Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f9c2130f-6f88-42ac-853e-f39d188adb6d.roa
File: f9c2130f-6f88-42ac-853e-f39d188adb6d.roa (raw, json)
Hash identifier: p6qjoi9B6NBPF/Ke/W0x3xd9X1xo8ZaRqObjOq3XPlc=
Subject key identifier: B7:6E:B6:A5:4A:3C:41:67:52:DE:98:67:08:53:F1:95:22:16:1F:B5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6BD4A5C8E40D18F46D81C4613399E9598246A239
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f9c2130f-6f88-42ac-853e-f39d188adb6d.roa
Signing time: Fri 31 Oct 2025 02:00:19 +0000
ROA not before: Fri 31 Oct 2025 02:00:19 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.232.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d4:a5:c8:e4:0d:18:f4:6d:81:c4:61:33:99:e9:59:82:46:a2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 31 02:00:19 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=1fa1a9070941e1cae6204ec6850a06a009e55689cd5a9712cd51f236d3d36547, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:6d:3f:9b:2c:61:02:d3:cc:54:f0:ca:99:
04:e2:39:75:6c:a4:80:50:29:dd:dc:6a:db:68:e0:
d8:50:60:1e:08:27:42:8f:4f:1c:0c:8f:f8:3d:e8:
5b:dd:07:eb:04:15:da:13:7a:38:2b:1e:bb:13:5f:
9f:6d:b9:85:b8:63:48:ab:8a:45:89:5a:d1:55:4e:
00:c8:b8:38:18:d2:e5:24:03:74:e1:28:68:78:c6:
e6:4d:9c:97:21:7a:2b:13:6c:59:15:e7:1f:26:47:
b6:a7:6d:a2:43:7d:6b:4f:5d:79:ae:31:1e:f4:fa:
42:75:01:04:4d:38:f0:a1:60:2a:3f:f1:fc:74:d4:
d1:38:17:99:4a:62:ec:b2:f3:b5:b6:1d:4b:e3:85:
7e:e9:5e:6e:82:75:99:2a:b0:f4:35:69:4f:05:c8:
f4:37:da:da:95:c7:5e:73:50:01:f1:e6:47:bf:7f:
fe:18:0d:7e:ea:e1:ed:4a:8b:1a:8b:cf:96:d2:27:
23:df:74:73:d5:32:5f:b0:df:68:54:66:10:d7:76:
3a:fb:fb:a4:9e:2f:4c:18:8d:83:72:27:ad:20:30:
e5:cc:fd:a4:70:31:52:47:25:6b:a2:cb:ab:ea:0d:
5d:4a:50:2d:3d:a2:af:5e:66:88:6f:9e:99:35:d1:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6E:B6:A5:4A:3C:41:67:52:DE:98:67:08:53:F1:95:22:16:1F:B5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f9c2130f-6f88-42ac-853e-f39d188adb6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.232.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b1:0d:a6:96:bc:b1:91:80:ad:88:72:3c:4c:70:85:05:16:84:
84:29:69:63:e3:0b:5a:66:82:00:fa:a7:73:d1:e9:2c:f4:9d:
36:85:b8:6e:34:a1:e0:19:49:96:45:6f:7f:b8:94:2d:b3:fe:
de:3d:e0:ec:3e:df:36:94:a0:3b:5c:ac:a7:38:1c:6c:ab:48:
0a:8e:66:53:72:a3:51:b5:66:c4:12:54:c4:06:65:32:ae:32:
67:b5:18:47:c3:ba:35:d9:51:84:8b:48:c2:bf:8e:46:37:7f:
ba:d8:44:7c:8f:cf:e1:63:13:79:a1:b4:2d:6b:dd:48:68:98:
07:eb:fb:13:d2:34:03:42:16:62:bf:33:26:6d:1b:6c:da:5b:
9a:62:6f:b3:51:56:24:ad:60:7a:fc:fb:a6:16:a9:b1:3c:74:
3c:ef:e5:fb:1c:60:ae:c3:cc:5c:ca:b9:59:b1:0f:ac:37:1f:
e1:8c:25:4b:19:75:35:ec:fa:8a:78:4b:ff:71:db:6b:8d:1f:
06:80:4e:88:83:95:16:7b:d6:32:fe:f5:c8:65:d0:e5:72:77:
3d:20:cf:9c:97:80:b0:3d:60:73:80:b3:1c:15:45:d4:6b:6b:
97:ba:6c:46:d3:cb:4e:e7:51:14:73:79:23:a3:bf:d2:31:a5:
de:5a:56:a9
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUa9SlyOQNGPRtgcRhM5npWYJGojkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTEwMzEwMjAwMTlaFw0yNTEyMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDFmYTFhOTA3MDk0MWUxY2FlNjIwNGVjNjg1MGEwNmEwMDllNTU2ODljZDVh
OTcxMmNkNTFmMjM2ZDNkMzY1NDcxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJetbT+bLGEC08xU8MqZBOI5dWykgFAp3dxq22jg2FBgHggnQo9PHAyP+D3o
W90H6wQV2hN6OCseuxNfn225hbhjSKuKRYla0VVOAMi4OBjS5SQDdOEoaHjG5k2c
lyF6KxNsWRXnHyZHtqdtokN9a09dea4xHvT6QnUBBE048KFgKj/x/HTU0TgXmUpi
7LLztbYdS+OFfuleboJ1mSqw9DVpTwXI9Dfa2pXHXnNQAfHmR79//hgNfurh7UqL
GovPltInI990c9UyX7DfaFRmENd2Ovv7pJ4vTBiNg3InrSAw5cz9pHAxUkcla6LL
q+oNXUpQLT2ir15miG+emTXRMV0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBS3bral
SjxBZ1LemGcIU/GVIhYftTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZjljMjEzMGYtNmY4OC00MmFjLTg1M2UtZjM5ZDE4OGFkYjZkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPoMA0G
CSqGSIb3DQEBCwUAA4IBAQCxDaaWvLGRgK2IcjxMcIUFFoSEKWlj4wtaZoIA+qdz
0eks9J02hbhuNKHgGUmWRW9/uJQts/7ePeDsPt82lKA7XKynOBxsq0gKjmZTcqNR
tWbEElTEBmUyrjJntRhHw7o12VGEi0jCv45GN3+62ER8j8/hYxN5obQta91IaJgH
6/sT0jQDQhZivzMmbRts2luaYm+zUVYkrWB6/PumFqmxPHQ87+X7HGCuw8xcyrlZ
sQ+sNx/hjCVLGXU17PqKeEv/cdtrjR8GgE6Ig5UWe9Yy/vXIZdDlcnc9IM+cl4Cw
PWBzgLMcFUXUa2uXumxG08tO51EUc3kjo7/SMaXeWlap
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:27:00 2025 by rpki-client