Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/befedc6e-5d1b-491c-be42-e45572027f9c.roa
File: befedc6e-5d1b-491c-be42-e45572027f9c.roa (raw, json)
Hash identifier: SapnuUsAw5vqFA8LGXcqu1fA7q82uGJ1RSuSBuuhKps=
Subject key identifier: DC:81:98:45:38:71:DA:3A:C6:6D:F9:F1:4F:95:9B:AF:9F:F9:B5:C5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 55C0C0173688E0C1770F6E8D7475CD024455BA50
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/befedc6e-5d1b-491c-be42-e45572027f9c.roa
Signing time: Mon 07 Sep 2026 12:53:19 +0000
ROA not before: Mon 07 Sep 2026 12:53:19 +0000
ROA not after: Sun 06 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.24.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c0:c0:17:36:88:e0:c1:77:0f:6e:8d:74:75:cd:02:44:55:ba:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 7 12:53:19 2026 GMT
Not After : Dec 6 23:59:59 2026 GMT
Subject: serialNumber=9a11889bd140f77d50292299e09adc023c7141eb0804c0087c07f477bb2d1b21, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:00:b6:a2:46:be:70:7a:e3:ce:85:c6:10:50:
9b:3e:b1:ad:d8:4e:39:05:36:ad:f5:af:50:e9:fa:
5a:3a:21:26:41:4d:87:be:e2:f8:45:c1:3e:d5:0c:
a4:1f:65:2f:39:67:f3:d6:50:f3:3a:5a:33:34:20:
2b:5b:b8:9e:e9:c0:85:8c:e9:e7:c2:ff:19:b4:02:
3a:5a:03:f8:e3:89:76:33:70:d4:2e:e5:df:d2:45:
ba:ba:a5:e5:d5:bc:af:22:d4:90:8d:fe:ed:06:87:
97:4b:12:95:b5:bb:54:3b:3b:92:0c:61:3c:ac:26:
f0:7c:57:0d:be:00:3a:0d:3f:c0:d4:0a:f4:54:0c:
49:69:33:da:e2:b9:08:2d:75:76:0f:db:1d:b0:9c:
68:c2:07:3d:08:6c:b9:4e:62:9c:59:65:09:b6:a5:
7c:b8:af:ee:77:05:7b:cf:e1:f8:f5:a7:4f:bd:ec:
c9:d3:a7:1c:f3:3e:d7:ed:41:14:77:e3:9e:99:81:
dc:7a:6a:ee:6d:43:86:52:7f:9c:e4:88:88:a7:b8:
c6:c0:22:37:6c:14:d4:d4:a1:cf:99:1e:bb:9f:20:
9a:43:69:3e:00:0c:9c:7f:06:dc:d8:2d:47:d3:bb:
6c:6a:2b:38:34:87:91:1d:fa:bd:16:66:b7:68:5c:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:81:98:45:38:71:DA:3A:C6:6D:F9:F1:4F:95:9B:AF:9F:F9:B5:C5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/befedc6e-5d1b-491c-be42-e45572027f9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.24.220.0/23
Signature Algorithm: sha256WithRSAEncryption
17:81:ca:52:20:d0:ec:f6:de:45:47:33:ff:86:66:7a:0d:ba:
d1:67:bc:00:2c:69:9c:fd:7a:4e:8a:b3:78:8f:49:ed:eb:ba:
0e:e9:89:f4:a9:5b:b1:e4:48:0e:31:7a:b1:cc:60:5c:45:64:
d9:cc:87:47:c2:6d:b6:81:f3:81:5a:02:20:b3:ef:5b:19:6f:
dc:a4:58:f7:12:89:e6:07:1b:86:60:0d:ae:f3:d3:01:2a:7c:
2f:12:27:ec:9f:2a:01:7e:21:62:14:6a:a8:6d:3d:f5:39:d0:
c6:38:83:2c:46:4f:6c:64:9a:2f:ca:46:59:47:7a:29:48:ea:
50:01:ae:ef:5d:5a:f4:5e:a8:e9:64:2a:3b:fb:6a:d7:5b:07:
a3:82:e9:8f:75:1f:7c:9b:20:24:70:a8:ad:cc:19:6a:2c:5b:
66:cb:ec:fe:9c:f5:0a:e4:0b:b1:c6:61:0a:6f:66:07:c6:92:
ca:5f:ad:f4:e5:d8:df:42:de:74:0f:66:dd:3c:39:46:54:2c:
01:2e:3e:ef:94:34:fe:25:12:ed:91:0f:0c:49:70:0c:73:e8:
88:7c:d4:0d:7f:99:25:43:c8:a6:a8:06:f3:36:04:e3:25:a7:
c0:e5:a4:45:4a:0c:d3:d9:e9:b9:cb:b1:ca:d9:19:fe:d6:b7:
f5:bd:3a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:26:02 2026 by rpki-client