Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa
File: 7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa (raw, json)
Hash identifier: wKHQ49hURsaUf4oI9gyjPbVANMpd/MQhSwZZqAkHcPA=
Subject key identifier: 7C:B8:CF:3B:27:B8:3B:E9:07:55:F8:13:EA:52:5C:97:3A:A7:D3:B9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 59BA1BE231184C4DB2B2173AF990A1040DB084AA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa
Signing time: Fri 07 Aug 2026 06:00:17 +0000
ROA not before: Fri 07 Aug 2026 06:00:17 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 57.65.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ba:1b:e2:31:18:4c:4d:b2:b2:17:3a:f9:90:a1:04:0d:b0:84:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 06:00:17 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=0daa1aaf4688742a8c8b2e48f37f3ea3a45e46136436f3a2e59213b612a9563c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:47:66:56:72:26:1b:d9:bd:52:77:f2:1f:af:
ee:d7:8b:b7:c7:11:ad:dc:12:98:40:ee:ae:e1:e4:
21:41:3b:73:0e:a0:28:d4:1b:59:85:35:89:eb:b3:
78:1c:92:47:f7:47:ef:da:eb:e6:c8:07:1d:57:f6:
36:5d:a8:4f:7c:b9:ad:60:59:ec:4f:11:02:d7:9a:
7b:4a:87:38:8c:13:61:c3:aa:bc:26:b2:f2:f3:8c:
5f:70:83:f4:5b:fe:6e:0b:2d:f1:d9:4d:ea:63:8e:
2f:c5:c9:63:82:05:66:29:53:94:a1:ca:63:3b:51:
f9:de:3b:fc:68:0f:f5:33:95:8d:71:85:a8:ba:9d:
76:a4:0d:b3:35:f2:09:19:86:f9:04:08:b4:49:8f:
a7:dc:fd:98:9c:08:ae:fd:20:23:74:5f:1d:ca:76:
b1:7e:f5:dc:0e:fc:99:d7:30:19:6b:10:14:a4:e2:
a0:06:ff:56:10:0b:0f:dd:57:48:02:1d:fd:0d:d2:
a8:a7:b4:f9:15:39:45:36:a8:5b:e8:71:8a:83:13:
bf:44:b3:96:c7:c1:a2:58:a7:00:5d:98:f7:23:4f:
7c:2a:80:20:76:88:0f:1d:4d:1f:f4:91:30:ba:56:
d2:92:06:aa:14:75:cc:be:e9:d8:d3:6a:69:37:52:
52:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B8:CF:3B:27:B8:3B:E9:07:55:F8:13:EA:52:5C:97:3A:A7:D3:B9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.65.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:6f:4c:26:cf:44:5e:e0:0e:cb:68:67:45:56:f1:5b:30:de:
45:f5:32:fa:5a:ac:e7:f5:5f:09:6c:9e:0f:2e:cf:4b:27:84:
d6:8d:fc:5e:6e:b4:c1:09:1c:6c:ef:54:a8:54:d9:1f:c2:e6:
59:b8:84:8a:8c:2c:46:dd:39:c3:b6:0d:e6:f5:d7:a9:47:57:
b0:91:6d:02:e1:51:1f:54:53:b6:7f:39:30:f2:38:1e:14:c8:
72:31:a0:13:5d:cc:c5:d0:65:e7:17:16:3e:52:5c:43:32:7b:
4b:d3:f5:61:79:e1:8b:30:51:9a:f4:86:30:24:e9:00:ed:7e:
77:6e:68:f1:de:a5:0b:39:fa:09:01:57:03:e6:07:72:09:61:
7e:9b:9e:f2:09:2a:ea:34:c5:1d:20:a4:2f:6a:21:7f:90:41:
83:1d:14:2c:83:9c:07:db:eb:d5:70:1c:cd:e1:b9:2a:8a:ac:
fb:11:7d:ab:68:29:3f:c8:36:aa:5f:78:12:fd:3d:ce:56:17:
03:ee:35:25:0e:14:30:e8:8b:3b:6a:72:a9:68:3a:ca:91:49:
3c:52:83:66:5d:35:b5:b0:0a:77:15:3b:39:bb:d4:8b:4d:72:
17:5d:ba:be:0b:52:bf:53:a7:60:83:ec:47:63:55:18:0c:05:
8a:1c:79:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:05 2026 by rpki-client