Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5576ca6-a1ae-4a46-b6ed-04a48efc19c7.roa
File: f5576ca6-a1ae-4a46-b6ed-04a48efc19c7.roa (raw, json)
Hash identifier: Cq01KYwfvp2qauiHEzI4ip2RmiynQzIbaC1vqCesd3E=
Subject key identifier: B1:AD:79:1E:CA:6A:8F:24:9C:96:38:21:CD:B7:D0:3D:F7:6C:D6:C6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 262F0D14B33618C8C654166B365ACE96A439B2BF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5576ca6-a1ae-4a46-b6ed-04a48efc19c7.roa
Signing time: Fri 24 Oct 2025 00:40:06 +0000
ROA not before: Fri 24 Oct 2025 00:40:06 +0000
ROA not after: Fri 28 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.46.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:2f:0d:14:b3:36:18:c8:c6:54:16:6b:36:5a:ce:96:a4:39:b2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 24 00:40:06 2025 GMT
Not After : Nov 28 23:59:59 2025 GMT
Subject: serialNumber=758882b115c6eec8b404b2624b53ffb5c1891ea76dc52a4e485bc2c2263555e0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:5d:c6:c2:97:7e:29:e2:70:3b:99:63:94:
95:98:ed:b3:3b:23:73:49:5d:14:9b:e4:7b:0c:15:
51:f0:c1:8e:0b:ad:1b:af:47:02:20:dd:02:2c:91:
ad:a0:93:c3:a7:4c:1a:a4:60:ac:11:a7:1d:4d:b4:
0d:46:ff:ae:5d:c1:7a:86:34:83:45:04:be:a4:01:
48:41:8d:1e:8d:0d:a2:bb:e3:7e:c6:1c:71:a3:ed:
91:8a:31:e4:16:f3:7d:e4:50:79:2f:e7:a9:ce:51:
8a:06:84:e7:23:92:92:d9:f3:d8:5e:fc:9f:35:a2:
80:35:79:7d:20:5c:72:2d:b9:a3:2e:02:df:c8:27:
a4:c5:b3:b3:59:a6:8c:c7:70:cb:0f:a9:c4:96:c1:
3a:2e:3a:2e:61:e1:2b:71:46:86:9c:86:a0:e8:33:
20:f8:f6:27:5a:ac:5e:18:5f:cd:67:80:39:b7:86:
1a:25:ad:db:79:6a:33:7c:f0:0e:f9:e5:1c:58:ae:
98:6c:cb:28:b2:d5:11:2c:52:df:e9:a1:54:ff:3e:
f2:2c:e6:80:82:6b:f3:3c:31:cb:69:41:59:c8:32:
43:d5:2b:53:b8:1a:db:18:61:a1:dd:64:72:a8:d0:
d8:16:96:26:5e:26:92:b9:e4:75:1f:57:76:10:0f:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AD:79:1E:CA:6A:8F:24:9C:96:38:21:CD:B7:D0:3D:F7:6C:D6:C6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5576ca6-a1ae-4a46-b6ed-04a48efc19c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.46.0.0/15
Signature Algorithm: sha256WithRSAEncryption
43:31:d6:e2:c6:c7:f1:b9:7a:b6:75:23:af:60:50:97:13:08:
f7:56:53:14:bf:12:a0:07:de:7e:14:a7:95:d8:48:61:81:8f:
99:8f:21:36:02:01:4d:f4:cd:dc:54:b1:a7:fb:c1:67:fc:aa:
ab:5c:29:6d:62:b5:91:f9:42:40:e9:89:b8:68:92:53:f6:f3:
e6:5b:b6:52:e5:5f:4a:77:00:32:4a:b7:99:69:a1:d9:64:5d:
f5:72:39:19:60:52:67:71:03:8a:12:67:a4:96:77:84:18:f5:
c2:f2:e5:16:8c:7b:da:91:7e:58:1d:b8:6a:de:2e:bd:1a:c0:
96:5c:b8:70:7b:d4:f9:51:33:8f:d6:4c:01:ff:49:ed:b7:a5:
b1:22:73:a7:ff:8e:14:e5:6b:27:3b:a9:83:52:b9:81:99:8a:
4e:e6:bc:02:aa:7d:aa:fd:87:a2:97:66:d0:64:08:9e:98:22:
ac:5c:de:f3:9b:5b:a3:cc:68:02:76:79:ab:79:58:97:ca:92:
3f:5c:dc:10:35:dc:75:09:cc:81:6f:39:16:b2:d2:4d:80:fb:
b8:5d:ac:5a:69:0c:ca:08:20:17:da:bc:8b:d0:0e:be:8d:28:
13:06:3d:49:f0:cc:90:02:0d:8a:5f:9f:3f:52:b8:55:80:8a:
37:a4:6e:07
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUJi8NFLM2GMjGVBZrNlrOlqQ5sr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTEwMjQwMDQwMDZaFw0yNTExMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQDc1ODg4MmIxMTVjNmVlYzhiNDA0YjI2MjRiNTNmZmI1YzE4OTFlYTc2ZGM1
MmE0ZTQ4NWJjMmMyMjYzNTU1ZTAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALDeXcbCl34p4nA7mWOUlZjtszsjc0ldFJvkewwVUfDBjgutG69HAiDdAiyR
raCTw6dMGqRgrBGnHU20DUb/rl3BeoY0g0UEvqQBSEGNHo0NorvjfsYccaPtkYox
5BbzfeRQeS/nqc5RigaE5yOSktnz2F78nzWigDV5fSBcci25oy4C38gnpMWzs1mm
jMdwyw+pxJbBOi46LmHhK3FGhpyGoOgzIPj2J1qsXhhfzWeAObeGGiWt23lqM3zw
DvnlHFiumGzLKLLVESxS3+mhVP8+8izmgIJr8zwxy2lBWcgyQ9UrU7ga2xhhod1k
cqjQ2BaWJl4mkrnkdR9XdhAPQbcCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSxrXke
ymqPJJyWOCHNt9A992zWxjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZjU1NzZjYTYtYTFhZS00YTQ2LWI2ZWQtMDRhNDhlZmMxOWM3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATMuMA0G
CSqGSIb3DQEBCwUAA4IBAQBDMdbixsfxuXq2dSOvYFCXEwj3VlMUvxKgB95+FKeV
2EhhgY+ZjyE2AgFN9M3cVLGn+8Fn/KqrXCltYrWR+UJA6Ym4aJJT9vPmW7ZS5V9K
dwAySreZaaHZZF31cjkZYFJncQOKEmeklneEGPXC8uUWjHvakX5YHbhq3i69GsCW
XLhwe9T5UTOP1kwB/0ntt6WxInOn/44U5WsnO6mDUrmBmYpO5rwCqn2q/Yeil2bQ
ZAiemCKsXN7zm1ujzGgCdnmreViXypI/XNwQNdx1CcyBbzkWstJNgPu4XaxaaQzK
CCAX2ryL0A6+jSgTBj1J8MyQAg2KX58/UrhVgIo3pG4H
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:20:55 2025 by rpki-client