Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/85056db0-2868-4547-8893-66ae7ad101d4.roa
File: 85056db0-2868-4547-8893-66ae7ad101d4.roa (raw, json)
Hash identifier: Zy1rh2lKNBdVN8DjKPR4e2T7OJ0a70cTvuyNnsEGaDE=
Subject key identifier: 5B:A6:EE:AB:41:32:0A:C6:2B:26:33:02:DB:41:6E:B7:FB:B4:73:27
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 606364AD999511A2492C04CEE9580B2238CC610A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/85056db0-2868-4547-8893-66ae7ad101d4.roa
Signing time: Mon 26 Oct 2026 05:40:19 +0000
ROA not before: Mon 26 Oct 2026 05:40:19 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.90.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:63:64:ad:99:95:11:a2:49:2c:04:ce:e9:58:0b:22:38:cc:61:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:19 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=be3c05dd19e5b60aa7e2f61bd71e9852c8392926565b29827b6923d51db1ee41, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bd:35:41:73:a4:8b:38:95:97:d3:e8:04:58:
65:b9:2c:7b:8b:46:74:4e:50:8b:5b:58:2d:90:42:
41:2b:a1:43:92:75:4b:68:63:10:84:55:10:ba:2d:
38:93:4c:7f:f0:e3:e1:49:f4:8d:70:7c:60:89:9b:
14:b6:19:ae:d1:51:8e:44:c6:7e:8e:7b:e8:9f:d2:
a2:9d:39:22:24:fc:62:2c:13:76:e4:e5:e0:a4:ac:
f8:25:fe:b6:7b:51:ca:2f:68:bb:3b:33:96:d7:e1:
d5:00:86:36:1d:49:56:b4:8b:79:d1:32:11:3e:05:
15:87:08:67:e1:dd:db:f7:fc:7c:15:85:e5:ed:78:
a9:3c:18:38:a6:d0:55:69:3f:82:c5:ce:4f:20:4c:
f0:44:d6:b1:e5:3d:ed:eb:09:69:53:63:21:9b:f8:
72:83:ca:ce:04:19:7b:9c:b1:c9:c9:65:8a:8c:fb:
fe:d5:47:03:74:9d:23:b4:16:c0:49:f7:f4:91:c7:
0b:ca:3b:cc:fa:b4:4d:06:d4:e2:33:06:f4:5b:54:
34:1e:f5:ed:e8:ec:f6:80:61:0e:bd:d1:b7:d5:b8:
84:aa:1b:cc:e2:c4:9d:b1:46:28:8b:77:d0:03:82:
cd:43:50:7d:db:45:92:3a:1a:aa:02:5d:1f:e1:bd:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A6:EE:AB:41:32:0A:C6:2B:26:33:02:DB:41:6E:B7:FB:B4:73:27
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/85056db0-2868-4547-8893-66ae7ad101d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:19:f7:24:40:a4:1a:17:68:5e:22:81:9a:53:83:e9:da:44:
9d:91:88:c6:cd:54:98:03:8e:cb:e9:b6:76:6f:68:17:07:3f:
8f:71:3d:e8:89:7a:59:34:90:f0:78:59:ce:36:27:5e:29:35:
08:7e:a3:9a:d5:ca:06:40:57:48:e9:5d:9b:41:1b:f4:9b:f8:
43:e2:b9:c6:c9:40:ef:44:f5:c3:56:aa:b7:ef:43:aa:18:6c:
bb:2b:64:99:6c:d0:1d:2c:a1:6d:94:72:a0:90:30:c5:95:3b:
e5:60:43:eb:68:58:8e:86:f9:ee:09:d5:c6:4d:bf:88:1f:1c:
70:9b:8d:33:41:31:1b:7d:9a:1e:c9:ef:e1:3a:3c:17:64:e1:
8d:22:fe:3a:0e:61:ad:ef:5d:26:a6:52:92:1c:c4:da:d1:8b:
b8:5a:77:7d:47:e0:9a:e3:01:3d:80:ce:80:63:db:0a:0a:e5:
51:dd:16:bc:38:30:f4:df:2a:81:95:0e:37:2b:84:56:42:a3:
13:4d:a9:b9:4a:fb:35:09:25:21:7f:e1:6a:6f:fe:00:cc:7a:
7d:7d:14:50:2b:88:1f:e2:bf:63:8d:31:8d:81:af:52:24:34:
56:fc:92:6e:55:81:f5:a6:3c:c1:23:52:71:3e:59:3f:3c:a7:
f8:69:2e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:01:02 2026 by rpki-client