Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80e298e3-975b-4cea-9586-8d04a37a53a2.roa
File: 80e298e3-975b-4cea-9586-8d04a37a53a2.roa (raw, json)
Hash identifier: RsNBUSLCPGmSRdRed9eunSNO3UbV7iiOd0IUJ1vS+dU=
Subject key identifier: AD:7B:B5:85:A5:D6:67:E0:79:97:38:45:79:5D:F3:9B:F5:F4:92:EF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5942C304E1949FE76A53F9DB91E5829623C36C35
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80e298e3-975b-4cea-9586-8d04a37a53a2.roa
Signing time: Sun 02 Aug 2026 01:40:07 +0000
ROA not before: Sun 02 Aug 2026 01:40:07 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 57.93.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:42:c3:04:e1:94:9f:e7:6a:53:f9:db:91:e5:82:96:23:c3:6c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 2 01:40:07 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=5ef956e15d8620af0d5a939a9ac88f10045d7bffa8bc6ab11e419d92fbba795a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:52:0b:7c:df:ea:62:78:7e:a8:00:f4:f4:11:
bb:11:ec:ef:55:b3:66:70:2c:6c:e0:a8:8b:c4:c4:
e3:f2:63:4f:16:46:42:63:5f:ec:56:5f:96:4a:1b:
91:9e:43:af:d8:39:8a:06:5a:5c:b8:c6:60:26:06:
bc:b9:5c:a4:dc:d1:20:f4:bf:a7:c6:07:18:5c:cd:
ad:d9:9b:f0:82:47:90:74:01:8c:31:f7:ee:f7:6c:
09:ad:bb:ec:1b:8c:34:79:76:2d:e7:b9:ec:c3:52:
12:4b:5d:ca:60:a1:fa:67:86:83:9d:10:72:20:d0:
28:49:85:b5:e4:be:33:74:7e:15:42:60:15:fb:c0:
37:69:07:04:16:66:51:91:7c:3a:8e:84:64:6a:50:
d1:fb:9c:d2:22:fa:f6:2c:1b:27:e6:42:dc:d0:0a:
d3:37:73:77:23:18:1f:bb:e4:e2:89:46:71:84:ef:
36:c1:cd:ff:4e:33:ae:f9:89:87:76:92:72:e6:41:
49:15:cd:18:81:14:9e:16:60:59:5a:43:12:51:37:
32:e4:ae:f3:9e:a2:14:6f:b5:ac:e0:48:c9:44:b6:
e8:e4:12:3c:f2:e2:57:f0:41:77:8f:ae:c3:67:9a:
cf:c4:0c:29:79:b3:0d:4c:98:98:b6:4a:e7:fa:a7:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7B:B5:85:A5:D6:67:E0:79:97:38:45:79:5D:F3:9B:F5:F4:92:EF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/80e298e3-975b-4cea-9586-8d04a37a53a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:11:3d:9b:37:2f:8a:28:ff:81:ab:4f:86:60:b8:a4:77:ba:
96:0a:e3:ca:5a:22:d3:fe:65:24:8b:a0:43:1b:c0:f8:a9:7f:
eb:85:1a:22:87:5f:37:92:cf:15:8f:19:fe:e3:2e:a5:29:cd:
eb:95:e2:11:b6:cc:ea:19:b2:92:de:42:ea:c1:d6:b5:08:7b:
e6:90:cd:b9:70:24:88:01:a1:21:fe:9b:a7:2c:95:ff:cc:01:
04:87:3f:3d:35:a8:77:4c:f2:c5:4d:ee:c1:c2:c2:1d:90:b9:
a2:ef:87:5e:bb:7d:f8:41:d6:f2:cc:ef:dd:b5:40:17:6e:52:
b2:73:3a:5e:1f:96:61:de:bc:76:6b:97:85:a5:5b:17:31:1a:
d3:66:c1:b7:74:1f:1f:18:fc:ba:e4:37:57:fe:b4:f8:39:72:
98:a6:bd:98:2a:c9:e3:33:f6:11:7a:f7:80:d5:92:3d:6c:df:
b9:77:88:29:d6:14:99:b3:07:a9:3f:be:9d:31:f4:34:c1:e0:
2c:9f:50:f7:75:4b:2c:e1:c2:2a:3a:2f:3a:a9:fb:97:a5:41:
28:92:d6:e2:08:52:fa:ce:1c:48:9e:24:ed:a0:ba:74:24:1e:
d7:2e:ae:c5:9b:53:6c:8f:9b:02:21:12:ff:91:35:0b:ee:bf:
e5:b4:86:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:04 2026 by rpki-client