Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa
File: e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa (raw, json)
Hash identifier: KYFmzAQefHu5Rx4W+9vpeu7F4YynBBboJd8OuJILJCw=
Subject key identifier: D1:7B:9A:8E:09:84:28:5D:16:BB:FF:2F:6E:4B:9B:A3:21:47:4A:73
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 414D9F5869B31A8777C79E1BE0392F63E58A8706
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa
Signing time: Mon 26 Oct 2026 05:40:33 +0000
ROA not before: Mon 26 Oct 2026 05:40:33 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 51.204.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:4d:9f:58:69:b3:1a:87:77:c7:9e:1b:e0:39:2f:63:e5:8a:87:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:33 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=2544760aff9ff7e0ecf724d4423d6294c8075cae85d30c688f6f98ca4f36ba30, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:6d:41:08:bb:e2:46:57:64:38:b3:f1:e0:
94:39:d7:59:5f:e9:3d:08:0a:fe:30:d4:25:15:11:
94:19:8a:83:64:aa:25:f2:2e:7c:68:39:4c:e9:5d:
64:aa:47:0f:ad:35:30:cc:67:a3:ba:52:cf:3b:4e:
08:f7:56:04:50:5c:ea:e4:40:7e:97:88:4d:d2:d6:
9f:81:b9:9b:00:84:9e:e1:9b:62:0c:f0:aa:42:4d:
a8:44:be:53:d1:a5:69:4d:cb:c7:49:f9:95:fb:9a:
59:81:3a:14:b1:64:2e:a7:e7:b8:1f:4b:3c:1b:1d:
5a:a3:39:8d:53:9f:79:71:47:2c:4e:69:58:8a:e8:
46:7f:0b:7c:ee:43:3a:6f:c0:85:50:75:92:5e:20:
da:19:d6:17:0e:e1:2e:b6:8f:9e:bb:c1:a5:bc:3c:
6d:86:ac:9a:6c:5a:4f:60:66:6b:eb:b7:de:b6:23:
e4:4f:5a:d2:18:8a:15:b8:ab:14:20:de:2d:2f:39:
18:dc:14:a2:4e:c3:22:25:48:f4:00:92:dc:06:b9:
f5:ec:76:8c:21:4c:74:42:aa:6a:d4:7d:63:75:13:
61:33:5b:a1:24:75:f1:8e:83:51:1f:34:b1:53:d0:
23:d8:69:b0:b0:da:a9:a6:3d:04:e1:5d:0b:c8:0c:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7B:9A:8E:09:84:28:5D:16:BB:FF:2F:6E:4B:9B:A3:21:47:4A:73
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.204.0.0/15
Signature Algorithm: sha256WithRSAEncryption
59:25:64:3b:6e:2d:c6:b2:66:e5:3c:77:b8:e6:72:62:ce:5d:
32:05:46:94:9d:1a:8d:92:ad:56:4c:76:f6:3d:20:80:f1:96:
24:92:d1:2e:56:c0:21:75:47:d6:23:34:98:d0:73:3c:af:eb:
7f:e2:b7:50:ff:fb:a7:3d:df:14:4d:58:2b:50:6a:06:2f:02:
1e:4d:67:79:18:40:bf:32:cd:39:4d:d1:41:e2:0f:5d:b4:11:
73:0d:46:27:c4:ee:b2:00:33:c1:95:b7:b0:f7:4a:b2:4d:1e:
3b:cd:00:0c:23:fb:64:f9:02:17:b3:17:64:50:bc:5d:a0:1e:
dd:cf:ad:d6:7f:66:9e:a3:4f:be:2c:0d:55:93:5b:27:84:87:
9c:2b:3b:7f:9d:25:27:d8:c5:e9:7d:18:89:3d:2a:57:73:48:
4b:2b:76:56:21:d1:54:e2:f6:5a:d4:74:f3:03:e7:0c:0f:7e:
b0:ed:6b:73:a6:72:b9:b3:3e:9c:78:ae:d5:12:12:ce:52:97:
89:d1:54:a1:ef:70:d5:1a:40:26:40:cf:89:32:49:04:c1:28:
96:f2:9d:ca:37:c5:5c:56:45:29:dc:14:cb:32:c0:43:6b:59:
3f:41:4b:fc:9d:2e:f3:69:68:24:9b:a8:c2:44:69:b7:aa:88:
d8:ab:65:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:49:51 2026 by rpki-client