Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16337db0-8420-40f0-982b-9d50c20f4e08.roa
File: 16337db0-8420-40f0-982b-9d50c20f4e08.roa (raw, json)
Hash identifier: 51EoFcQqUMXhcqTtBhgQtSOWywgAIjLoYOU3UZcTJmU=
Subject key identifier: 5E:80:1E:0F:DD:E7:65:C9:92:91:2E:9E:29:1A:96:9D:1F:B1:9B:EA
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 69031417147C051E697CED815385A4138F83037D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16337db0-8420-40f0-982b-9d50c20f4e08.roa
Signing time: Fri 07 Aug 2026 06:00:08 +0000
ROA not before: Fri 07 Aug 2026 06:00:08 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 193.57.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:03:14:17:14:7c:05:1e:69:7c:ed:81:53:85:a4:13:8f:83:03:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 06:00:08 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=6bf0286524d28cf6cf00e2833f7d098de6567ca01fc8d1d5cfd2bf83fc8ca67e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5c:e1:99:fd:ad:df:51:47:55:9a:6c:61:ae:
2e:49:0e:57:aa:fb:4b:08:e1:07:2b:20:74:a5:df:
37:2c:44:ab:b2:da:cc:6a:25:99:f6:83:8c:18:67:
89:b6:89:55:46:1f:cf:5e:78:a6:f0:55:4c:06:4d:
31:84:34:1e:65:21:c0:6b:93:21:f1:70:25:ac:a2:
3f:50:39:b3:75:f6:ce:84:bf:bc:a0:cc:a9:ab:65:
45:2e:62:a2:17:6e:66:85:f9:5d:0e:3a:71:7e:a8:
4e:a6:5a:0c:37:4e:79:6c:62:d6:c8:3c:d3:e0:a9:
f8:5d:67:4b:de:0a:37:69:5f:09:8b:3d:46:0a:04:
e1:33:3d:68:95:f4:44:cb:20:df:cc:22:f7:d1:09:
c2:9f:14:27:84:ee:be:90:b9:75:2d:60:40:d1:db:
4d:c9:9e:3c:63:28:39:6d:13:a8:69:15:b9:fa:ba:
d5:64:d1:df:e8:44:e1:b1:7d:0d:13:50:b4:70:4e:
55:4a:90:e9:de:1b:6a:0e:b6:38:b2:73:58:69:c7:
93:d0:de:de:9a:8a:f1:6b:cb:9c:65:b5:fe:a2:2c:
a6:8c:8f:92:e4:7e:43:d7:7e:2b:3b:45:ef:a8:a8:
43:46:f3:8c:f7:2d:2e:82:0e:9b:a3:2a:62:d4:bc:
3c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:80:1E:0F:DD:E7:65:C9:92:91:2E:9E:29:1A:96:9D:1F:B1:9B:EA
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16337db0-8420-40f0-982b-9d50c20f4e08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.254.0/23
Signature Algorithm: sha256WithRSAEncryption
08:c0:08:6e:e4:e2:40:f3:a7:7e:2c:e1:96:35:9f:a0:9b:23:
b5:f7:3a:45:38:9f:7c:63:54:2e:90:89:5e:5f:b3:7b:d2:3f:
25:aa:d5:32:00:a3:b8:d8:af:3f:02:c0:d5:d2:67:89:71:c4:
02:25:91:93:73:bc:4e:99:35:a3:a2:93:e1:e5:51:85:9a:a5:
d2:67:cf:cf:af:19:39:e2:1c:d8:ce:8a:4a:6d:d8:02:4e:21:
5f:ad:14:ea:a3:37:e8:63:20:16:d7:a3:2c:0a:d3:c9:7f:5c:
9c:d9:e1:c3:1e:c7:26:2b:8f:9c:38:b6:a6:72:2f:d5:c9:28:
1c:02:40:0f:27:af:1f:81:d6:86:34:95:3e:6a:e8:84:1f:66:
0e:2c:2b:7b:da:28:b7:ff:3a:bd:03:6c:e7:72:0d:89:93:54:
31:92:60:16:15:df:ea:de:d9:cc:d6:04:d9:65:46:6d:06:bb:
bb:a2:f7:58:44:d8:94:b6:4d:12:96:15:7c:5e:56:b2:37:4c:
9b:54:44:83:54:58:87:80:d7:4d:ea:d2:c9:0b:41:d0:9d:76:
cd:d1:98:9a:0e:28:72:a0:b4:d0:d2:a9:8c:8f:7e:f1:15:4d:
f3:16:f8:92:19:e4:40:01:5c:04:85:a0:00:71:42:e5:99:54:
d7:1f:70:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:07 2026 by rpki-client