Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8462af63-807c-4934-9e2f-0d749c431bcd.roa
File: 8462af63-807c-4934-9e2f-0d749c431bcd.roa (raw, json)
Hash identifier: gSpeYVdTL4qXGp1T2kM4jl+g3J7ug6uTKxW7NH+IC8s=
Subject key identifier: 68:F6:31:72:5C:D0:56:74:9B:E8:5F:07:D8:F2:46:93:6C:6F:B7:80
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 56FCC269FAE1F926A89A1C0F47A492C8849F3844
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8462af63-807c-4934-9e2f-0d749c431bcd.roa
Signing time: Fri 07 Aug 2026 06:00:08 +0000
ROA not before: Fri 07 Aug 2026 06:00:08 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 193.186.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:fc:c2:69:fa:e1:f9:26:a8:9a:1c:0f:47:a4:92:c8:84:9f:38:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 06:00:08 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=c9d6d02542c5c381ab500cf26d154939e674ebad303651f8f6e745eb841317c2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:97:ea:8c:0a:b8:6c:48:42:3b:c6:ba:f5:
95:5b:68:0f:69:a0:39:54:5c:71:91:0e:bc:06:50:
12:66:20:b7:96:2e:c3:d4:d6:ea:44:1b:ef:9a:85:
cb:5f:ae:b3:1d:80:2c:5a:44:29:a4:87:1a:be:4f:
88:7d:78:93:cf:55:3d:33:72:89:f8:d5:7d:28:87:
85:d1:a7:ba:f6:c2:3c:4a:98:9b:af:62:08:a9:de:
88:71:bc:cc:30:cf:50:d6:a4:1d:db:c0:af:47:cf:
a4:51:a1:65:a4:50:ec:44:c7:01:53:93:08:57:9a:
49:9b:f8:5d:22:0b:55:cc:08:a7:70:6d:a2:d0:f2:
6b:91:9d:62:1b:8f:85:72:ec:47:81:56:5f:a9:de:
5d:06:93:9c:93:8a:6d:17:9e:c3:d6:65:0b:5a:52:
87:72:37:15:d5:51:31:15:6e:97:99:b7:39:77:aa:
7e:7f:6a:3f:30:11:12:b9:b4:d7:ca:e3:29:3b:aa:
1e:fd:d4:ed:df:6b:fc:aa:d8:1c:e8:1b:52:27:4a:
7a:08:31:1f:56:33:93:09:8b:76:80:f6:f8:9b:eb:
bc:fd:51:da:6e:30:5e:f2:89:4f:d0:c9:ce:1d:d6:
f0:9e:6a:bc:f4:dd:bf:a6:9a:ea:d4:4d:68:2e:e1:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F6:31:72:5C:D0:56:74:9B:E8:5F:07:D8:F2:46:93:6C:6F:B7:80
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8462af63-807c-4934-9e2f-0d749c431bcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.210.0/24
Signature Algorithm: sha256WithRSAEncryption
34:5b:94:8d:26:6b:8c:05:03:81:8b:15:62:6b:05:d4:aa:22:
b6:5e:98:e2:a4:86:cf:f6:15:b3:dd:c7:fb:e9:c4:90:25:be:
5d:de:0c:9b:b6:64:66:21:a4:16:17:94:f1:90:5c:d3:43:2a:
bd:35:fa:f4:47:dd:b5:05:94:df:6a:56:3e:a1:66:85:cf:e5:
3f:51:a2:5e:98:19:6b:d6:66:3f:ef:a9:cf:34:0f:2a:06:3a:
57:ee:fe:16:ce:fe:1b:ff:da:cd:e6:61:04:63:20:12:e8:e3:
87:10:19:b9:ce:52:20:39:4b:b3:a9:28:82:70:7f:d8:75:a5:
fd:cd:aa:90:68:d8:f6:63:7d:64:2b:be:c0:a8:e8:c3:18:17:
4c:a8:c1:bc:96:5e:a7:0a:d1:71:0d:c0:7c:d6:37:18:30:fe:
18:a7:98:2b:89:10:97:59:18:aa:8a:c2:af:b6:85:1c:57:8a:
c1:b2:b4:b7:84:de:fe:44:e6:b5:69:55:25:b1:42:fc:37:31:
a0:14:a2:ec:2a:a5:b2:ca:19:ea:71:bd:32:d2:29:b2:7f:7b:
ee:45:74:25:2d:92:88:c5:68:8a:ff:fa:06:0a:a5:30:fb:a4:
41:76:8f:a5:d8:53:c1:f8:64:05:4b:5c:27:f8:b3:fd:2a:20:
3d:84:cc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:42:59 2026 by rpki-client