Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa
File: 4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa (raw, json)
Hash identifier: 8wPToNO39mhVz2GGW3o5zxTYCsUMBoKjdbgmcf9nsRg=
Subject key identifier: 17:29:B6:C4:BE:F3:15:4F:1F:F9:A9:E3:C6:53:42:F1:8D:53:64:B2
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7FF2372B5E2487ACCF3DC06126230449112F9AE5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa
Signing time: Tue 21 Oct 2025 15:00:04 +0000
ROA not before: Tue 21 Oct 2025 15:00:04 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.164.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:f2:37:2b:5e:24:87:ac:cf:3d:c0:61:26:23:04:49:11:2f:9a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 21 15:00:04 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=e5db9ea8853d74267325d626054829bd19bb92b03d533a810ba78514510a01eb, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:1d:bc:b1:57:da:76:d9:8a:7f:6d:f6:66:
1b:69:2a:f9:75:37:e7:6b:43:61:95:9c:6d:e7:ad:
5f:02:f9:b5:b1:d7:6b:cc:a9:7c:82:2c:b3:b9:a5:
f7:5b:24:ef:44:f0:9b:55:e0:12:08:4b:4e:70:1b:
0e:10:56:0e:c8:f2:e8:7d:6a:69:e3:7d:59:b3:00:
04:b5:56:e3:11:73:18:f7:62:31:10:2e:4b:5c:d1:
c5:64:f4:48:46:0a:89:2b:72:af:c6:21:38:ce:e3:
0f:62:4b:71:77:86:ba:c1:e1:0c:d3:de:81:b1:13:
ca:85:9d:50:51:89:fc:6b:41:6f:44:9b:73:f8:8b:
07:ba:ee:71:ac:21:bb:ae:1e:bd:6f:05:2f:e0:5b:
02:1c:b6:fd:ef:f0:7e:a8:de:a4:ac:dc:bb:ad:d3:
58:7d:1e:c5:93:c8:af:1d:94:a9:2f:d3:1c:5b:9d:
1c:11:ef:af:20:e0:52:1a:da:7a:97:76:d3:a7:a8:
00:e2:45:d8:50:f1:c7:cc:b1:ff:67:7b:ba:55:c3:
09:d5:fe:74:21:08:28:f7:fc:e7:c1:43:95:8c:45:
90:1e:ea:e4:fd:4c:66:d5:ea:e1:11:b5:18:4f:84:
57:09:57:f2:c9:85:a4:4d:8f:cd:76:99:c3:c6:14:
00:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:29:B6:C4:BE:F3:15:4F:1F:F9:A9:E3:C6:53:42:F1:8D:53:64:B2
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.164.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c3:e6:4e:0f:66:6d:63:09:b5:b7:99:6a:0f:7c:e4:e7:27:44:
f2:62:43:4b:c4:56:ba:1a:48:cb:c2:85:0d:85:18:31:7e:c4:
76:58:79:c0:ec:dd:74:80:63:27:d4:e6:10:74:66:6f:07:3a:
30:d1:88:ba:c5:db:18:4d:aa:5c:78:fc:7e:05:64:06:f8:bf:
c8:8a:16:84:56:1a:26:dc:64:83:64:76:77:fb:14:54:45:14:
8b:80:75:4f:8f:f3:44:ca:ba:b8:2b:44:64:ed:c2:fd:3b:14:
cd:c8:51:b6:d2:2a:4f:c4:86:94:45:9e:30:68:df:af:e6:ec:
bc:bb:7f:de:97:5d:92:23:33:e0:6a:76:31:7d:53:36:50:a0:
99:66:79:9c:72:c2:bc:84:05:98:15:a2:7c:d6:4b:af:54:a7:
85:b5:e0:16:06:c3:4a:43:a2:fb:34:f9:10:90:b3:1a:fd:93:
d5:cd:a9:3c:69:7c:d8:c0:a3:b7:4d:f1:5b:e4:df:6a:78:b5:
c8:ab:12:f2:d6:13:99:f4:e3:ef:1a:d5:2c:9d:99:0d:62:35:
20:b7:cd:17:c1:9b:53:d7:86:d1:c5:7d:00:34:82:fc:2c:20:
eb:72:17:18:78:0f:5b:1f:da:7d:93:4e:7f:38:95:7e:cc:68:
a0:ff:0d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:35:09 2025 by rpki-client