Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/695716ab-c4db-435d-95fe-4143be62030e.roa
File: 695716ab-c4db-435d-95fe-4143be62030e.roa (raw, json)
Hash identifier: +xpyR8HakFcxnw1XBRct7DUf+TkX3/VozoYw5+Hf50g=
Subject key identifier: A2:51:2E:CA:63:F9:6C:54:F6:C8:90:7C:4C:12:95:05:8E:3F:C1:B0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6AE1F41E156831E9C3BA75A0A81BAB051844D8B0
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/695716ab-c4db-435d-95fe-4143be62030e.roa
Signing time: Sat 08 Aug 2026 01:00:14 +0000
ROA not before: Sat 08 Aug 2026 01:00:14 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 139.79.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e1:f4:1e:15:68:31:e9:c3:ba:75:a0:a8:1b:ab:05:18:44:d8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 8 01:00:14 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=d33d1159ffcc5071111f4a8a5075bd7712865410e9f62a5cce0d7b56d3afc375, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9d:d8:c2:fd:90:c7:31:82:33:2f:29:36:30:
61:8e:ad:26:6d:60:15:f2:a2:09:2e:eb:47:47:e9:
15:42:fb:04:d4:f9:af:3f:88:48:5f:8d:09:c9:a4:
bc:d0:f3:87:4d:91:0e:be:29:ab:e0:34:eb:34:a8:
ac:68:0f:01:a9:f3:4a:d3:38:9b:e3:6b:95:17:89:
1e:73:64:46:f8:30:f5:96:19:a1:1f:38:91:d6:7e:
f6:2f:c3:4b:fd:7a:37:30:be:73:a5:38:fe:78:55:
b6:49:ec:f8:10:ce:fe:08:04:5e:d9:4a:4b:34:40:
fb:5e:c4:90:e8:51:81:99:e5:95:b6:c5:d3:9f:d9:
69:d9:09:ae:dc:0c:a2:d6:a8:9a:87:2e:cc:c6:f6:
3f:79:77:aa:5f:35:64:75:ae:c2:fc:c9:e3:79:3a:
6c:45:95:a0:76:f9:f0:27:ed:7a:71:13:38:50:71:
bc:2f:3d:19:29:22:f4:fa:f8:53:36:69:86:ac:f9:
af:63:ed:68:ac:6c:4d:8a:ba:d9:fd:4f:f4:e6:d3:
8b:cd:11:ac:50:0c:9d:9f:f5:98:8e:9c:45:cc:e1:
05:87:e3:1b:fb:1a:0c:77:7e:4f:b5:fd:37:61:8c:
b9:44:8a:ca:65:50:c7:86:9a:b2:09:02:90:18:fd:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:51:2E:CA:63:F9:6C:54:F6:C8:90:7C:4C:12:95:05:8E:3F:C1:B0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/695716ab-c4db-435d-95fe-4143be62030e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.79.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:99:87:bc:84:60:54:fb:5e:01:9c:36:05:ae:36:46:71:94:
4f:ad:8a:b4:f6:a5:c9:31:f2:ad:54:c7:e2:bd:ff:e2:54:ee:
62:c9:68:66:fd:8c:c2:1e:7b:ac:7c:d0:46:7f:5e:8b:2f:05:
71:10:67:1c:36:c6:8c:f8:dc:36:eb:aa:28:64:10:c7:cf:97:
64:66:48:ba:ee:34:72:a7:a8:20:1a:dc:68:b3:55:28:81:ec:
03:c5:e6:1c:fa:01:d0:7c:9b:9d:a3:3a:60:22:a6:bd:e8:c0:
21:98:b6:9e:df:ae:38:6a:2e:01:32:f6:da:a0:9a:4d:63:4f:
d1:e0:d5:7c:3b:3f:a5:ea:8d:9d:fc:1f:aa:9a:45:60:a2:7a:
4c:99:07:01:2d:28:1a:f0:cc:96:15:c1:cd:6f:51:3c:c1:ae:
f3:fe:9f:f3:aa:06:2c:f5:0e:5d:87:01:3c:90:52:5b:9d:34:
27:bc:d3:c4:1d:c7:70:ee:4c:47:0b:41:2c:8b:ff:ff:d6:65:
bc:64:5a:8b:88:87:13:b9:70:9d:31:9c:14:1f:77:f5:cc:b6:
05:4c:da:47:b3:e5:79:3d:4a:a2:1f:21:cf:54:61:64:ee:61:
66:f1:44:be:9a:6d:89:56:c3:f1:e4:08:bc:4e:24:e7:fd:c7:
63:d4:5f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:03 2026 by rpki-client