Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
File: 1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa (raw, json)
Hash identifier: Mh680ZY2ChrO+GfuIEgRaqxs3CLqegHdugFGACHonPU=
Subject key identifier: DA:D4:B5:EA:58:3A:58:49:F8:99:07:96:97:D6:0D:9C:4E:11:16:0E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7AF4DE4AB8F7BDEC769BF83D0EC63547B3DB5757
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
Signing time: Fri 07 Aug 2026 05:50:29 +0000
ROA not before: Fri 07 Aug 2026 05:50:29 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 194.133.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f4:de:4a:b8:f7:bd:ec:76:9b:f8:3d:0e:c6:35:47:b3:db:57:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:29 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=fa78cbcb970a09fc2f457ad91a6f57fbdcf1e2628c576e83f569b851fc833096, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:c9:2a:0f:e8:20:8b:69:d5:c1:6c:87:57:
7a:6a:24:61:36:71:89:b2:c2:70:b3:75:94:04:5e:
48:d2:ae:7b:ab:8d:7b:b0:a2:47:57:24:4a:7a:ba:
93:34:a6:ec:0b:fe:35:4e:bc:96:1e:64:f7:a7:10:
c6:b4:a3:61:df:6e:e7:26:bd:ad:2f:32:2a:80:02:
8f:1b:36:cc:c8:37:22:ac:17:be:b1:d1:c8:c8:5f:
4b:dd:8e:34:7b:97:b3:ce:d1:20:54:68:2a:d7:14:
8f:c5:cb:64:74:bd:33:9e:ee:13:11:92:93:7d:c9:
35:54:61:b1:44:7e:f8:5d:e3:b3:f3:d4:4c:1f:f3:
79:9d:1e:c9:89:b1:b6:38:96:06:1e:1c:f7:ab:30:
e7:23:f8:ac:68:00:1e:bf:28:3c:7a:ac:6e:d3:1c:
de:27:f8:1c:3d:23:e7:2e:c9:c7:71:a0:7a:6a:8b:
ec:c2:9c:3a:27:19:e0:cc:0a:05:99:30:9e:6c:76:
2d:7f:96:17:2d:62:61:ff:b2:1e:02:e2:c8:6e:ca:
e7:da:25:7b:35:5d:60:ae:0a:00:1b:45:76:29:a7:
a8:05:c7:e9:e3:9d:55:85:53:9a:50:74:1d:b8:e5:
9c:19:5b:0f:46:8f:51:de:9c:dd:57:da:b7:0d:ed:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D4:B5:EA:58:3A:58:49:F8:99:07:96:97:D6:0D:9C:4E:11:16:0E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.133.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:93:47:31:d5:14:fe:a0:df:21:14:b4:2a:f8:f9:63:2d:b7:
99:d7:5e:d2:bf:76:2e:43:9b:7f:9b:bd:1c:57:03:b1:0a:6b:
fb:30:de:d5:6e:a0:6e:94:e9:23:94:c4:ad:73:82:f3:30:bb:
c0:7f:39:52:ea:09:af:97:d8:ca:ff:6a:4a:eb:69:68:46:5e:
8c:48:01:9d:75:76:20:df:75:e7:d9:b0:38:e8:b9:a2:b5:a3:
66:7b:bd:cf:52:91:eb:a9:f4:e3:03:77:23:5b:3b:2b:78:90:
ac:08:4a:e2:38:d1:e9:5b:dc:e8:ef:41:9f:df:44:ba:3f:77:
ec:02:6d:87:92:ed:cd:fc:86:8c:5a:cf:ed:8a:44:2b:db:70:
86:ba:6a:8b:d3:ac:5a:72:6a:33:06:08:f6:1f:be:43:44:e6:
25:8a:e1:52:37:2e:ad:49:cb:12:b6:62:6b:f6:d7:80:14:c2:
9c:bb:39:54:21:e9:f5:75:3e:2b:af:1e:c2:0e:5b:fb:33:fd:
1f:f2:fe:45:14:15:0c:51:26:39:4e:7d:be:f0:69:0c:c0:24:
07:71:3f:4f:17:d7:84:e1:34:25:10:ea:71:97:ff:20:a5:c2:
02:61:94:2c:ec:cf:3f:09:c4:60:58:d9:66:97:0d:83:a1:b1:
2b:63:a1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:07 2026 by rpki-client