Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/583454ef-63b9-4b9d-893e-5f89547b11d4.roa
File: 583454ef-63b9-4b9d-893e-5f89547b11d4.roa (raw, json)
Hash identifier: xEEfVQ5n0idsOtvKsS+8rEkbxl0bRYl47OvEBr/MByw=
Subject key identifier: 23:3F:EF:FD:FD:A2:73:B7:AA:09:30:24:F7:3B:9B:5C:7C:5C:06:70
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 689D8A9971AE3F08F164E5E539D2C6E888E9BC81
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/583454ef-63b9-4b9d-893e-5f89547b11d4.roa
Signing time: Sat 17 Oct 2026 00:10:04 +0000
ROA not before: Sat 17 Oct 2026 00:10:04 +0000
ROA not after: Fri 15 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:9d:8a:99:71:ae:3f:08:f1:64:e5:e5:39:d2:c6:e8:88:e9:bc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 17 00:10:04 2026 GMT
Not After : Jan 15 23:59:59 2027 GMT
Subject: serialNumber=b28f4e7aa458b70f273ff3c4507a688045d0abc27f7ec18fb638ea377eb2fd05, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:2c:14:b9:73:b8:61:a5:24:7f:06:1e:40:
61:8d:74:39:3d:78:13:a9:d9:9f:a9:13:89:78:09:
40:ee:f2:2f:ce:51:71:fe:c4:98:64:3e:16:5b:a4:
dc:7a:c8:92:a4:f8:2f:f2:a8:a0:67:ea:b6:23:dd:
7c:00:e2:34:d0:f7:2f:61:58:59:7d:25:d7:62:94:
34:e1:bb:3c:68:96:22:0a:8c:33:a1:a3:b2:af:a1:
3a:af:11:8c:27:16:f9:85:83:30:12:38:59:07:9a:
e8:8a:0b:02:6a:f3:c7:09:5a:17:3d:f6:19:72:14:
1e:fc:cb:2e:82:5e:b3:94:82:b8:66:f6:dd:b8:0d:
cf:d2:65:d6:65:36:ea:bf:20:ba:b8:86:f9:a1:7f:
86:20:12:10:81:4d:76:82:8d:bf:cc:0c:71:37:d8:
58:fb:60:aa:39:53:5b:55:11:66:bb:45:55:da:2f:
c6:ae:d3:b3:59:fd:95:29:1b:3c:85:ee:32:84:d8:
88:61:62:43:e6:9c:3a:71:cb:68:9e:bf:f1:df:be:
d7:08:c4:81:4f:91:28:0c:5b:41:fb:bb:63:f7:10:
b2:5d:25:bb:1c:cf:69:b0:03:e1:2a:58:29:ad:f6:
9c:ee:26:7c:72:fe:4f:55:9e:a8:20:6e:3b:56:74:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3F:EF:FD:FD:A2:73:B7:AA:09:30:24:F7:3B:9B:5C:7C:5C:06:70
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/583454ef-63b9-4b9d-893e-5f89547b11d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
67:23:d9:ad:cb:b3:ce:09:92:64:13:71:e7:b7:e1:87:95:20:
22:55:40:03:2a:aa:bc:84:f7:2d:b6:1d:71:30:87:3a:90:ff:
4f:7a:aa:45:1e:9f:8b:d6:eb:c8:aa:55:ee:3b:54:fe:5f:d7:
45:8e:b7:24:d2:d7:fa:34:a7:de:90:12:c0:77:7c:94:a7:cb:
55:0d:a4:6f:1c:a4:29:aa:2a:bc:05:85:ca:8e:78:47:bd:c6:
83:16:10:3c:29:ca:5a:4b:b9:b4:74:ed:d7:42:c2:cb:9e:c1:
08:1b:e8:4c:33:30:cd:7f:ea:1b:b7:ae:04:89:bc:0d:8f:b2:
ca:2b:a0:97:8a:aa:af:4b:ca:2a:70:e4:2c:57:33:93:a7:81:
01:27:ff:bd:df:40:bf:69:22:36:6a:8c:b8:0b:17:36:d1:cf:
98:8b:36:d8:05:bf:8f:5d:fa:ea:ea:f5:c1:9e:97:2e:38:97:
90:88:7a:dd:8a:1c:42:62:c5:74:4e:a9:8f:b3:0c:18:67:4e:
9d:4d:66:f3:7c:d9:51:05:e0:bf:aa:b7:19:3a:1d:b9:8a:2d:
15:4b:07:ae:6f:22:fb:59:c1:92:6d:a5:bd:2d:1b:19:b7:0a:
04:8f:37:e5:9a:95:50:90:73:72:fe:51:62:c6:a0:4d:02:b6:
8a:40:e8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:08:32 2026 by rpki-client