Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/85056db0-2868-4547-8893-66ae7ad101d4.roa
File: 85056db0-2868-4547-8893-66ae7ad101d4.roa (raw, json)
Hash identifier: zbAmdl4hWc56zKDjbKkDFld2qrrStEimmySIZx2J8Fc=
Subject key identifier: 43:BE:3D:DC:A4:1C:86:8A:99:F3:83:9A:92:B1:5F:EE:C9:6A:00:C8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6D83C642875A5B3AC2B2112C07ECEDE57B17B8FA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/85056db0-2868-4547-8893-66ae7ad101d4.roa
Signing time: Fri 07 Aug 2026 05:00:09 +0000
ROA not before: Fri 07 Aug 2026 05:00:09 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.90.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:83:c6:42:87:5a:5b:3a:c2:b2:11:2c:07:ec:ed:e5:7b:17:b8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:00:09 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=e51a62d9c2308bc8a0bcb41ed944e5b2aa4a1ab36778cadb06d675de0af531c4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:c4:a7:7d:7d:63:8c:87:9e:36:a1:f2:1a:
44:cb:67:1b:d0:4e:3f:65:8a:b3:ec:fc:24:ea:a6:
35:f3:dc:c8:3d:41:c1:10:ff:21:5c:83:b9:e3:ee:
e4:1a:9d:01:f6:18:04:3f:ee:b9:63:ea:4d:f9:e0:
43:88:cf:47:dd:db:f4:26:4b:cd:57:3a:c9:b9:2a:
90:0a:78:ec:e6:86:95:df:ee:9a:56:47:56:d3:f5:
0d:b4:fa:64:99:8d:ba:6b:82:82:e5:0c:d5:44:26:
ea:82:b8:17:24:81:97:a2:b0:8e:1d:c7:58:5b:db:
26:b6:63:38:a6:cf:00:8a:79:75:0a:46:9c:0b:a5:
99:ae:ba:2d:65:51:67:a6:45:f0:ff:aa:46:d3:71:
d4:c7:48:e4:b7:19:d6:5e:4a:b4:79:da:af:9c:92:
2a:2b:60:5d:1b:81:5a:48:59:61:8d:8f:46:df:15:
b6:de:15:6f:3d:41:51:9d:f2:3c:ab:79:49:e2:f3:
84:90:f4:94:b6:08:c2:f7:68:7f:06:ae:28:bc:8c:
dd:de:b6:87:9b:b7:be:5b:89:e2:f1:53:fc:df:b8:
90:8f:f7:04:08:e3:3e:a2:12:d4:ea:df:66:de:5b:
39:d6:a2:37:bc:d3:b7:83:44:cc:cd:a3:6a:be:b0:
83:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BE:3D:DC:A4:1C:86:8A:99:F3:83:9A:92:B1:5F:EE:C9:6A:00:C8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/85056db0-2868-4547-8893-66ae7ad101d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:97:d6:28:61:97:8b:0e:dd:8f:00:15:75:69:a8:6d:d4:dc:
c3:28:6a:d0:f9:32:13:d1:e5:fd:6c:1c:13:47:ec:82:c1:cb:
a9:09:1a:d0:cb:77:45:fe:3e:98:75:9a:dc:bf:40:2b:eb:b2:
83:24:c2:a1:2f:72:34:6d:d2:d6:28:9e:b8:d6:00:32:e0:00:
78:ba:49:59:16:9a:a7:e8:b4:40:65:7a:cd:a0:8c:89:50:fa:
04:bf:a4:71:ba:13:af:fc:75:6c:79:c7:c7:cf:3a:bf:11:f5:
c7:a7:c1:bf:73:25:e0:3b:5c:e4:46:f3:b7:05:1e:b8:b5:28:
63:34:28:ff:c5:18:cc:2b:20:ac:fa:2f:68:ce:a8:47:9c:0a:
96:4d:de:3d:4f:81:3f:3d:5e:1d:e3:39:aa:43:63:5c:66:bd:
8c:38:66:a1:93:0e:e5:5b:a6:84:0e:83:a1:ae:c6:aa:58:54:
0d:00:f4:c6:c1:35:a2:da:68:59:44:14:ed:ba:be:da:52:6e:
84:21:28:50:24:3a:52:09:fc:b3:8a:6e:fc:10:3e:27:ab:a5:
aa:60:f9:b0:c4:55:11:85:b5:08:28:57:16:aa:68:79:c1:57:
e5:20:29:bb:1f:4c:9b:53:93:e0:1d:84:8b:c3:33:5a:fa:67:
9e:80:79:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:23:14 2026 by rpki-client