Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa
File: 383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa (raw, json)
Hash identifier: 2XOB+ZZpaQqvJ0NOcxjK5P3uXAITEw5UbbnylavWwCQ=
Subject key identifier: 73:D5:9E:E1:55:F8:BE:93:41:BF:DE:85:53:B0:E6:D9:45:58:D5:66
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 20F73256DD7DE8954E4765DFA73FE0AD5691797A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa
Signing time: Mon 26 Oct 2026 05:50:07 +0000
ROA not before: Mon 26 Oct 2026 05:50:07 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 200.224.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 16:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f7:32:56:dd:7d:e8:95:4e:47:65:df:a7:3f:e0:ad:56:91:79:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:07 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=06ef0d0730c4460a287e7017646e78c9a5658779c1c798a12b2a14fc83f78b8e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:34:66:97:2f:16:53:69:83:1f:69:a4:ba:96:
1f:e3:e3:da:b6:b0:a9:9e:1a:c0:40:d4:7d:21:92:
58:16:1d:f5:2e:c7:25:8a:24:55:de:bf:a4:20:90:
db:da:e4:e3:6a:68:da:9d:b1:6a:58:08:90:fe:7c:
66:60:30:a3:f5:2f:7f:98:a7:21:39:91:e3:25:3e:
e9:98:e4:ef:36:c3:81:96:f4:5c:a6:0a:ca:04:ac:
a0:e6:bf:df:bb:bd:ac:61:24:47:a8:99:0c:a1:c0:
ca:4b:2f:9d:6f:8f:d9:f7:df:ca:39:74:93:53:0d:
20:3a:25:94:9e:bd:0f:1a:c1:ed:82:8b:d1:8b:6e:
bb:be:57:ad:da:69:1c:9f:74:68:71:2f:d8:0e:80:
bb:f2:22:23:39:78:93:a5:cd:ba:c0:7f:a1:39:37:
ed:bd:6c:fb:60:a7:82:66:d1:d0:11:94:b6:1a:89:
6c:a8:ce:db:03:bc:4e:36:07:3a:08:42:a4:83:1d:
d2:6b:ff:b3:67:9f:9c:3b:80:e9:7b:ca:d9:70:c2:
ec:61:96:4c:05:97:f8:65:38:f2:8d:0c:04:13:dd:
fb:1a:7d:04:f4:f3:aa:f9:ad:c2:9f:09:74:80:6f:
16:c7:1f:b2:4d:b1:f8:ce:59:c2:09:7c:dc:91:03:
80:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D5:9E:E1:55:F8:BE:93:41:BF:DE:85:53:B0:E6:D9:45:58:D5:66
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.224.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:66:e7:93:89:3a:9d:a7:f9:f5:df:f0:e6:aa:1f:e9:06:a6:
34:42:97:09:27:74:fa:59:39:29:15:35:ba:c4:71:19:a0:6d:
6d:ed:55:50:17:32:88:ef:fa:f6:9c:13:38:d8:71:34:1f:fd:
81:1f:80:8d:a4:f3:ce:f4:54:9d:61:9a:29:fe:0a:8c:5f:c5:
f8:4e:35:ab:22:d7:df:a2:44:83:4f:31:e0:70:cb:85:fd:b3:
8a:d0:5e:0f:f3:2e:45:14:3a:f3:23:bd:07:40:cf:a5:d4:02:
80:a3:2b:5a:b8:d6:3c:b7:1d:14:26:4f:4e:da:e4:6c:e0:7f:
b6:c3:73:ba:11:e3:b1:cb:dd:36:71:b6:5e:52:62:2a:3b:31:
e9:df:5f:f5:aa:f5:58:6a:8a:ee:f4:68:14:d7:e9:12:3b:a0:
34:8d:2c:6d:8f:33:67:a3:2b:86:c3:cf:79:aa:a7:ed:48:27:
b4:d7:df:47:b4:bd:2d:5d:b5:90:e1:bb:49:20:49:26:f1:fb:
6e:b4:11:eb:3a:df:17:d1:4f:13:f6:8e:01:07:ae:09:45:3b:
61:ff:b1:d4:fc:36:b2:11:8a:cc:72:3c:c5:e6:fd:a3:3b:b0:
58:f0:c4:ad:34:34:61:bb:6a:0b:7a:57:1a:67:21:46:be:27:
4b:e6:32:41
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUIPcyVt196JVOR2Xfpz/grVaReXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTUwMDdaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDA2ZWYwZDA3MzBjNDQ2MGEyODdlNzAxNzY0NmU3OGM5YTU2NTg3NzljMWM3
OThhMTJiMmExNGZjODNmNzhiOGUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPE0ZpcvFlNpgx9ppLqWH+Pj2rawqZ4awEDUfSGSWBYd9S7HJYokVd6/pCCQ
29rk42po2p2xalgIkP58ZmAwo/Uvf5inITmR4yU+6Zjk7zbDgZb0XKYKygSsoOa/
37u9rGEkR6iZDKHAyksvnW+P2fffyjl0k1MNIDollJ69DxrB7YKL0Ytuu75Xrdpp
HJ90aHEv2A6Au/IiIzl4k6XNusB/oTk37b1s+2CngmbR0BGUthqJbKjO2wO8TjYH
OghCpIMd0mv/s2efnDuA6XvK2XDC7GGWTAWX+GU48o0MBBPd+xp9BPTzqvmtwp8J
dIBvFscfsk2x+M5Zwgl83JEDgGkCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRz1Z7h
Vfi+k0G/3oVTsObZRVjVZjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MzgzYzFmNmQtNGUwZS00ZTMzLWEyY2UtZjQ5Mzg2ZGNjMWYxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMjgMA0G
CSqGSIb3DQEBCwUAA4IBAQCAZueTiTqdp/n13/Dmqh/pBqY0QpcJJ3T6WTkpFTW6
xHEZoG1t7VVQFzKI7/r2nBM42HE0H/2BH4CNpPPO9FSdYZop/gqMX8X4TjWrItff
okSDTzHgcMuF/bOK0F4P8y5FFDrzI70HQM+l1AKAoytauNY8tx0UJk9O2uRs4H+2
w3O6EeOxy902cbZeUmIqOzHp31/1qvVYaoru9GgU1+kSO6A0jSxtjzNnoyuGw895
qqftSCe0199HtL0tXbWQ4btJIEkm8ftutBHrOt8X0U8T9o4BB64JRTth/7HU/Day
EYrMcjzF5v2jO7BY8MStNDRhu2oLelcaZyFGvidL5jJB
-----END CERTIFICATE-----
Generated at Tue Nov 3 22:23:05 2026 by rpki-client