Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/238dbfbb-0e18-45e0-ba91-6e88bb50802a.roa
File: 238dbfbb-0e18-45e0-ba91-6e88bb50802a.roa (raw, json)
Hash identifier: U4KpscMreoHP8XEfGS8vRiC7MhRu4agvhRVWHZHcY2I=
Subject key identifier: A2:11:8A:F8:EA:0B:D1:C7:45:74:0A:23:A6:AE:C7:F6:36:F4:EF:7E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 63178C4B159F1014273613E9594D18758C808123
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/238dbfbb-0e18-45e0-ba91-6e88bb50802a.roa
Signing time: Fri 07 Aug 2026 06:00:21 +0000
ROA not before: Fri 07 Aug 2026 06:00:21 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 200.197.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:17:8c:4b:15:9f:10:14:27:36:13:e9:59:4d:18:75:8c:80:81:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 06:00:21 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=cfa68c455ff79d9f6de948c370640c0b51b2c4d95f1df665f55d3d71d8b3122c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:9c:20:bf:0c:ee:15:83:b4:79:18:5e:ed:
e6:f0:20:ce:14:7c:ab:52:6c:ad:41:61:46:25:57:
52:63:2f:34:ed:48:b8:ee:f2:b0:6c:10:8f:a2:46:
73:29:ea:0d:9c:e7:69:ad:cb:83:66:2e:21:46:2a:
5d:90:ff:69:2a:7b:c5:ce:db:d5:be:ff:b9:8d:57:
ee:7b:99:00:16:80:36:c6:f0:9c:c8:01:cd:23:7c:
ee:66:80:7b:3b:da:98:e5:83:bc:c9:ad:9d:0c:51:
7c:87:f9:b5:81:c0:32:f4:84:6f:e8:40:f5:28:a4:
0d:e9:cf:b7:a8:f8:43:bf:88:d3:27:32:07:6b:7d:
04:ef:9b:de:4e:44:ae:71:87:8a:e4:6b:90:11:da:
bb:eb:ac:dd:55:f6:bc:a5:eb:17:16:9c:ff:b9:c7:
5c:c3:9c:a9:1c:23:a9:c9:33:76:7e:8b:87:0a:1a:
6a:3b:c3:1f:2f:3b:63:48:47:e1:15:6a:23:e7:ae:
ac:82:a3:b8:54:dd:d0:bd:be:d2:c1:67:82:4d:d0:
29:c0:66:fc:db:45:28:92:53:6a:27:08:c5:96:13:
26:fd:bb:39:5b:5d:9e:43:6a:ee:2f:56:0b:80:c7:
cf:42:e6:f2:f3:5f:fb:bd:5b:cd:3f:52:6f:4d:03:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:11:8A:F8:EA:0B:D1:C7:45:74:0A:23:A6:AE:C7:F6:36:F4:EF:7E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/238dbfbb-0e18-45e0-ba91-6e88bb50802a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.197.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:16:a3:b6:bd:7f:35:00:99:fd:da:c9:b3:c5:8d:a5:ab:a7:
6e:7d:d9:eb:a6:5b:1e:14:0d:70:07:20:da:c1:f8:53:6a:0c:
81:3d:aa:92:5d:df:cb:63:5a:b1:83:c0:1d:38:30:82:c8:fc:
d2:19:9c:3c:88:0b:db:72:91:52:43:ed:c8:db:0c:8c:05:7a:
cd:9c:8e:f7:47:87:31:3e:07:bb:09:79:dc:70:5e:ef:35:1a:
84:83:65:dc:db:2d:51:72:42:6b:4e:fa:01:e9:1d:df:9b:02:
9c:d8:c0:ba:eb:10:70:c6:3a:42:cc:f8:15:a0:86:76:f1:3c:
52:53:59:9e:96:a6:43:65:29:28:09:d9:57:b3:12:1c:dd:73:
58:7b:c7:36:00:18:77:06:4a:0d:1b:72:9f:6f:0a:d2:63:4e:
5d:c2:c8:1e:09:1c:92:d9:70:14:10:71:f7:55:a9:a2:1d:55:
f6:75:b3:65:97:c7:87:16:55:40:c9:a0:25:b7:56:2c:bc:4c:
97:35:26:0e:6f:80:6d:b2:87:1e:1a:1e:93:02:2a:5e:f2:82:
5a:43:46:52:33:e8:c7:33:f0:dc:55:e9:3f:53:a4:82:ef:e4:
5b:fa:20:94:5f:da:0e:7f:e8:89:2a:31:4d:3d:fc:09:ea:11:
ac:40:6a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:54:15 2026 by rpki-client