Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
File: 80a19bac-b522-4340-8501-74870117a3ce.roa (raw, json)
Hash identifier: ukVF5aLBki2asQi7K23IWYO5ESbC4cE0DnOy5uHNSaU=
Subject key identifier: E7:46:1D:60:A8:4F:77:B4:86:82:7E:89:32:40:A5:A8:48:F0:AC:E5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 48408F4BBE8014A766707B02C760C198A324D16E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
Signing time: Sat 28 Feb 2026 06:30:09 +0000
ROA not before: Sat 28 Feb 2026 06:30:09 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.80.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:40:8f:4b:be:80:14:a7:66:70:7b:02:c7:60:c1:98:a3:24:d1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Feb 28 06:30:09 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=036fa3e5b542e179d5e2e1bf8bed4bf34fa7f37f43d638df90595c62becbb91f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:75:9e:24:a8:70:bc:85:3e:39:30:58:2b:
b5:cf:d2:32:9a:32:b1:a7:00:87:5e:ef:cd:a7:00:
03:2c:4b:68:68:67:b9:77:3b:8e:d7:de:25:d6:af:
47:e5:dd:09:4e:7c:b7:94:86:d7:44:63:80:7b:52:
e0:54:3a:7b:f2:41:4d:aa:1d:f1:54:41:12:f3:f5:
12:e7:51:9b:9b:df:ac:0f:55:c7:5f:1e:32:78:e8:
43:c3:eb:b9:d3:28:aa:31:a3:fb:a8:bd:4b:f1:58:
ca:5d:d9:1f:63:37:7c:c6:f6:8a:38:f6:5b:78:73:
47:31:e3:cb:f9:46:ce:ee:44:ae:04:83:56:9a:dd:
aa:73:73:90:97:22:5b:e1:63:3f:3a:db:8a:f1:a0:
c7:22:6f:17:57:02:bf:05:c7:82:96:94:12:b1:d6:
8b:37:4f:99:bd:bf:0d:06:87:65:cf:9e:85:c7:5e:
23:48:13:4f:38:f4:f5:6d:98:9c:3a:39:29:54:7d:
4d:5b:b7:59:ac:6c:84:92:62:e3:fa:47:4e:5c:02:
b5:2b:29:a7:47:45:05:75:be:c6:5d:45:b4:23:e6:
5f:1b:77:af:b5:1b:67:0f:89:7e:2f:0b:a3:64:ec:
99:03:fc:9d:16:09:a9:37:cf:f1:63:67:d2:d0:8d:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:46:1D:60:A8:4F:77:B4:86:82:7E:89:32:40:A5:A8:48:F0:AC:E5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80a19bac-b522-4340-8501-74870117a3ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:c7:ea:b9:3f:70:58:c8:f0:bf:df:ab:c4:0f:09:83:b3:6e:
c4:a9:a1:03:a0:c8:92:d4:ae:ea:c7:b3:00:45:b7:09:b4:a1:
a7:e9:dc:7e:fa:36:fc:78:49:5a:1a:9b:1b:24:68:3a:94:73:
fa:7d:e7:bd:e8:dc:6b:1d:5c:7d:a6:3b:37:70:4c:0b:e0:92:
57:d3:91:ed:52:eb:16:a1:d7:cb:1a:8f:f4:79:5b:66:d4:30:
f9:4e:b6:9d:8c:b1:00:00:fc:90:95:40:85:90:e7:8c:a5:a9:
ae:6d:23:2d:29:2c:d9:11:af:6d:13:25:4a:c3:4d:84:b5:ea:
c6:a7:74:69:d3:e4:44:06:8b:63:54:91:7e:1f:cd:fd:1c:e7:
14:b3:1e:93:0c:56:ee:31:73:10:d7:a7:77:bb:ad:74:42:6a:
fb:1a:56:57:76:5b:ce:47:4f:5d:e3:d1:64:75:32:e1:5f:49:
01:c8:1b:9c:31:ce:21:97:b3:cc:c7:a2:53:a9:3e:7f:68:9a:
54:2e:a5:57:11:c3:dd:7b:ad:17:f7:d5:ad:6e:9b:d9:14:d4:
f8:07:01:fd:8a:2e:90:a5:be:7f:85:25:9b:67:38:3b:71:e6:
d8:e3:0b:74:ec:e1:5d:d6:20:20:d3:3f:06:21:49:cf:0c:43:
cd:0d:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:53:03 2026 by rpki-client