Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a312972d-ee00-4cd1-acf7-849f7c26ed7b.roa
File: a312972d-ee00-4cd1-acf7-849f7c26ed7b.roa (raw, json)
Hash identifier: sPVZDKHqzBbTutTPOSCFMoQ46oXwPyoFVoJeqApfV50=
Subject key identifier: B3:B4:BA:55:9B:AC:59:51:9F:18:3C:F8:B1:43:38:EC:71:62:94:84
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 51250F216961AD5414713E94967E69649D278EC5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a312972d-ee00-4cd1-acf7-849f7c26ed7b.roa
Signing time: Thu 17 Sep 2026 00:00:05 +0000
ROA not before: Thu 17 Sep 2026 00:00:05 +0000
ROA not after: Wed 16 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 57.80.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:25:0f:21:69:61:ad:54:14:71:3e:94:96:7e:69:64:9d:27:8e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 17 00:00:05 2026 GMT
Not After : Dec 16 23:59:59 2026 GMT
Subject: serialNumber=0bd3945e55d46831eafb4ae4142088319884929b410de3a2a38e828fe51d69c5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c9:03:ab:7a:79:8f:a8:3e:47:10:b9:36:d2:
09:d6:2d:58:38:1a:ed:88:7b:0a:aa:5c:60:41:eb:
41:52:ec:8a:02:b9:bb:ff:27:da:ba:a6:96:c3:04:
e0:8c:61:19:19:28:0d:35:23:ae:0a:fd:9a:2f:8f:
ad:0e:e8:1b:94:39:10:a5:99:ca:3a:39:4a:84:1d:
42:a4:75:d0:49:8e:04:ad:68:78:11:ce:58:08:70:
52:77:16:75:4b:67:da:3f:92:22:45:7a:74:50:50:
64:99:8c:f3:3d:ee:21:f3:d6:8b:ee:83:5d:2b:55:
d2:bb:e3:67:21:06:97:00:01:d8:de:4b:3c:b8:b5:
2d:12:44:22:8f:53:7c:96:87:62:f9:87:2f:6e:62:
1f:22:9d:9e:a3:06:b9:70:06:45:27:dc:55:98:f1:
ae:a1:81:7d:f8:66:1b:7e:39:6d:19:7e:ec:aa:e6:
ad:53:ef:9d:fe:47:fe:16:83:6a:c8:3f:5f:a2:8e:
52:f2:a3:51:c3:d6:af:87:f1:43:be:d7:80:07:51:
85:dd:71:bc:da:9a:57:39:36:12:00:d4:4e:f4:71:
17:e8:10:e8:7e:91:c3:28:77:2a:69:85:fa:39:46:
0f:0f:91:00:c1:b6:c1:73:21:4a:6c:b4:1d:cd:8f:
41:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B4:BA:55:9B:AC:59:51:9F:18:3C:F8:B1:43:38:EC:71:62:94:84
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a312972d-ee00-4cd1-acf7-849f7c26ed7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:da:db:00:23:0d:58:68:e3:a3:ba:25:30:11:3f:c3:e6:26:
a5:bc:62:b1:ec:e4:32:4e:b8:cf:3d:d3:46:af:51:ca:67:34:
d3:58:29:f8:19:aa:80:41:86:0f:dd:e8:0c:f9:57:d8:bb:13:
9f:1e:a4:f9:d5:c3:49:9b:66:f0:1f:60:ec:ee:7a:e5:36:c5:
7a:87:0a:9a:53:45:50:e1:3e:0a:1c:89:09:b7:c7:82:ce:07:
87:13:fd:9c:ed:47:d7:4b:28:9c:7a:8d:41:38:34:aa:00:52:
25:9e:d6:57:8e:3b:77:c4:ad:6c:61:08:6a:63:bb:5d:ea:55:
b3:b1:4b:2f:f8:c9:10:b4:de:4d:22:84:d4:d3:e7:dd:23:c0:
c2:28:10:0c:4a:c7:85:a6:eb:d1:ae:6e:66:71:58:e5:6a:e3:
f2:4b:13:99:5c:3e:b0:2b:7c:c4:39:ad:54:fd:e5:41:13:70:
76:b4:f7:3f:06:5f:85:88:fd:b4:bd:0c:ea:1a:d0:85:bf:6e:
fc:86:8e:e9:b8:c2:a6:ec:bf:80:8d:74:85:80:e7:37:b8:ea:
33:1c:a5:7c:c1:47:00:99:23:d7:a5:a4:04:8f:48:1c:38:2e:
04:73:4d:63:49:be:71:41:d6:2a:c4:42:62:bd:7c:00:d4:66:
46:0a:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:04:50 2026 by rpki-client