gw1G/CfnO7d+
GXcTJS5bEJDSQZOo4LIg71IV3uR8u8FiX3vJEk4/LgFBbRlKmjIwnd2zrmN7EULw
T2DDPOypwoSl/TeZ/5d9w3rT6DUtGCCJaFsbG1q0CMQw4oCNh7cLM3ljn061dxXh
0OnWha9kITEHIpZrka+6f8zyZDzoq4qVgP/Jl0/Gg4CT84idozfvQ1tq0VM+BFi5
HpcrE5k1qZYxWVItANHL9yFG0hf/euIX13I6H097KdjmcaseBMhNyM01zfe85KL8
FGpVurFV2GV9M/5CAn3vm3oR3JYeugx14WlZeBBQ0uQC
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:59:26 2026 by rpki-client