Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eb66819-e335-446d-8ca8-7436f3cd196d.roa
File: 4eb66819-e335-446d-8ca8-7436f3cd196d.roa (raw, json)
Hash identifier: 2/oSX+2PTbJPSQS1egsaX2LrnZ1KVA+3bt7EzeK6MsM=
Subject key identifier: DD:FB:9F:EB:5E:B1:BD:FE:8E:26:1D:21:AF:8B:A5:76:16:87:AE:59
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 47519656D6F3989B95F3A5E649B59FE73F2B81E1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eb66819-e335-446d-8ca8-7436f3cd196d.roa
Signing time: Fri 07 Aug 2026 05:40:14 +0000
ROA not before: Fri 07 Aug 2026 05:40:14 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 143.65.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:51:96:56:d6:f3:98:9b:95:f3:a5:e6:49:b5:9f:e7:3f:2b:81:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:40:14 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=af5645ca4bcdcbc98457e572facba8fda15da9354871ad9d2fb86721a6b02942, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0f:59:df:ce:c8:4f:5d:2d:d3:3f:37:73:b8:
92:f8:e2:34:d9:3d:f3:0c:8f:60:69:f6:e5:3a:61:
7c:be:ee:dd:91:02:38:b1:6e:28:2c:f6:74:d4:de:
82:06:f5:24:5a:be:d9:19:54:67:df:da:8d:47:39:
9d:65:19:b1:dd:c4:d8:11:b8:00:fb:89:72:a0:76:
b6:a4:6f:47:a0:5d:e8:cf:51:de:bb:62:80:60:d5:
cd:9b:39:23:9f:ba:8a:20:4c:06:90:77:33:e0:48:
80:5b:0b:be:c4:55:17:9d:81:6c:d3:22:56:4c:76:
d8:14:7c:52:b6:62:7d:9f:02:8b:0b:e7:e9:c0:84:
f2:03:03:35:db:ae:68:eb:c6:c3:65:31:29:24:41:
ef:1c:e9:0b:30:ed:85:a3:ac:c8:33:cb:9c:bf:be:
88:5c:4c:7d:af:cd:5a:b9:d6:52:0c:24:53:1f:6e:
a7:46:1e:44:a2:75:0a:ff:67:40:b3:f6:3f:b7:6e:
90:37:19:e9:be:e5:9a:9f:f1:f6:65:25:16:38:f1:
eb:e3:1a:09:08:b3:91:88:9d:35:b4:9b:2e:f9:d8:
a2:a2:b2:a1:c8:9c:3a:8a:c2:67:a4:96:70:89:0d:
3f:31:38:a1:54:5a:13:7c:cf:ac:81:c7:f7:de:73:
0b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FB:9F:EB:5E:B1:BD:FE:8E:26:1D:21:AF:8B:A5:76:16:87:AE:59
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eb66819-e335-446d-8ca8-7436f3cd196d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.65.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a1:80:a7:e4:96:98:52:d7:a4:78:d0:de:b8:c3:d6:20:91:33:
92:df:cc:74:19:bb:80:e3:0f:dd:d0:b0:3b:5d:07:50:c0:c4:
2b:3d:1d:34:4e:05:58:36:11:ac:03:81:02:a6:4f:e0:dd:9b:
26:b2:79:99:ca:e3:6e:c2:88:0b:55:04:81:3a:ad:78:2a:ed:
79:59:95:30:2f:ee:07:81:fb:75:aa:73:a8:da:7f:11:25:86:
b9:9b:07:7b:bd:33:31:f8:4f:b8:ec:33:94:d5:64:0d:80:25:
e9:d9:fb:b9:09:36:b7:62:0f:0c:27:92:a3:25:e4:c8:de:84:
84:d6:53:83:e9:de:be:2a:80:25:a3:ee:e4:df:ba:ed:15:7c:
08:c4:6e:e1:8a:89:e3:ee:0a:48:00:d7:52:42:d3:d9:22:a7:
ab:1b:65:69:83:b4:01:4e:b1:21:6a:8b:25:e2:54:3a:84:3e:
e6:29:d9:8c:2e:c1:15:aa:81:09:0d:db:f2:f8:7c:ad:c4:e7:
5e:d7:97:e7:00:ce:28:0b:5d:38:6d:65:24:c7:cc:9d:12:98:
c1:67:cf:5a:c6:64:6b:7c:73:67:f8:83:4d:4b:0f:60:63:bd:
d0:39:8b:79:d7:20:65:c7:fd:cc:5b:d0:51:1f:fe:fb:61:0c:
16:f4:8d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:11 2026 by rpki-client