Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83c9f9c4-39a2-4f5f-9188-1a9e0dccf209.roa
File: 83c9f9c4-39a2-4f5f-9188-1a9e0dccf209.roa (raw, json)
Hash identifier: zGL417hkq4wPotT6mj4wglF9u4iSuOpNK3o18yKwf/Q=
Subject key identifier: BE:8E:B4:96:94:63:FE:D6:30:8F:14:0C:5C:07:1B:EA:5C:D5:B8:BE
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6C2EF743B5C8DF325207E27873792677AD22416B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83c9f9c4-39a2-4f5f-9188-1a9e0dccf209.roa
Signing time: Sat 28 Feb 2026 06:30:44 +0000
ROA not before: Sat 28 Feb 2026 06:30:44 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.150.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:2e:f7:43:b5:c8:df:32:52:07:e2:78:73:79:26:77:ad:22:41:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Feb 28 06:30:44 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=5a1c40b9770fe4bbd41242ed1d7453150a33aa718aa2ff904726c766c7844716, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:11:a4:b7:d3:e9:6d:33:78:03:f1:ba:a9:
69:32:00:bb:e0:b4:8e:12:68:1e:14:e2:5a:b7:ba:
51:c8:df:60:a0:e3:c9:f3:35:7d:8e:84:ba:77:10:
97:c5:3d:da:74:2a:b5:9f:c7:9c:45:03:6c:b3:ed:
c6:70:c9:cd:59:73:a9:f4:af:f5:5b:d1:86:f5:ca:
9d:f3:4c:b7:61:3b:9e:b6:4c:80:9e:a5:c5:0e:36:
e3:a7:50:b7:ef:05:98:13:fb:ad:9c:0c:7f:a8:4c:
95:af:eb:a3:82:62:f3:f6:a1:72:8a:79:ff:da:df:
4e:d2:a5:80:fb:87:0a:77:e7:21:70:db:68:65:ea:
c4:ca:c9:dc:5e:ef:93:49:3a:d6:99:da:b2:5b:6a:
41:18:70:e5:6c:09:3b:ee:9f:b1:4a:c5:49:6c:0e:
26:7e:e7:ce:d7:96:e2:8f:fd:b5:10:d8:25:c9:84:
50:f7:a4:b8:3f:28:61:bd:34:28:4a:85:9a:79:c2:
39:84:09:7c:9c:38:92:7b:1e:87:be:05:b3:6c:4b:
33:13:eb:e6:79:f4:9a:1d:3d:35:18:df:db:8f:f9:
71:33:56:22:05:88:23:16:d0:2b:3b:58:f6:3b:0a:
66:9b:c3:b7:6b:98:f8:01:48:15:3c:ff:c5:04:49:
17:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8E:B4:96:94:63:FE:D6:30:8F:14:0C:5C:07:1B:EA:5C:D5:B8:BE
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83c9f9c4-39a2-4f5f-9188-1a9e0dccf209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.150.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:4e:33:b1:cd:8b:0f:99:d6:ed:0d:83:94:6d:4c:42:80:f4:
a4:bb:5c:d0:bb:9a:b6:25:fa:1c:02:25:38:7c:c9:c8:b9:47:
5c:5a:f7:5b:83:13:dd:69:b5:d0:cc:28:7b:4f:cb:6d:e3:81:
d5:df:9e:6d:34:26:2f:73:1d:1b:a7:df:40:0d:7c:4a:ff:5f:
24:38:aa:2c:3f:c2:fc:d6:02:f4:91:5b:b2:30:9b:dc:a6:40:
8e:33:8a:a6:7b:cc:34:5d:cf:db:4a:37:72:d6:3b:b3:a3:e7:
29:cd:ce:0a:c1:1b:d2:87:17:70:1e:6e:fd:3b:71:4d:95:00:
4a:63:52:db:4d:d6:1d:65:00:f7:75:4b:63:f5:c0:61:46:34:
26:66:bb:fa:fe:87:6e:7b:10:56:47:ab:56:da:d7:0a:48:cf:
ba:56:0f:20:da:ab:a7:fd:94:9b:11:ef:f1:84:d5:c4:6a:4b:
75:96:63:1e:7e:66:b9:33:a8:ec:61:53:68:b8:d8:04:55:1b:
17:b7:44:45:a7:45:fb:ad:4e:2c:11:2b:1f:df:6a:fb:c8:6d:
01:c2:b5:8c:25:0c:8a:eb:ea:14:51:c7:4d:23:91:5e:54:84:
90:8a:41:f2:b8:4b:19:62:97:26:22:ae:24:6e:37:ad:a4:d2:
7d:ba:ce:13
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUbC73Q7XI3zJSB+J4c3kmd60iQWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjAyMjgwNjMwNDRaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDVhMWM0MGI5NzcwZmU0YmJkNDEyNDJlZDFkNzQ1MzE1MGEzM2FhNzE4YWEy
ZmY5MDQ3MjZjNzY2Yzc4NDQ3MTYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMmuEaS30+ltM3gD8bqpaTIAu+C0jhJoHhTiWre6UcjfYKDjyfM1fY6EuncQ
l8U92nQqtZ/HnEUDbLPtxnDJzVlzqfSv9VvRhvXKnfNMt2E7nrZMgJ6lxQ4246dQ
t+8FmBP7rZwMf6hMla/ro4Ji8/ahcop5/9rfTtKlgPuHCnfnIXDbaGXqxMrJ3F7v
k0k61pnasltqQRhw5WwJO+6fsUrFSWwOJn7nzteW4o/9tRDYJcmEUPekuD8oYb00
KEqFmnnCOYQJfJw4knseh74Fs2xLMxPr5nn0mh09NRjf24/5cTNWIgWIIxbQKztY
9jsKZpvDt2uY+AFIFTz/xQRJF6UCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBS+jrSW
lGP+1jCPFAxcBxvqXNW4vjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ODNjOWY5YzQtMzlhMi00ZjVmLTkxODgtMWE5ZTBkY2NmMjA5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADOWMA0G
CSqGSIb3DQEBCwUAA4IBAQCMTjOxzYsPmdbtDYOUbUxCgPSku1zQu5q2JfocAiU4
fMnIuUdcWvdbgxPdabXQzCh7T8tt44HV355tNCYvcx0bp99ADXxK/18kOKosP8L8
1gL0kVuyMJvcpkCOM4qme8w0Xc/bSjdy1juzo+cpzc4KwRvShxdwHm79O3FNlQBK
Y1LbTdYdZQD3dUtj9cBhRjQmZrv6/oduexBWR6tW2tcKSM+6Vg8g2qun/ZSbEe/x
hNXEakt1lmMefma5M6jsYVNouNgEVRsXt0RFp0X7rU4sESsf32r7yG0BwrWMJQyK
6+oUUcdNI5FeVISQikHyuEsZYpcmIq4kbjetpNJ9us4T
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:27:24 2026 by rpki-client