Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8ee7bd52-fc09-4c49-af31-341b51b405e0.roa
File: 8ee7bd52-fc09-4c49-af31-341b51b405e0.roa (raw, json)
Hash identifier: KWUANc+qzJcmewTlaitxPgwOcYejSVM7XfZBHD4O0Eo=
Subject key identifier: C6:12:0E:CC:A7:C3:14:DD:AB:94:1F:06:1D:12:53:19:B2:47:19:9A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5097CC81EA20D8E484636431E7AD57195236F36F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8ee7bd52-fc09-4c49-af31-341b51b405e0.roa
Signing time: Mon 26 Oct 2026 05:40:07 +0000
ROA not before: Mon 26 Oct 2026 05:40:07 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 194.234.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:97:cc:81:ea:20:d8:e4:84:63:64:31:e7:ad:57:19:52:36:f3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:07 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=6acf70841fd7b2ce6855b9b5a318ca64cf64e57616aa66bf54966c24a063364b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:fb:f1:a2:19:e8:2e:db:53:6c:58:0f:6e:
af:fc:a6:89:de:05:58:9b:e8:38:f6:3e:d9:b8:da:
53:e1:31:dd:06:3d:ad:33:63:3a:18:31:28:72:22:
6a:90:c4:b4:e3:6f:c4:4f:f2:98:4f:b1:94:ea:54:
26:68:6c:af:ba:c8:28:07:2f:d6:8d:97:1a:e1:2b:
66:b1:27:84:ad:3a:14:4c:09:14:d9:f1:c2:77:84:
48:de:90:df:4b:43:aa:4f:b5:c1:bc:06:b4:25:1d:
45:9e:3f:f9:91:70:50:b8:b4:d1:96:9f:ee:a7:45:
bb:d5:26:b9:9c:07:29:ba:44:94:e4:d0:5a:1f:22:
d3:86:60:d0:b3:19:19:45:f9:0e:1c:a6:eb:86:17:
52:7a:3f:01:eb:53:ce:ac:09:69:8d:a7:cc:83:0b:
fb:74:fa:e0:9b:6a:5e:f8:ff:6b:5a:d0:75:bc:f6:
96:4b:58:60:f9:ba:86:8b:50:d4:00:04:21:86:56:
7c:41:f6:b5:13:30:95:cd:7b:d9:81:f0:5c:a0:ad:
72:6c:66:47:d0:24:f5:8f:34:1d:8c:dc:37:67:64:
72:ec:68:c2:4a:02:a8:dd:f4:e3:c2:70:52:00:e3:
57:74:bc:7b:49:01:eb:87:c7:95:e5:5f:25:8d:fa:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:12:0E:CC:A7:C3:14:DD:AB:94:1F:06:1D:12:53:19:B2:47:19:9A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8ee7bd52-fc09-4c49-af31-341b51b405e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.234.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3a:d4:e1:23:cb:b4:df:88:b4:99:fc:2d:de:ea:ec:34:24:ae:
10:ef:a5:26:73:df:b8:78:ca:33:a6:7f:fd:03:48:a0:60:ef:
a8:df:e1:c7:07:e9:13:e3:91:7a:94:be:4d:b4:d5:e5:77:4a:
dc:42:ba:ad:11:ee:bc:4f:c3:3d:e5:81:4d:4c:e8:44:0e:4f:
3b:df:6f:36:0c:10:3d:40:23:1b:cd:13:92:79:a7:47:c7:3f:
53:b9:64:5f:f2:30:6e:47:56:1d:d9:40:4a:ce:e7:10:45:86:
7e:b4:5f:61:9e:1c:5b:63:b6:79:72:dd:a6:c3:88:f1:01:6a:
73:22:a7:d6:50:d1:58:c1:2d:d3:30:25:e2:72:39:e3:79:bf:
d9:ef:02:c6:aa:af:c4:df:a9:7c:dc:68:fa:29:d6:f8:e6:97:
af:39:5f:cc:ee:f7:61:d1:e3:cc:a4:7c:e5:b6:8f:01:bd:23:
12:7c:1c:f9:aa:8e:f8:3c:fd:34:dc:e0:ed:a4:67:f2:5d:06:
31:11:8c:4c:1c:fa:82:05:2c:ec:99:c7:2a:e0:a8:ac:ec:7f:
1e:0f:9f:c9:78:33:c9:08:00:e4:d2:e1:ed:ff:8a:6d:55:26:
be:15:ab:75:0f:2a:c8:01:cf:75:2c:75:f2:e0:cc:93:9d:98:
77:9c:4d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:22:05 2026 by rpki-client