Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
File: fc50f617-7597-4f4e-b8f6-87763b28caf0.roa (raw, json)
Hash identifier: MrEa7efFTtfpyKgfwlCysCM7B9lE6wof9Q2Q7ZujWYw=
Subject key identifier: D5:FD:88:C3:BE:2F:14:CE:12:C5:BB:1C:ED:27:2D:73:E3:59:77:9B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 375AB7984B486750E75E9716FCC7458061FB318C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
Signing time: Fri 07 Aug 2026 05:00:11 +0000
ROA not before: Fri 07 Aug 2026 05:00:11 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.121.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:5a:b7:98:4b:48:67:50:e7:5e:97:16:fc:c7:45:80:61:fb:31:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:00:11 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=946695df476663aafe73ae9447269aaf1ca69d84fe17b6106fbd71e2946425f5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:cb:fd:e7:40:85:54:22:5c:7b:c9:63:3a:
9d:59:72:01:be:52:1b:4d:8d:69:1a:5e:4d:c0:a6:
49:3f:45:0a:38:91:8b:bb:fb:0a:be:71:3d:0b:12:
79:50:68:56:af:e9:30:97:7f:78:fd:54:53:e9:01:
64:c0:ae:fa:be:ea:11:9d:88:68:93:73:0b:8f:11:
be:3a:e4:21:69:74:0e:38:94:b3:ed:8a:79:af:83:
28:40:97:35:85:61:75:85:07:bc:c9:89:e3:c7:d8:
04:af:a9:8b:9a:fc:98:ce:74:17:b7:90:04:21:8a:
7b:6a:eb:28:bc:e0:a4:e6:93:d0:80:79:1e:b2:91:
34:40:f8:e7:8a:9e:12:b2:f9:a7:2c:61:aa:bd:6b:
5e:c8:39:8c:56:60:0e:31:2a:76:4b:cc:f8:a7:e9:
33:e4:80:c5:41:1b:0a:e6:9e:1d:e6:4a:80:44:25:
9e:27:c7:c5:6f:dd:09:b3:44:d1:4d:00:7c:e3:07:
65:1d:07:2a:ef:a5:5d:f2:82:f5:fa:7e:63:50:ad:
80:57:68:af:30:05:b3:5d:91:50:da:2a:4e:0c:88:
16:84:04:85:a9:4b:77:59:e7:51:25:6e:8e:b2:6b:
c5:f6:49:88:85:af:83:35:fb:7d:5a:78:cb:c8:30:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FD:88:C3:BE:2F:14:CE:12:C5:BB:1C:ED:27:2D:73:E3:59:77:9B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc50f617-7597-4f4e-b8f6-87763b28caf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.121.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:98:ac:d1:a2:34:86:30:d6:93:b4:92:24:10:1a:a8:cc:4b:
ee:9a:84:00:8b:e1:fe:29:ef:02:12:a2:21:10:8e:4b:b3:7b:
a9:34:3b:45:05:bb:4f:ff:4c:b5:b8:68:0a:2d:4d:d7:63:91:
67:e7:da:f7:6b:cd:0a:43:ba:27:44:f7:ae:c0:3b:c4:e6:61:
8e:1a:7f:47:38:65:23:d0:95:50:75:14:5a:f8:3e:fd:8a:3e:
f5:e0:9a:92:e9:df:61:11:7b:2b:1b:c4:90:b0:1a:88:ac:1c:
6d:99:50:a6:5b:b1:dc:5b:40:4c:92:83:95:e7:bb:42:a1:5b:
6a:e6:48:ef:e3:23:e7:80:f6:f7:d9:69:9b:24:83:78:bc:d5:
04:53:96:66:da:e1:87:16:d0:18:5d:d5:77:8a:33:1c:0c:1f:
4a:40:f3:5d:5d:2f:fb:33:87:ce:c1:ee:9f:84:2a:09:1d:be:
1d:d9:3c:1a:0e:7c:fe:ca:f3:a6:88:dc:ab:1d:3d:3c:64:f6:
2a:18:67:e0:70:39:a9:07:c2:ad:7f:bf:9a:c4:1f:6b:d7:43:
b4:a0:1a:f5:d6:61:41:3a:77:78:91:7b:04:27:c1:62:c8:90:
41:6a:c8:3d:0b:89:14:8d:6f:a9:c4:aa:a3:91:ec:6e:db:48:
84:41:1c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:04:45 2026 by rpki-client