Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f9c2130f-6f88-42ac-853e-f39d188adb6d.roa
File: f9c2130f-6f88-42ac-853e-f39d188adb6d.roa (raw, json)
Hash identifier: Vz/c5PUqWFadkVNIn5eaYvxL5/UaIYEDppXzEgZo6SA=
Subject key identifier: 41:6F:A4:00:88:50:73:22:C4:88:70:B3:C3:85:0D:86:4D:4B:C9:1C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 403063127C064B2F438CED03D7AA4C42FF8C9C3F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f9c2130f-6f88-42ac-853e-f39d188adb6d.roa
Signing time: Fri 13 Feb 2026 15:30:40 +0000
ROA not before: Fri 13 Feb 2026 15:30:40 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.232.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:30:63:12:7c:06:4b:2f:43:8c:ed:03:d7:aa:4c:42:ff:8c:9c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Feb 13 15:30:40 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=e22d82632674a7b91119c8064410cebc434b05bfa13acee181e46d65eb52f299, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:36:cd:7c:e9:ce:f9:db:62:55:43:89:2e:b6:
83:9a:cc:fe:0c:82:a7:ce:f0:14:d6:b1:79:69:60:
a1:64:0a:15:85:00:bd:24:36:c2:53:65:0c:2f:f3:
d9:8d:31:cc:cc:35:30:ec:73:7e:72:2b:96:58:8f:
32:4e:37:d5:36:b8:9b:fe:02:9c:3d:44:81:03:c6:
68:a5:a6:ab:1f:20:42:c7:86:8a:65:8d:08:f4:77:
78:84:91:35:4a:44:48:28:0a:65:c4:08:a8:4b:97:
5f:9f:a4:aa:e6:28:bb:84:e6:c6:f4:9a:ca:7a:86:
2c:08:48:3b:1e:9c:7a:41:fe:19:4a:25:2d:47:46:
48:cb:ce:ee:27:47:f8:a4:a1:20:0c:81:85:96:a2:
ac:56:a0:ee:e2:3e:f1:88:13:3b:34:7e:ab:a3:24:
c0:82:96:0d:e8:94:c8:67:60:a7:7e:2e:b2:8c:9c:
c8:1f:83:36:c2:15:c5:d6:d0:57:3b:00:60:43:38:
45:3b:8f:18:9f:92:30:d7:2a:ee:2c:31:fc:e6:74:
9d:65:3f:63:0a:c6:5c:3d:f6:c9:27:64:3e:82:14:
fa:5f:bf:7f:ea:32:e9:8f:1a:a1:bf:ca:88:25:c8:
51:60:21:10:48:39:aa:75:e7:b5:fd:e4:f3:82:8e:
e8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6F:A4:00:88:50:73:22:C4:88:70:B3:C3:85:0D:86:4D:4B:C9:1C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f9c2130f-6f88-42ac-853e-f39d188adb6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.232.0.0/15
Signature Algorithm: sha256WithRSAEncryption
94:d5:fb:0f:f0:a1:5e:af:a2:6f:0c:46:a9:bf:17:ba:e9:fe:
83:71:6d:70:50:a3:5a:82:3f:b9:86:78:e4:78:e6:63:92:e5:
91:3e:f6:08:be:de:61:02:45:6e:ae:25:24:ad:09:61:30:d8:
be:e9:0b:67:54:1f:23:c5:b7:1a:84:5d:4f:a0:92:ae:ee:a1:
9b:2b:fc:85:fd:82:30:54:63:6d:4e:8b:b5:a4:23:4e:1f:c0:
48:eb:a3:4b:5e:86:23:c9:57:26:93:a6:12:c6:f6:41:d1:dc:
7f:91:ad:a2:9e:e3:da:e2:d4:30:32:98:8d:8c:67:b1:b2:d7:
e3:a0:6e:27:fa:ce:fc:f8:1d:6e:4b:24:4a:df:a9:14:bd:f2:
d9:0e:16:2a:b3:df:91:91:6d:b6:11:4a:02:1c:d6:ea:78:68:
4b:e5:bb:36:3d:92:56:38:5a:bb:aa:e8:36:86:7a:d9:0c:c9:
ac:57:2e:f1:1d:38:29:16:a7:13:8f:a8:f3:21:f0:3c:a8:b2:
e1:09:4c:d1:98:71:cb:35:a9:cb:c1:cd:2d:b2:11:83:d9:fa:
59:12:8b:46:92:6f:40:bf:08:ff:e3:79:6c:e0:c8:68:3f:56:
58:fc:46:73:a7:a1:30:a7:af:bb:02:46:95:8b:51:75:2a:d6:
67:a3:59:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:25:44 2026 by rpki-client