Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05d2e6e0-648a-472a-b287-1b954eae646d.roa
File: 05d2e6e0-648a-472a-b287-1b954eae646d.roa (raw, json)
Hash identifier: yRwbs0TfWbkWRiOyEjyXT9ztxzvzRi+8AQpg8ud+pLE=
Subject key identifier: AB:D1:81:DD:C0:E8:EF:72:CB:F0:A5:D6:35:5B:D2:11:60:CF:61:65
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 75C2883CCC10D770E822DA98EFE382F81D315E33
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05d2e6e0-648a-472a-b287-1b954eae646d.roa
Signing time: Sun 11 Oct 2026 15:20:08 +0000
ROA not before: Sun 11 Oct 2026 15:20:08 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 83.118.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 16:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:c2:88:3c:cc:10:d7:70:e8:22:da:98:ef:e3:82:f8:1d:31:5e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 11 15:20:08 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=58f97773704ac6d03d3dee996f9578624379e746d075546e1248b7aac6c8c652, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:96:8c:b0:9c:60:37:e0:23:45:2a:2d:c3:
06:ba:65:d8:1a:80:29:fb:a7:0c:ea:62:20:28:4a:
b3:5c:da:72:33:1e:5e:ea:1e:d5:81:ff:90:5f:12:
11:eb:a6:92:68:96:1a:55:62:7b:ae:0d:90:d4:a0:
d0:ab:12:59:85:0f:57:68:78:9d:38:ad:97:ca:53:
12:9e:90:c9:2c:68:4e:15:f7:a1:ef:9d:45:1e:23:
00:82:a6:ee:24:a9:f9:40:ad:25:22:53:84:1e:a9:
69:10:f9:52:01:d5:68:2f:8b:7a:c7:97:d8:94:a2:
29:83:2f:11:80:e3:a0:07:c5:eb:e1:c4:c3:93:70:
de:96:84:f3:db:73:a3:8d:69:95:bd:4a:15:78:00:
cf:4d:e7:85:0c:92:5f:3d:5a:5c:f4:b8:28:51:ed:
9f:a0:ff:c4:e9:17:56:40:b2:1d:b9:af:84:5a:78:
8a:4d:77:0f:b3:08:2d:99:14:e3:5d:b7:6a:52:2a:
78:67:8f:ca:57:f8:c0:0a:a9:8c:b9:3e:90:09:3a:
cb:58:e1:ab:e6:78:4b:31:c0:2e:dd:8e:ce:a6:6a:
ce:d3:0e:d3:26:96:6c:e2:97:06:5e:55:2d:e5:5a:
0e:eb:80:15:46:e6:3f:75:9c:bc:7a:78:4c:c5:20:
f2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D1:81:DD:C0:E8:EF:72:CB:F0:A5:D6:35:5B:D2:11:60:CF:61:65
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05d2e6e0-648a-472a-b287-1b954eae646d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.234.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:b0:d0:40:54:c9:ae:8a:ed:55:5a:46:88:34:e4:b3:d5:0d:
50:17:e1:c5:ad:8a:59:31:41:bf:47:b3:cc:37:01:f6:09:80:
e0:ec:ee:18:a7:d8:43:ce:6e:78:5b:9a:79:af:b9:d6:83:7f:
fe:29:ad:57:92:1f:14:fe:a7:4b:5b:e3:79:54:80:39:ac:56:
50:a6:a4:71:62:ee:3b:87:56:a6:c7:5a:1c:04:d1:d4:dc:b8:
e5:b3:a8:61:84:1f:e3:53:5c:b5:5c:8f:42:1e:63:8b:95:7e:
73:8e:d0:27:92:62:c9:55:4b:84:a0:ff:b2:21:21:8e:f3:b7:
70:69:13:7a:66:39:ad:d6:7a:59:0a:b9:ab:db:08:bf:6d:8b:
38:42:95:27:b1:4b:e3:8a:aa:52:4a:a4:fe:bb:a0:5e:60:fc:
23:2d:ee:a8:c4:0f:71:40:94:ad:b8:e1:d1:fc:12:ef:4f:51:
a1:47:2a:cc:c4:96:21:05:e7:af:08:8a:f6:68:c3:cd:4b:da:
94:02:68:23:0a:80:6f:c0:49:2b:0f:47:2a:52:0b:6a:da:4a:
29:dd:b5:ef:ee:cd:9d:2f:7a:ba:df:e7:01:88:f5:4d:b6:37:
86:1b:66:8c:b3:7e:94:15:39:a2:32:7e:82:d4:38:cd:29:7e:
5a:00:8d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 00:43:39 2026 by rpki-client