Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5576ca6-a1ae-4a46-b6ed-04a48efc19c7.roa
File: f5576ca6-a1ae-4a46-b6ed-04a48efc19c7.roa (raw, json)
Hash identifier: Ef+1GU/V7kF9MNpkdGj2QJTTpcP2oyh2iE2398nJdQo=
Subject key identifier: AE:3C:99:0A:61:EC:96:32:38:27:C9:2A:85:9A:77:68:A1:E9:E9:5C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 57A9FE1D5DA9D572FB2B563237F0B113C542CDCC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5576ca6-a1ae-4a46-b6ed-04a48efc19c7.roa
Signing time: Fri 06 Feb 2026 00:40:09 +0000
ROA not before: Fri 06 Feb 2026 00:40:09 +0000
ROA not after: Thu 07 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 51.46.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a9:fe:1d:5d:a9:d5:72:fb:2b:56:32:37:f0:b1:13:c5:42:cd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Feb 6 00:40:09 2026 GMT
Not After : May 7 23:59:59 2026 GMT
Subject: serialNumber=8815a7c0dc58c7d96b4453d756fdfca4557053fccb84689f516a3cb492b1e712, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:e7:e1:72:71:8d:9f:89:66:f8:ed:3c:03:
7f:bb:2c:26:e1:63:cd:d4:79:5f:f9:b6:47:7a:b7:
ad:0e:eb:91:1c:2d:e8:ec:24:77:76:e9:59:de:c0:
f6:25:7a:61:40:f1:b9:7b:dc:f7:1d:28:ee:32:d1:
8e:c2:19:9e:dd:1a:c3:95:c4:04:21:e4:f1:c8:50:
9f:5c:ac:e2:80:78:ec:c4:21:1d:5f:de:6c:b1:05:
6e:76:f0:8d:08:9f:00:6a:e1:e0:0d:86:85:3d:20:
7c:c9:c5:5c:a7:73:84:3e:8e:21:d4:6a:41:58:c4:
4d:d3:f4:ef:59:9f:ad:99:a6:b8:1d:b1:18:a5:8c:
a9:06:65:52:02:08:10:b0:87:7b:ea:c2:7f:3c:4d:
37:68:4e:32:b1:2e:bb:fb:d4:a4:07:15:2e:a7:a7:
38:3b:c8:46:1c:f4:1d:2a:48:b1:29:e4:f1:7f:a2:
00:0b:e2:cb:82:09:43:a3:be:d3:8c:00:18:6d:68:
2d:6c:75:76:7c:ae:98:84:e8:2a:d9:c3:e5:28:dd:
d5:37:1b:2a:92:2d:a9:b1:48:bd:ba:1f:ec:d7:30:
7e:04:54:bf:2b:27:11:33:fe:09:1b:17:db:9d:e4:
07:94:f5:1e:6c:c9:f7:3a:48:38:f1:1b:c9:f4:71:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3C:99:0A:61:EC:96:32:38:27:C9:2A:85:9A:77:68:A1:E9:E9:5C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5576ca6-a1ae-4a46-b6ed-04a48efc19c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.46.0.0/15
Signature Algorithm: sha256WithRSAEncryption
36:e6:77:2b:5c:89:09:b9:93:3b:a4:64:e2:ee:2d:a6:1e:d1:
9c:7a:2c:ff:0b:af:d8:7d:a1:56:11:28:06:52:cf:fb:be:6f:
f9:bd:3f:84:8b:5e:d5:5a:4c:1b:ba:e6:45:7d:90:cf:a8:ce:
75:a3:a5:a5:ea:83:3d:d3:bf:48:65:0e:2e:2c:01:66:90:01:
4a:63:35:1f:91:53:8a:8c:46:69:d6:2d:2c:01:56:af:4f:87:
15:9e:3a:77:1f:de:28:e7:03:64:82:61:f1:73:b0:56:e8:a7:
9e:ab:ce:50:8d:6e:01:0a:8e:5a:e6:06:74:1e:95:98:5d:07:
be:f3:67:59:ef:3c:d2:fa:fa:32:c5:c1:91:f1:5f:c5:5c:c2:
cf:a9:96:9f:ae:4b:d2:ff:7f:51:ce:0d:72:3b:00:55:f2:07:
b1:5d:11:86:c6:91:b5:89:22:b3:65:d1:ab:08:06:e0:b2:b0:
52:19:7f:5b:6a:aa:f9:0c:9b:32:61:06:fd:3e:da:27:9e:bd:
1f:d5:ae:60:cc:67:8e:3a:cd:94:61:15:d4:5e:b3:e7:cf:2e:
4a:60:18:d9:88:fd:53:1b:73:03:16:e2:6c:17:be:29:7b:b0:
09:76:e7:ff:fa:ad:2b:6d:ad:f5:37:11:cf:fa:69:df:63:87:
c9:6a:08:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:20:04 2026 by rpki-client