Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa
File: 383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa (raw, json)
Hash identifier: rbtLlXDYVefZHV6KM22oXNMnNT8CG+F06SQaboluH9g=
Subject key identifier: 93:3F:DB:97:CB:BF:01:BC:E9:82:C5:30:DA:0C:1F:71:A7:F8:09:D4
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4790A7E3FC9277E7351E02C8021B66B14C2903DA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa
Signing time: Fri 07 Aug 2026 05:50:36 +0000
ROA not before: Fri 07 Aug 2026 05:50:36 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 200.224.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:90:a7:e3:fc:92:77:e7:35:1e:02:c8:02:1b:66:b1:4c:29:03:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:36 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=6e2c0f4d529d17b95dd7d403bbd28beaa72a5b7d8f8638bc4ef3e4f846381cc5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:07:9f:ef:a0:5a:3d:6c:ad:fd:03:3b:bf:
71:24:74:96:fb:b7:81:8c:2f:a4:f6:d4:38:49:77:
92:87:ce:93:c8:2f:e0:84:5e:a1:39:ec:b5:cd:2c:
a7:b5:75:58:ca:0b:1b:49:6a:a1:a0:33:52:24:8b:
65:24:8b:2d:8c:78:bd:6d:7e:6f:08:bd:b9:81:6c:
c9:74:32:75:22:ba:20:cd:84:32:44:d6:fd:69:b5:
73:cc:18:c6:1f:9a:27:86:6c:e0:a6:8e:23:fe:e1:
f8:e2:9e:4a:5d:15:2f:12:a1:d9:9c:7b:26:4d:52:
9b:74:11:00:48:f2:db:17:d2:be:2f:e9:6b:4a:a4:
15:e3:4e:47:bb:ac:f6:2f:eb:54:6e:32:61:fd:29:
d0:1b:66:60:c5:59:7f:50:af:79:8e:07:68:f3:22:
a7:de:f1:9d:f1:59:92:c9:3f:3b:ca:52:58:4e:53:
af:c7:e5:26:ef:16:3e:f7:dd:db:8f:fa:6a:95:99:
7d:dc:14:18:2a:4a:60:25:55:23:e3:c6:9a:3a:df:
7a:45:10:c6:a4:b9:fd:59:8c:b5:31:85:52:db:af:
14:5c:ba:45:b1:f5:3d:81:17:1c:6c:b7:ba:3b:4f:
e0:e4:fb:d9:83:c8:5d:31:89:1e:dd:65:d0:25:80:
cb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3F:DB:97:CB:BF:01:BC:E9:82:C5:30:DA:0C:1F:71:A7:F8:09:D4
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.224.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:01:fb:3d:6f:82:aa:05:8b:62:3f:f6:82:ed:a0:e2:41:d4:
2c:eb:07:58:02:d2:cc:fe:df:f4:c0:81:e6:c4:12:3b:ff:05:
e5:38:41:a0:ff:8a:71:b2:ea:1c:85:fc:8d:07:6a:41:06:5a:
44:80:c5:9e:ca:83:7e:72:39:fc:68:fc:0e:b2:fc:c0:2b:20:
42:f0:6e:25:ed:02:37:9d:12:84:d5:b7:2d:c2:e8:e1:fa:08:
3c:9e:98:75:9b:94:32:d4:3c:3e:3a:9a:02:e0:a3:6f:cd:4b:
a4:75:91:bc:40:e2:be:fe:ca:7b:af:bb:ba:89:74:b7:db:e9:
79:02:cb:bb:7d:77:ab:29:f7:e2:d4:34:99:97:63:ff:b8:15:
b2:12:a1:ad:17:1a:96:bc:9e:7a:5c:76:22:39:f3:d2:99:44:
c0:b5:0e:c7:ac:29:da:c8:6d:37:18:26:2f:10:c9:f3:40:a7:
da:a7:67:3d:01:f9:0c:42:32:ee:28:74:87:59:6b:03:15:2f:
b9:6e:f0:2f:7a:05:7e:ee:57:e8:78:1d:85:bb:0f:ee:5e:00:
19:b9:29:fa:3f:74:42:c0:ed:49:37:5c:c0:04:8a:09:48:2e:
0d:1c:e9:30:cf:1d:56:f2:21:11:e4:30:25:ea:f6:e0:19:11:
c7:8f:c5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 13:41:18 2026 by rpki-client