Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95019996-0ef4-4f98-90e2-dd7efc004375.roa
File: 95019996-0ef4-4f98-90e2-dd7efc004375.roa (raw, json)
Hash identifier: 9mc2Pc76sLxWe8hrq8x2S1TRsCiO/8CygJZMxA+5E24=
Subject key identifier: 70:AA:4E:D1:4F:75:44:84:A5:E7:34:60:95:95:8B:EA:01:F0:DA:71
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 07F0E2D710EC7B2371A3E5B398513D17D5159333
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95019996-0ef4-4f98-90e2-dd7efc004375.roa
Signing time: Mon 26 Oct 2026 05:40:33 +0000
ROA not before: Mon 26 Oct 2026 05:40:33 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 159.244.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f0:e2:d7:10:ec:7b:23:71:a3:e5:b3:98:51:3d:17:d5:15:93:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:33 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=2a58b2a0f7a4e5661ae76c45b5c0c07250484945644b3bb4267b715375d492cb, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:2c:33:c6:05:12:15:a7:fc:77:7c:7a:59:
06:ae:ce:06:c5:ba:56:9b:36:58:c5:31:f1:af:2d:
a7:7c:7e:f3:9f:33:15:7f:3d:b2:0a:76:72:15:01:
51:30:94:cc:75:69:dd:b1:c0:d4:8e:56:28:ec:6a:
46:71:a5:0a:60:75:f9:13:5d:66:bd:16:f2:81:11:
89:b4:f6:89:2f:b7:21:86:7c:0f:d9:f3:95:17:1b:
f3:d4:56:a9:5c:87:f1:46:ef:ae:c3:6f:0d:46:2f:
30:22:0d:20:8c:e8:9c:29:8f:de:3d:5e:1d:78:7d:
18:5c:46:12:77:d0:25:80:d4:10:16:9c:c4:48:29:
11:be:37:bd:71:8b:af:92:ed:1e:8d:b1:f9:34:41:
62:92:94:6d:38:d1:26:a4:7a:df:c7:a4:21:7f:95:
48:d7:23:fa:06:20:36:fe:08:88:a4:33:b6:d4:46:
73:57:7a:5b:1e:66:7a:ba:4d:2f:10:51:92:1e:c6:
3c:65:4f:a9:1b:b2:ba:52:54:6f:a0:cc:7f:06:79:
4a:67:52:96:58:48:c8:6a:98:93:b8:22:3c:9b:60:
8a:f8:cd:c3:2e:78:a2:fe:4a:a1:3c:0f:26:9a:a2:
52:c8:75:fe:1c:4f:4f:6e:a2:6f:86:7e:39:d5:22:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AA:4E:D1:4F:75:44:84:A5:E7:34:60:95:95:8B:EA:01:F0:DA:71
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95019996-0ef4-4f98-90e2-dd7efc004375.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:6e:b1:20:ac:35:dc:73:5c:a5:00:1c:77:2e:80:69:82:0f:
3e:34:24:68:3d:fb:5d:5a:4a:a8:be:e9:44:3f:01:b6:66:ee:
66:bc:63:bc:65:73:c4:f7:13:99:fd:b4:20:54:02:70:92:ac:
2c:c3:0a:42:67:8b:ab:ee:73:cb:30:e4:59:78:3e:aa:34:5f:
32:72:bb:cc:c7:32:f3:13:3a:d9:bf:47:c2:d3:d3:d5:e9:68:
63:5b:71:66:15:44:07:16:91:bb:fb:43:ba:67:9a:f8:94:47:
af:4d:31:00:fe:35:40:14:cd:68:5f:2a:e6:4f:0f:4a:d6:f3:
75:7a:c0:ba:39:55:04:d8:72:ee:2d:9c:34:d3:a7:ea:51:5b:
17:47:94:47:f2:9f:3b:79:2e:49:cd:08:ac:76:67:92:e5:4d:
a3:ac:ba:95:0e:af:7c:fd:55:b6:e2:ec:2a:4b:30:06:f7:93:
5a:d6:d3:00:1b:40:b0:9c:da:37:2f:22:eb:e1:ff:c3:37:f4:
77:1d:e5:ee:36:95:df:cd:40:db:1e:45:b4:27:15:2b:70:d3:
96:c0:a8:ae:7a:33:7a:52:23:d7:01:dd:b9:bc:81:e0:a4:a6:
ef:01:3d:ee:2c:20:a2:c1:2f:c9:72:4b:25:c3:22:e4:a2:24:
5f:58:75:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:15 2026 by rpki-client