Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/57870f13-82ea-4955-953f-742413b6a651.roa
File: 57870f13-82ea-4955-953f-742413b6a651.roa (raw, json)
Hash identifier: 3KGaLZ16DvB/7trOTeMehNk58zBCk+1866vCCi8vSpw=
Subject key identifier: 24:E6:A1:A1:E3:77:22:FC:EA:95:2F:CA:43:92:E7:4C:F1:61:D4:50
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 73375B4BECB2D432085C12057AF09535CE49BFF1
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/57870f13-82ea-4955-953f-742413b6a651.roa
Signing time: Sat 08 Aug 2026 01:00:11 +0000
ROA not before: Sat 08 Aug 2026 01:00:11 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a01:578::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:37:5b:4b:ec:b2:d4:32:08:5c:12:05:7a:f0:95:35:ce:49:bf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 01:00:11 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=0ce18e2aef2f26b07c94e85037c1c1660bc48fffac7c439124b0faa19a1c0c31, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:25:69:a1:77:c3:8d:ba:99:de:40:b9:11:
b7:17:00:43:e9:a1:da:de:19:2b:1c:da:c6:a8:5a:
93:f1:6b:68:b5:b7:da:f7:0e:5a:32:e5:64:30:87:
28:1b:bf:83:14:21:9f:e8:da:a9:82:95:a0:61:76:
24:4b:39:9f:d5:20:44:65:69:2d:f6:ff:74:3c:67:
88:a7:a4:2c:fa:da:f8:59:b3:f0:18:19:9a:de:36:
41:98:39:b2:c0:ea:d7:f5:ea:ff:0b:d4:e6:56:53:
ee:62:b5:52:28:8c:8f:95:3a:2c:e5:6a:a9:86:ee:
44:f8:5e:32:1e:21:15:99:b3:5b:69:8a:bf:19:de:
75:1c:4c:df:28:fa:da:b4:9d:83:40:5d:a7:ee:7e:
4d:bd:ee:04:9e:56:04:0d:4b:4b:1c:0c:f8:50:60:
e2:b9:78:99:ed:f2:e2:fe:b5:cd:db:ec:26:f5:9d:
d1:0c:20:31:65:24:02:1c:9b:98:73:1b:87:44:53:
4f:e0:92:e0:31:cf:4a:67:c8:2a:f9:48:a2:71:ba:
8b:53:20:d3:a4:b1:fd:b8:b8:a9:9f:b1:86:72:f1:
fe:dc:85:bf:36:3c:35:d6:4d:6d:29:8e:f9:d2:41:
73:51:78:4d:c7:79:0e:0f:5d:26:54:3a:8e:47:76:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E6:A1:A1:E3:77:22:FC:EA:95:2F:CA:43:92:E7:4C:F1:61:D4:50
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/57870f13-82ea-4955-953f-742413b6a651.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578::/48
Signature Algorithm: sha256WithRSAEncryption
16:9e:a1:13:73:54:2c:82:de:11:69:04:ed:28:ea:69:77:94:
4b:a0:4c:07:20:cb:71:8c:e7:b6:09:88:b8:73:69:c2:0a:3b:
d4:d6:f9:11:71:3e:ca:d0:fc:3a:e6:42:74:c0:1e:46:4e:4b:
e7:5f:50:3e:0d:ef:72:f0:ab:71:73:76:fc:8a:50:07:c1:e8:
56:db:9f:47:82:31:ee:94:f5:0e:28:0c:45:44:2c:02:2e:20:
d7:64:3a:1a:61:bb:94:1d:2a:a6:12:9f:af:f7:86:14:cc:f4:
ed:05:95:18:67:74:df:09:ab:52:84:94:7f:b1:2b:47:2c:cd:
3b:d4:fa:75:a1:80:db:2e:74:3f:3f:6c:a9:55:4a:6e:7e:31:
e9:51:69:f5:17:10:26:c9:03:83:c9:c1:d8:b7:81:f0:26:12:
1b:58:de:df:73:db:6c:c4:c1:89:84:8b:79:8b:f9:58:b2:18:
19:9d:94:c4:b0:cc:95:73:bb:8b:a1:b1:b8:ff:7c:76:bb:49:
af:67:91:2d:44:90:78:b5:4f:47:eb:10:2b:29:df:3a:95:04:
2b:22:42:31:39:20:69:09:0e:af:d5:3a:cb:e9:33:6f:5a:22:
4d:a6:ed:e9:1a:69:e9:14:74:af:49:fd:b4:83:fa:c5:37:21:
92:08:aa:d2
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUczdbS+yy1DIIXBIFevCVNc5Jv/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDgwMTAwMTFaFw0yNjExMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDBjZTE4ZTJhZWYyZjI2YjA3Yzk0ZTg1MDM3YzFjMTY2MGJjNDhmZmZhYzdj
NDM5MTI0YjBmYWExOWExYzBjMzExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL4zJWmhd8ONupneQLkRtxcAQ+mh2t4ZKxzaxqhak/FraLW32vcOWjLlZDCH
KBu/gxQhn+jaqYKVoGF2JEs5n9UgRGVpLfb/dDxniKekLPra+Fmz8BgZmt42QZg5
ssDq1/Xq/wvU5lZT7mK1UiiMj5U6LOVqqYbuRPheMh4hFZmzW2mKvxnedRxM3yj6
2rSdg0Bdp+5+Tb3uBJ5WBA1LSxwM+FBg4rl4me3y4v61zdvsJvWd0QwgMWUkAhyb
mHMbh0RTT+CS4DHPSmfIKvlIonG6i1Mg06Sx/bi4qZ+xhnLx/tyFvzY8NdZNbSmO
+dJBc1F4Tcd5Dg9dJlQ6jkd2Vj0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQk5qGh
43ci/OqVL8pDkudM8WHUUDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NTc4NzBmMTMtODJlYS00OTU1LTk1M2YtNzQyNDEzYjZhNjUxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoBBXgA
ADANBgkqhkiG9w0BAQsFAAOCAQEAFp6hE3NULILeEWkE7SjqaXeUS6BMByDLcYzn
tgmIuHNpwgo71Nb5EXE+ytD8OuZCdMAeRk5L519QPg3vcvCrcXN2/IpQB8HoVtuf
R4Ix7pT1DigMRUQsAi4g12Q6GmG7lB0qphKfr/eGFMz07QWVGGd03wmrUoSUf7Er
RyzNO9T6daGA2y50Pz9sqVVKbn4x6VFp9RcQJskDg8nB2LeB8CYSG1je33PbbMTB
iYSLeYv5WLIYGZ2UxLDMlXO7i6GxuP98drtJr2eRLUSQeLVPR+sQKynfOpUEKyJC
MTkgaQkOr9U6y+kzb1oiTabt6Rpp6RR0r0n9tIP6xTchkgiq0g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:15 2026 by rpki-client