Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
File: 83d64fad-2f6b-441a-9079-e9e60d149aec.roa (raw, json)
Hash identifier: 0amlWk7rw6wXtw8qPHsUvm7l9H0vZiag5YR0xdKcwvU=
Subject key identifier: 9A:48:FE:DC:16:23:9B:91:78:FB:84:47:70:BA:9A:78:0D:87:45:93
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 648EFF02D8ABF510B950AD317EB8F49C20729FA1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
Signing time: Tue 27 Oct 2026 01:02:14 +0000
ROA not before: Tue 27 Oct 2026 01:02:14 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.17.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:8e:ff:02:d8:ab:f5:10:b9:50:ad:31:7e:b8:f4:9c:20:72:9f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 27 01:02:14 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=cb21b6544175cd77bc63586e78737d0e61f7c5e17e09e457f777707019937ee4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:be:d8:b6:3b:08:f1:36:e7:96:c0:d3:e6:
e0:62:af:e0:ec:c8:d7:2b:89:0f:62:12:31:5f:28:
fd:37:8a:fe:6b:f2:57:b8:90:6e:86:e2:81:66:95:
71:39:5d:53:81:9e:a4:33:4d:8e:d5:14:91:6d:8d:
82:80:e7:0c:c2:d6:7d:cd:75:4b:9f:85:3f:68:01:
47:7d:2c:38:ac:cb:58:7b:00:2c:00:d4:cc:78:a3:
c4:16:a5:37:62:0b:cf:cc:81:a6:d1:58:e6:5b:7c:
1b:fd:1f:d5:62:12:3e:6b:a7:a5:fc:cc:61:af:a1:
28:a8:29:31:c4:ee:69:dd:86:52:2e:f6:9c:7a:11:
f3:b5:ed:bb:d8:6b:4b:73:25:e4:be:41:e0:6e:cb:
7b:a8:ea:07:41:d1:b1:dc:6d:f1:2e:ff:75:88:6c:
40:b7:39:a6:c4:8e:9c:cb:61:28:4e:6d:d3:ee:4c:
19:74:3f:e8:1c:c1:ee:ab:fd:1c:9a:d1:75:b4:7f:
83:1f:4b:07:e4:54:f9:bc:63:a9:76:da:ff:c6:3d:
ce:c8:83:07:57:eb:72:93:e5:58:fb:7b:e5:92:c1:
1a:56:62:13:1f:c5:72:9b:5d:89:d4:71:9c:a4:5b:
20:f8:44:bf:21:30:62:df:68:bc:97:62:78:dc:0f:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:48:FE:DC:16:23:9B:91:78:FB:84:47:70:BA:9A:78:0D:87:45:93
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83d64fad-2f6b-441a-9079-e9e60d149aec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.17.0.0/24
Signature Algorithm: sha256WithRSAEncryption
22:63:02:ec:85:85:68:df:2e:8f:f4:60:f1:29:da:bc:18:48:
6d:88:f6:7b:26:4c:28:7c:b2:05:e7:bd:d9:16:8a:b0:f1:4f:
eb:48:8f:d9:a1:d9:ab:a3:8f:bf:02:24:34:4c:e3:27:b6:a4:
0a:95:72:9f:38:2c:06:6f:5b:ca:97:12:e2:b1:ce:4d:6f:8d:
d1:29:c4:92:bd:f0:63:80:15:f6:55:5c:96:45:f1:20:07:b9:
b6:43:fc:45:15:53:68:be:10:73:49:a6:f8:18:93:22:a4:be:
5d:74:86:ec:7d:6c:d3:35:f3:73:e4:92:91:c3:30:44:74:80:
4b:2e:2a:47:b1:1b:20:d7:a3:24:1d:96:8e:96:07:d3:e1:bf:
bc:5f:71:9d:1b:3d:f8:01:c9:a4:dd:7c:61:bf:35:7b:62:9b:
07:d4:c7:b5:4e:7a:8c:2c:a9:f2:24:9c:a5:f1:60:c6:3c:2d:
dd:b6:58:7d:62:2a:f4:ea:7a:2a:a9:da:b8:c3:b2:7e:0a:cb:
60:61:ba:65:b3:3d:88:2b:4f:54:c9:bc:53:5b:de:e8:30:c6:
f6:fc:6a:f1:5a:47:fa:9b:4e:8f:02:56:1b:1a:d2:a8:d1:9d:
c6:64:93:56:fa:0f:58:11:cb:d2:27:f5:ea:3b:58:d3:7c:05:
cf:f4:8a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:37:28 2026 by rpki-client