Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/63e023f1-83fd-412f-8365-33afe1ac80af.roa
File: 63e023f1-83fd-412f-8365-33afe1ac80af.roa (raw, json)
Hash identifier: a5W2Irzk7lNoNJOIqjlTUm32/8CjBuBs6CofeM8MPD0=
Subject key identifier: 1C:9D:D3:9E:D5:E3:1C:58:34:0A:C8:6B:8C:21:F4:04:86:25:C8:16
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0A09302019274EB94D04E75203C7EA6E81BAAF43
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/63e023f1-83fd-412f-8365-33afe1ac80af.roa
Signing time: Fri 07 Aug 2026 05:50:33 +0000
ROA not before: Fri 07 Aug 2026 05:50:33 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.160.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:09:30:20:19:27:4e:b9:4d:04:e7:52:03:c7:ea:6e:81:ba:af:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:33 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=e452b16084c9389c3e4756645af904ffea592bb4cf2190dcf6888e9818a13f6f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:27:10:fa:a2:ae:05:62:b2:84:fc:a2:5a:
e1:50:44:2b:4c:8f:b5:c6:23:84:aa:43:ed:a2:23:
65:f5:c2:4f:ae:fe:db:bc:c5:67:d6:fb:be:f7:b4:
71:78:68:a3:e0:93:cf:e3:ee:a8:2e:7f:63:1a:a3:
be:84:82:7d:9b:a1:1d:39:9d:9b:86:86:bc:74:59:
b6:6e:54:6a:93:99:d5:7c:f3:86:e0:ce:8e:fb:a5:
fa:d3:a7:c6:8d:71:af:91:d9:b9:9b:fd:e2:21:70:
51:bb:00:3a:69:37:a1:5c:05:f6:b8:5c:a5:e2:54:
05:db:ab:d5:b7:80:1f:99:40:73:86:0b:28:54:60:
fd:7c:af:e6:f7:30:61:90:a7:5d:8a:10:c3:3e:e9:
7b:a8:8f:ea:55:d1:5e:5b:2f:f9:c2:04:a4:74:ec:
a9:f7:d3:e4:ef:84:e9:46:91:1b:4e:b1:19:ce:e0:
7f:89:b3:a8:78:24:dd:dc:3e:8c:af:ad:37:56:b6:
a3:e8:d0:a5:5e:c8:fa:cb:73:1b:0a:78:4b:ba:e7:
28:ca:a7:b9:78:ae:77:a3:d1:70:fc:dc:21:97:93:
28:e0:d1:2c:23:e1:88:e4:01:bc:50:82:bf:66:f2:
00:78:88:9b:8b:83:85:e4:fe:9a:dd:a9:e9:0b:76:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9D:D3:9E:D5:E3:1C:58:34:0A:C8:6B:8C:21:F4:04:86:25:C8:16
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/63e023f1-83fd-412f-8365-33afe1ac80af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.160.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:05:42:46:87:8f:83:ae:64:90:e0:82:72:6d:f1:7e:73:84:
00:55:86:58:30:0e:78:de:5b:b4:cc:a4:91:e7:7a:94:0b:28:
ce:c5:bd:ba:e8:3c:d4:b4:f6:e8:f9:14:66:59:dc:a4:a1:71:
4f:23:4f:e6:ec:2d:17:99:27:00:77:85:e2:6a:ca:75:58:2a:
0b:2f:17:0d:15:08:ad:27:f9:6d:24:76:b6:db:c8:fb:fd:8b:
f1:0e:40:19:2a:71:85:59:69:7d:22:7b:81:cc:fb:0d:c8:bb:
01:ad:01:cc:0e:2e:1c:e6:5d:f5:a1:05:93:33:57:b7:19:35:
00:af:af:73:2b:a0:59:95:3a:9e:3f:ec:1f:10:98:fd:57:0a:
a8:4a:c3:e6:d4:8d:4d:51:6d:7b:e1:77:9e:d9:4d:4b:47:4a:
f9:1f:47:e0:11:92:57:be:7b:4d:49:70:3e:41:5b:74:45:21:
65:c3:48:f9:5c:ac:8a:ac:39:89:80:7e:bf:d0:58:bd:60:91:
c7:1b:fd:b1:8c:8d:4c:41:42:68:9d:89:c3:47:b5:d6:33:fe:
f4:6d:4d:8e:ef:4d:30:0d:2a:88:15:97:ea:b2:2e:68:8d:2c:
75:4f:f1:60:d0:1a:49:07:51:f0:fc:db:0c:8c:69:de:cb:a7:
49:ed:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:07:54 2026 by rpki-client