Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa
File: 0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa (raw, json)
Hash identifier: sUCYoeIzHO/LQSCe+9oqSJAMQd5Ad4qfIPQgMOIZucM=
Subject key identifier: E9:10:BD:6F:1C:F1:E5:19:A7:86:28:26:8F:7D:AE:BB:34:EB:76:5F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 366722BA3E582771F2AB68EA58A643DBF14E5A3E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa
Signing time: Sun 04 Oct 2026 00:40:24 +0000
ROA not before: Sun 04 Oct 2026 00:40:24 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 193.57.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:67:22:ba:3e:58:27:71:f2:ab:68:ea:58:a6:43:db:f1:4e:5a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:24 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=7f293310f40a2e2f1a1e555e25b99f9a3b2c92662c51a6a542b635167e7c3c6b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:eb:a2:72:5b:e9:31:df:0b:b1:b7:b2:95:
55:38:75:7a:5c:10:cc:7a:63:b8:96:5d:db:90:03:
e5:2a:f2:e2:46:68:32:75:9d:d9:c4:ef:e2:e0:7f:
18:f7:57:34:79:98:44:92:8f:8e:74:bb:49:87:52:
a6:c1:7d:64:37:29:92:9b:98:48:1e:18:d0:ae:5d:
f8:d8:07:6c:6c:f6:14:49:45:04:fe:a0:8c:d1:38:
29:bd:fe:e1:f9:0e:e0:c9:38:ff:b4:11:97:e4:f8:
92:10:c5:a2:17:d5:28:99:d6:c4:65:c1:a2:65:bc:
2f:13:c2:c2:12:3f:44:7f:c2:25:f4:1a:79:16:48:
27:03:67:ca:9e:92:6e:82:d0:eb:e2:2c:8d:23:ad:
a9:f0:b7:26:ba:fd:3d:f4:da:f2:48:7c:70:3c:1b:
21:3f:6c:a5:d6:d2:57:cb:65:16:89:59:4d:4d:32:
f3:ee:fa:15:4f:df:5d:74:fd:be:04:c2:10:0c:08:
db:56:6e:a9:2a:2d:be:aa:e2:37:1a:c7:da:c6:c6:
a1:20:7a:de:38:cf:4b:be:59:bf:4f:3d:f4:29:ef:
22:02:4b:67:55:82:86:f9:ce:d5:57:0c:f8:39:f5:
93:14:f4:1b:ea:41:68:c2:33:fc:cf:e1:b6:6a:39:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:10:BD:6F:1C:F1:E5:19:A7:86:28:26:8F:7D:AE:BB:34:EB:76:5F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.170.0/23
Signature Algorithm: sha256WithRSAEncryption
94:7f:0f:07:b0:dc:e3:14:a3:91:85:11:a0:f5:07:b8:36:e2:
fd:e3:b3:5d:4b:1e:ea:40:dc:ed:93:2f:7e:b3:d1:76:66:2a:
ce:2a:32:d8:e9:38:9c:63:97:77:bd:dd:bf:90:6f:84:ff:af:
fd:c2:66:fd:65:35:4b:58:65:fe:2b:84:8e:33:a5:30:50:09:
a6:a5:47:1b:17:92:53:1e:8f:3a:fe:2c:eb:e2:2f:05:ef:89:
34:58:d4:be:e4:6c:37:4c:5d:c4:07:a2:a3:f4:d7:6f:d4:a8:
97:86:dc:bf:5a:ae:45:2f:12:f5:94:10:02:09:87:ac:f7:fb:
1f:6f:ee:3c:c1:02:cb:9a:83:06:92:78:89:4c:9c:52:b5:9e:
e9:e3:c4:11:90:c7:09:fa:1b:79:33:ae:8d:f1:5d:e5:b7:30:
08:55:e8:62:71:d8:bc:4d:b6:d3:14:c0:4f:de:3f:51:fe:fa:
43:9c:0a:f4:75:0b:77:9f:46:26:61:aa:4a:43:09:ae:de:f6:
60:a4:23:42:af:6e:86:61:1f:96:1c:24:aa:f9:9b:d9:84:ee:
fb:02:d6:16:ba:fa:20:c3:08:e3:fc:1c:05:fe:86:8d:99:9f:
17:f0:dc:e3:8a:4d:27:bc:0e:74:41:57:c0:f7:d9:0c:ab:fc:
bb:f0:6d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:16:32 2026 by rpki-client