Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cac574-b448-47b5-a751-22dfd7293698.roa
File: b2cac574-b448-47b5-a751-22dfd7293698.roa (raw, json)
Hash identifier: Me3NchUM5kUpQpsfnuXLrkKtdGosBomDTaoGVP3CIzs=
Subject key identifier: 28:69:E4:48:41:35:1F:AD:17:39:53:33:6F:89:2B:FB:D1:0C:A6:6F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 636D75D05AD28713EDE639011A2211EFCC12E6A6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cac574-b448-47b5-a751-22dfd7293698.roa
Signing time: Fri 16 Oct 2026 00:08:26 +0000
ROA not before: Fri 16 Oct 2026 00:08:26 +0000
ROA not after: Thu 14 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 51.102.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:6d:75:d0:5a:d2:87:13:ed:e6:39:01:1a:22:11:ef:cc:12:e6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 16 00:08:26 2026 GMT
Not After : Jan 14 23:59:59 2027 GMT
Subject: serialNumber=bddd2151b42588383d5d2f5a07774b788597e75a22bcb3e1c38ddd8ba3445e4b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:46:73:c6:50:b6:b6:46:f9:29:a7:b9:fe:5c:
06:a2:de:99:60:13:b6:f5:ec:8c:b6:63:ba:b5:13:
3d:6e:d0:f8:9c:0a:e6:54:3e:29:47:a7:ce:cb:af:
a2:c2:48:86:f3:82:da:1f:98:a0:23:c6:ef:98:30:
65:11:1e:98:f6:30:64:8f:f7:ca:7b:90:4b:4d:53:
d5:78:41:01:39:6c:ce:f8:cc:7d:12:a3:63:5b:9b:
76:9f:24:a1:b0:86:f4:03:95:54:c5:23:57:ea:c2:
9c:1a:86:8b:b8:83:ca:89:7a:96:73:b5:84:54:4d:
f0:38:18:1a:d9:8e:85:e7:2b:5b:86:17:28:cc:8a:
07:65:bc:7c:0b:92:fc:a7:66:9a:62:c6:a7:94:c1:
4a:5c:f1:52:73:72:3d:80:37:f2:96:b3:19:3e:dd:
fb:69:d4:b1:eb:ec:85:e5:33:b5:46:6c:5d:c4:a9:
93:da:57:2b:32:ee:8e:d2:ae:0d:f4:2d:47:6b:91:
a7:a3:eb:a3:fd:01:f9:8a:9c:a4:75:87:62:15:77:
13:4b:3b:db:79:1a:f3:f0:69:9a:1c:77:9f:93:a4:
fd:29:3a:ad:6a:a1:b0:0e:6e:e3:d2:19:39:47:7c:
79:73:f8:d7:f4:c0:56:ad:e9:82:74:a5:94:27:e1:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:E4:48:41:35:1F:AD:17:39:53:33:6F:89:2B:FB:D1:0C:A6:6F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cac574-b448-47b5-a751-22dfd7293698.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:5f:72:95:0a:22:86:f0:45:67:73:10:e6:0d:00:ed:f8:15:
d8:da:74:4b:ee:7c:a3:84:e1:36:97:bf:bd:9b:11:0f:3d:90:
9b:04:c4:07:94:0b:2b:89:21:65:79:fa:44:f7:73:62:84:e7:
5f:03:93:f3:3a:b6:b1:3c:eb:46:53:f3:97:44:ca:cd:bb:95:
6f:8f:fb:a2:db:cd:7a:35:ba:fd:5b:8e:00:ed:fd:38:8c:64:
2f:29:c7:26:d7:a7:da:b8:b4:40:30:37:04:56:23:2a:10:64:
0e:63:0b:57:17:79:7b:3f:25:1e:14:ae:b5:de:c4:fb:b0:74:
09:2b:31:be:b7:0f:b4:4c:94:31:e3:bf:9c:a4:21:c1:9f:66:
fd:39:8e:d3:75:3b:77:da:32:40:9a:04:b1:b6:64:e6:7d:15:
3d:b2:7e:f2:d4:a8:49:cc:7f:d7:f5:1f:39:35:9a:02:c1:0d:
73:3b:25:ed:e4:b2:ff:99:20:c4:a0:ed:ee:d0:cc:52:52:a3:
69:83:e4:ec:30:4d:75:1d:eb:2d:47:a9:bc:2d:1c:04:f0:57:
48:5f:77:3d:55:c2:4e:64:6d:43:39:6d:44:cb:77:11:6b:26:
94:e4:20:14:41:bf:65:02:94:4b:72:f3:c3:9e:f1:70:50:42:
51:cf:02:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:23:58 2026 by rpki-client