Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f757251-175b-4b37-afbc-329713068144.roa
File: 4f757251-175b-4b37-afbc-329713068144.roa (raw, json)
Hash identifier: 8dD1fR25chPlfzqJR391kZcGb3G80PkXA7Sq+VP2WUQ=
Subject key identifier: 6C:F6:46:47:ED:BF:0F:6E:45:E5:8A:5E:FD:8F:CE:11:2C:60:F0:EF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 75E6682A8E4B27A886D89108526DB70580241FF7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f757251-175b-4b37-afbc-329713068144.roa
Signing time: Wed 20 May 2026 21:47:15 +0000
ROA not before: Wed 20 May 2026 21:47:15 +0000
ROA not after: Tue 18 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.200.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e6:68:2a:8e:4b:27:a8:86:d8:91:08:52:6d:b7:05:80:24:1f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 20 21:47:15 2026 GMT
Not After : Aug 18 23:59:59 2026 GMT
Subject: serialNumber=facdcc7472b6d5452a1a718e5c01deb290f213bb068f969efd2f042350691e66, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:73:76:9d:59:02:d0:ba:00:54:b0:ec:a6:
7c:f7:ee:f0:51:8d:e1:26:0d:a4:3f:f9:6f:8c:da:
6b:b1:c8:d7:50:03:c1:9c:90:1f:22:bf:ac:17:02:
66:0e:16:5d:3f:f4:18:30:70:9f:d0:67:a9:7e:26:
17:c4:29:60:e9:1e:4a:8c:77:78:3d:ac:e4:57:49:
b9:4f:fd:c6:c6:17:e8:fe:20:55:37:3e:4f:3a:db:
a8:3b:be:48:54:27:e2:ee:71:82:31:b7:f9:11:45:
81:6f:c4:25:fe:49:34:92:db:9a:4d:0f:e6:7e:55:
78:3f:22:62:46:81:ac:81:03:cb:ae:07:5f:e8:0a:
6f:b1:84:39:b9:57:8c:12:db:2c:d1:39:32:72:0d:
a5:a2:7f:13:8f:6f:b9:28:88:1f:c6:9d:b6:e8:f5:
65:92:a2:50:db:62:22:18:75:cd:5b:6b:f3:c4:e0:
24:ad:13:52:84:14:aa:6d:80:b1:10:f9:5b:b6:f2:
36:58:56:74:64:ff:7a:0a:26:84:40:fc:62:03:05:
ac:4f:17:26:16:0b:ab:2c:80:78:05:44:9f:27:d5:
44:e6:04:74:cd:8a:1d:63:da:ac:cc:8b:ba:ef:05:
9d:8a:51:be:08:11:4e:cc:3e:b4:e1:7a:29:57:8d:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F6:46:47:ED:BF:0F:6E:45:E5:8A:5E:FD:8F:CE:11:2C:60:F0:EF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4f757251-175b-4b37-afbc-329713068144.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.200.0.0/15
Signature Algorithm: sha256WithRSAEncryption
ae:bb:07:82:61:3c:e9:3b:2c:77:f2:74:25:a6:6d:6a:fe:a7:
12:5a:25:51:fd:f1:9b:62:55:6c:d2:98:24:06:30:81:ce:23:
ac:2f:2f:53:0e:85:76:85:ad:c0:04:18:f0:3a:22:90:9f:64:
bb:be:b4:04:06:d9:34:13:77:95:6f:9d:8d:0a:bc:34:ff:cd:
92:b1:fa:ba:04:ae:dd:90:ca:2d:37:44:73:5d:a8:eb:33:cc:
85:28:3c:5d:3d:b0:0e:e4:32:37:05:65:9e:e0:ee:3e:ca:a4:
23:00:ce:a7:b6:97:d8:c4:68:02:f3:c7:47:b2:6d:2d:1e:1d:
a6:c9:c7:fc:76:a0:b1:ba:8c:94:3e:b2:60:3c:2c:91:c0:81:
c0:06:f4:a2:ca:51:c2:9c:25:6b:ee:7a:54:19:fb:fd:f4:47:
4d:cb:f9:f1:b1:e6:4c:4e:67:ff:0d:a3:58:46:71:2b:70:cb:
98:1f:c5:06:b5:89:a8:cf:53:fd:fe:a8:ee:b6:40:98:e6:22:
32:3c:05:55:f9:e6:cd:a0:b5:7c:f9:3e:54:1e:85:ce:e6:cd:
fb:41:cd:1d:aa:51:84:3c:35:a9:23:29:37:95:d3:3c:f8:b1:
da:a2:e0:a7:72:ed:3b:b5:9f:c6:fc:d0:bb:b7:5e:75:d7:58:
b0:d0:c1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:58:14 2026 by rpki-client