Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9adb83e6-fa36-47fa-b5be-856fd7247898.roa
File: 9adb83e6-fa36-47fa-b5be-856fd7247898.roa (raw, json)
Hash identifier: muyJKuxyXXWJCrBgDsfuIe+AvlyfNxlEHx0RBX/LP14=
Subject key identifier: 6A:FC:33:7A:9B:14:34:0B:DA:DD:5D:7A:46:13:04:CE:63:D2:96:1C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 254FC3F9FD569EFD6DD252D5F7AFE229DC4BCBB4
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9adb83e6-fa36-47fa-b5be-856fd7247898.roa
Signing time: Tue 27 Oct 2026 01:02:10 +0000
ROA not before: Tue 27 Oct 2026 01:02:10 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.16.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:4f:c3:f9:fd:56:9e:fd:6d:d2:52:d5:f7:af:e2:29:dc:4b:cb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 27 01:02:10 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=f16daa4a972d050d267a17447bb64d308a30ec705a63a6a0f4c15cd529af1b40, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:2b:22:bc:65:5c:2e:98:46:8c:6f:f8:52:
f1:be:45:0d:b4:49:36:88:04:53:3c:f8:67:93:cf:
6f:17:a6:d9:6c:a9:f6:75:10:9b:26:0a:a5:67:12:
a3:4e:4e:be:af:95:de:3f:4a:5e:b6:60:64:ba:f0:
ae:a3:c5:f2:1c:0a:b0:0f:92:36:95:fb:69:1f:05:
a9:f7:6e:e6:e4:97:ce:ec:60:88:af:a4:a3:49:a0:
e2:79:fd:d8:a1:01:1a:d7:4b:87:80:21:be:d7:95:
60:95:4f:0c:c6:38:66:34:2b:c2:cc:c1:07:81:a8:
08:16:68:2b:c4:39:32:2f:6c:b7:79:85:91:9b:97:
67:7f:49:37:1a:aa:34:86:81:93:46:e1:bc:b7:43:
4d:dc:98:a0:27:43:d5:11:c0:db:6d:50:36:ba:ac:
4a:6d:7a:14:ab:0d:8e:87:50:93:73:5f:c3:f3:b7:
82:be:82:4d:08:a9:43:4f:ad:b5:27:b9:91:28:d0:
84:6c:82:6b:41:3e:69:54:78:b4:ed:1d:f9:e6:a7:
e8:6c:b2:e8:21:79:39:da:9b:8c:66:33:a4:36:4d:
be:f6:fe:92:4d:59:43:6f:e5:6a:78:8a:ed:ac:a8:
76:1c:98:04:49:09:06:f0:26:04:97:2b:da:bb:68:
e7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FC:33:7A:9B:14:34:0B:DA:DD:5D:7A:46:13:04:CE:63:D2:96:1C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9adb83e6-fa36-47fa-b5be-856fd7247898.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.16.104.0/23
Signature Algorithm: sha256WithRSAEncryption
62:70:5e:b1:9e:59:c3:08:b1:b2:41:cc:08:28:68:5b:fe:bc:
7e:11:10:7d:b0:b0:f9:54:c2:61:5f:bc:f3:6d:74:a5:48:1d:
78:22:48:58:7e:23:7c:10:a8:01:43:08:38:9e:f5:d8:03:e0:
7c:96:ac:70:ab:4a:9e:b9:e8:38:dd:b3:9d:fa:49:91:62:c9:
4d:4f:b9:b8:88:d4:11:33:db:75:8d:66:18:35:6d:f2:b9:06:
70:0b:76:0b:e2:af:a8:84:af:a8:34:7a:3d:d1:bf:6f:b0:c5:
e3:31:04:74:81:57:f8:9f:ad:a3:1a:2f:02:4c:48:2e:18:b4:
c6:b9:70:2f:68:44:23:1f:69:9c:ce:eb:48:62:54:fe:8b:a9:
b0:19:bc:04:66:eb:21:49:0e:a1:ef:62:38:e6:9a:9e:3e:2a:
74:f9:41:cc:b3:17:b9:db:13:d7:70:8b:8a:ad:d3:a6:f9:b4:
75:e5:8f:16:95:a0:12:dc:09:7d:40:36:3f:d6:3f:e2:53:ad:
d6:63:28:98:98:13:71:06:16:70:5d:88:f5:0a:25:67:b4:2b:
53:30:96:2a:98:b4:82:7c:2f:d9:5e:db:60:ac:c3:c6:97:0b:
7a:e1:2f:e6:8b:6f:d5:e9:9b:83:8f:66:ef:de:3f:b1:f1:e5:
fd:ba:fe:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:23:07 2026 by rpki-client