Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa
File: 3558ad32-215e-47a4-9f5b-477ec71e940f.roa (raw, json)
Hash identifier: r5eCn+jf/gX3yOPYKloOgrpOheDRwciWqy8AxbjFhJs=
Subject key identifier: F9:B4:6F:B2:33:2C:86:8A:FB:9E:3A:AE:93:20:E3:A2:21:09:99:24
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 50D1D58DB68E13AC437BCD5B0CA41C02330B1AF7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa
Signing time: Fri 07 Aug 2026 05:50:47 +0000
ROA not before: Fri 07 Aug 2026 05:50:47 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a01:578:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 22:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d1:d5:8d:b6:8e:13:ac:43:7b:cd:5b:0c:a4:1c:02:33:0b:1a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:47 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=5e8bcb64283668e67ecc3b936ce21a9434489a11cb472fa23ebc455471d00ac1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:71:7a:ca:5e:99:10:11:71:9f:c4:26:72:
88:96:47:c9:88:6a:12:d6:53:36:c6:03:54:73:9c:
69:83:0e:11:21:72:29:f9:b5:ec:89:57:66:4a:12:
7d:c7:96:30:94:7e:eb:e7:63:c7:55:fa:63:e5:d9:
b3:9c:9b:58:43:5c:12:17:2a:91:07:5e:2e:a3:d2:
e7:01:9a:8b:a0:81:f1:58:60:1d:68:3d:fb:a6:5e:
9a:7a:bd:44:ae:91:ef:83:1f:d3:59:28:91:c8:94:
61:a5:5a:0e:70:da:08:5d:06:03:f5:0f:a7:42:0f:
d6:9b:20:56:1c:75:de:d0:f0:c8:ce:09:56:31:e1:
c6:97:2d:2c:06:a7:3d:0f:50:6c:28:16:e2:d3:28:
ef:fe:25:0f:39:c1:9c:82:d8:90:75:4e:30:8c:60:
30:15:48:15:3e:31:5d:2e:fc:60:b7:66:18:4d:0b:
1f:9f:95:44:ca:e3:80:fc:16:5f:4c:d6:d0:11:20:
0a:9d:40:a2:7c:a9:94:1c:33:f7:b4:e9:c6:1f:71:
6f:2b:fd:f8:78:9f:c0:c1:67:4e:b9:5f:b5:94:e3:
77:8a:8e:3b:87:d8:f1:84:0a:ef:4f:c9:54:10:fe:
a8:b7:cb:a5:69:e4:ad:d3:37:d2:11:f2:98:c9:24:
42:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B4:6F:B2:33:2C:86:8A:FB:9E:3A:AE:93:20:E3:A2:21:09:99:24
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3558ad32-215e-47a4-9f5b-477ec71e940f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:3::/48
Signature Algorithm: sha256WithRSAEncryption
2f:53:3a:06:3b:67:22:4c:56:f5:10:8d:93:d8:93:5d:df:c8:
b9:a0:3c:08:85:e6:bd:29:0c:e0:83:81:ac:b3:34:ea:44:bb:
d8:23:18:4c:0e:32:1a:71:67:73:fe:75:b8:43:f9:6d:41:8e:
cc:2d:17:87:18:13:0f:c0:d0:37:ac:13:75:1b:97:f2:7f:3c:
49:2d:f7:6b:d2:68:8b:62:dd:ae:d1:b3:df:65:d5:94:d8:80:
5f:24:f7:4b:66:bf:1b:ff:7f:1a:f0:c9:3b:ce:c9:dc:f5:07:
17:fa:aa:44:5d:3e:ce:af:35:f0:71:0a:c1:85:52:b9:6d:dc:
82:19:6b:4a:43:d7:dc:2a:94:dd:cd:b3:b6:49:2e:31:e1:e6:
1c:ca:ea:e3:7c:61:c9:15:6f:91:6a:a4:6f:d9:5c:4b:02:52:
fa:16:7b:2b:d0:51:5e:6b:7f:aa:19:56:5c:41:16:77:c8:5e:
cb:9d:fc:6b:dc:28:59:99:02:b7:eb:a9:8a:b4:c6:34:5d:8e:
54:7d:8a:8b:76:0e:0e:ea:05:88:17:a9:3b:8d:f8:0a:0d:54:
52:b8:9b:86:70:68:c9:60:f2:9b:78:e1:c1:e6:6c:65:a2:92:
52:7d:fa:a1:26:3d:b2:45:6d:d4:b3:c4:24:53:c0:a9:44:d6:
f0:5b:25:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 06:55:45 2026 by rpki-client