Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44c4496c-63e1-49fc-828b-d77f94e0a789.roa
File: 44c4496c-63e1-49fc-828b-d77f94e0a789.roa (raw, json)
Hash identifier: gNhcWlXnyD8IEBqOFT2r3MsLq6WEyYFB0NNelRYlWmA=
Subject key identifier: F4:92:D4:FA:DF:99:C9:29:81:D2:88:AA:CF:90:65:49:6B:FE:18:5B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1EDFBCA5EA2D9D1DDA42640649EC08D51191D7C6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44c4496c-63e1-49fc-828b-d77f94e0a789.roa
Signing time: Sat 08 Aug 2026 01:00:07 +0000
ROA not before: Sat 08 Aug 2026 01:00:07 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 213.72.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:df:bc:a5:ea:2d:9d:1d:da:42:64:06:49:ec:08:d5:11:91:d7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 01:00:07 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=eaa1acb617ff3be72252c9eeb8e7c56c46a5d78afcda7f085aae4eee5b0ae40a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:0d:f0:f9:4a:2b:53:9b:cb:57:df:7b:fd:
0c:ea:ec:d0:6a:cb:28:26:ef:d3:24:bb:8b:ec:e2:
5e:5b:e1:f8:ef:3b:55:8d:02:58:85:f3:d4:49:dd:
43:92:53:a7:59:31:bd:5a:da:a7:41:37:6c:bb:60:
11:32:60:75:80:4f:10:d9:81:5c:43:ff:2d:91:cc:
16:d2:fb:36:fd:a4:b8:43:e0:2f:75:57:7d:b1:3c:
11:7e:33:0e:4b:a3:04:66:e2:36:2e:e7:f7:c7:bb:
b7:fc:b7:02:46:dd:c4:af:c0:e7:6f:94:af:fd:6e:
4d:7e:ca:f0:e8:6e:f7:28:01:6d:fc:0f:93:f9:99:
e0:71:df:e2:7e:1f:3e:9a:a6:05:df:77:c9:cf:9a:
3e:f1:48:07:b4:69:52:5b:5b:ed:b5:89:d2:38:26:
b2:50:02:0e:0f:f9:a9:40:54:27:cd:45:3c:14:7a:
8b:16:b2:7a:09:c4:00:4b:a9:49:2b:ae:48:23:6d:
fa:82:9b:be:e7:69:de:2a:52:7c:8f:f0:46:50:8a:
62:5a:cd:24:93:33:0e:59:87:28:3c:03:e8:c9:ce:
73:9f:0e:85:39:20:ef:ec:fe:da:45:ff:e3:ea:89:
52:73:d3:af:34:9b:85:a9:ee:a3:f4:dc:b4:ff:fb:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:92:D4:FA:DF:99:C9:29:81:D2:88:AA:CF:90:65:49:6B:FE:18:5B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44c4496c-63e1-49fc-828b-d77f94e0a789.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.72.128.0/17
Signature Algorithm: sha256WithRSAEncryption
3f:2d:21:11:5a:51:72:9e:56:52:ff:a5:2c:1e:36:c8:80:86:
9a:9e:34:6c:d9:11:ea:8d:6c:0e:1a:1e:22:0c:ba:cd:57:73:
d9:7c:dc:c4:4a:2c:f8:88:bf:a8:8f:c7:d5:2e:66:f4:5c:e1:
ce:1c:a9:b9:a0:e1:cb:43:d7:64:15:4b:87:6c:a2:54:dc:94:
f6:8c:3c:2a:4a:99:6b:00:dd:e0:41:a2:21:4a:70:ea:e4:2e:
c5:75:e0:78:40:0b:1a:53:27:5b:ab:7f:0c:bf:7e:ce:48:a8:
82:da:d6:6e:d6:e1:f1:90:bf:0c:e5:7d:52:6b:2d:cf:71:79:
42:d2:f9:f3:2d:dc:7a:58:3c:9f:b9:16:b5:e3:fe:f0:d5:58:
ea:66:43:1b:28:8f:59:d0:68:fa:92:3a:60:3b:85:0f:7a:7c:
cd:3e:2a:4e:c5:d3:68:bb:e0:72:34:e1:11:1c:dd:67:e7:f0:
27:5f:5e:7f:4a:f3:a8:54:29:8c:d2:f0:28:39:f5:28:88:9b:
87:f7:b5:57:1d:d5:95:d4:c2:f9:62:b5:a0:c5:67:79:a4:49:
8f:ed:81:d5:21:91:7b:31:5c:96:97:cf:3e:15:12:ff:fb:cd:
c9:12:75:b8:72:88:85:89:12:6f:30:a1:ac:08:4f:11:97:6a:
34:27:ce:2e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUHt+8peotnR3aQmQGSewI1RGR18YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDgwMTAwMDdaFw0yNjExMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQGVhYTFhY2I2MTdmZjNiZTcyMjUyYzllZWI4ZTdjNTZjNDZhNWQ3OGFmY2Rh
N2YwODVhYWU0ZWVlNWIwYWU0MGExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALrxDfD5SitTm8tX33v9DOrs0GrLKCbv0yS7i+ziXlvh+O87VY0CWIXz1End
Q5JTp1kxvVrap0E3bLtgETJgdYBPENmBXEP/LZHMFtL7Nv2kuEPgL3VXfbE8EX4z
DkujBGbiNi7n98e7t/y3AkbdxK/A52+Ur/1uTX7K8Ohu9ygBbfwPk/mZ4HHf4n4f
PpqmBd93yc+aPvFIB7RpUltb7bWJ0jgmslACDg/5qUBUJ81FPBR6ixayegnEAEup
SSuuSCNt+oKbvudp3ipSfI/wRlCKYlrNJJMzDlmHKDwD6MnOc58OhTkg7+z+2kX/
4+qJUnPTrzSbhanuo/TctP/7sNsCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBT0ktT6
35nJKYHSiKrPkGVJa/4YWzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NDRjNDQ5NmMtNjNlMS00OWZjLTgyOGItZDc3Zjk0ZTBhNzg5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9VIgDAN
BgkqhkiG9w0BAQsFAAOCAQEAPy0hEVpRcp5WUv+lLB42yICGmp40bNkR6o1sDhoe
Igy6zVdz2XzcxEos+Ii/qI/H1S5m9FzhzhypuaDhy0PXZBVLh2yiVNyU9ow8KkqZ
awDd4EGiIUpw6uQuxXXgeEALGlMnW6t/DL9+zkiogtrWbtbh8ZC/DOV9Umstz3F5
QtL58y3celg8n7kWteP+8NVY6mZDGyiPWdBo+pI6YDuFD3p8zT4qTsXTaLvgcjTh
ERzdZ+fwJ19ef0rzqFQpjNLwKDn1KIibh/e1Vx3VldTC+WK1oMVneaRJj+2B1SGR
ezFclpfPPhUS//vNyRJ1uHKIhYkSbzChrAhPEZdqNCfOLg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:42:59 2026 by rpki-client