Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95019996-0ef4-4f98-90e2-dd7efc004375.roa
File: 95019996-0ef4-4f98-90e2-dd7efc004375.roa (raw, json)
Hash identifier: yp3B2fV20Uueb4PHPLzI1kTFHed6AK2mUU1f/Qqdc/Q=
Subject key identifier: 6A:85:A3:3B:54:73:6B:F5:43:EE:63:02:29:42:D3:16:37:80:AB:BC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 71F8182F0C471F34C6C94DF89FC8FA92B3B59853
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95019996-0ef4-4f98-90e2-dd7efc004375.roa
Signing time: Fri 07 Aug 2026 05:50:08 +0000
ROA not before: Fri 07 Aug 2026 05:50:08 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 159.244.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f8:18:2f:0c:47:1f:34:c6:c9:4d:f8:9f:c8:fa:92:b3:b5:98:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:08 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=7d30569734c1650587c3cd2d2ad767fdd661e9d012ef3348dac7d4597c71dec6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:1c:b9:49:9b:c9:fb:e6:33:2c:88:08:3a:
89:41:f2:42:5a:ca:0f:b5:4d:bf:00:a6:6a:b8:78:
c7:d2:be:99:05:b9:16:81:6d:61:97:3f:9f:be:43:
23:ab:e9:91:48:7c:49:75:67:7d:20:7b:93:91:be:
ae:4b:a9:9a:8c:26:3b:f6:c0:9e:32:c3:97:37:34:
be:4a:7b:e8:0c:de:d7:b7:80:9a:ca:9a:ae:43:4a:
6c:8c:a1:09:5e:42:74:19:bf:4e:f7:3b:19:c0:7f:
e6:d0:ac:13:1f:2f:aa:34:f7:2d:41:0a:fb:48:74:
bb:e6:a4:68:2b:a0:e2:70:82:2f:80:1c:84:74:50:
86:98:ec:e3:67:c5:a8:c9:45:e2:90:39:72:63:75:
c3:15:9c:e9:0e:9b:6d:5f:42:63:84:37:b0:a8:0e:
cb:30:db:f0:92:8b:44:f9:5e:03:05:26:80:ec:0d:
4c:4b:90:2f:da:22:6b:42:f5:bb:c1:35:02:55:ca:
1a:5f:9a:0d:66:c5:85:e8:f8:ce:12:03:3b:de:06:
c6:5d:31:f2:fa:59:06:db:c6:b4:b4:eb:b6:f4:cd:
a4:ec:12:48:5d:b2:29:84:e0:4f:93:1c:34:37:64:
8b:f6:7b:7c:1a:ac:90:90:19:9b:7d:d2:8a:98:42:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:85:A3:3B:54:73:6B:F5:43:EE:63:02:29:42:D3:16:37:80:AB:BC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/95019996-0ef4-4f98-90e2-dd7efc004375.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c7:c5:15:53:5e:3f:5d:ac:c3:0a:d2:0c:96:fc:bd:8f:88:8f:
55:6f:93:1e:22:db:b6:cc:3e:99:eb:8b:04:16:0d:46:8c:09:
03:d2:4d:83:c2:d3:ca:2d:0f:df:64:27:51:e5:22:2c:c2:cb:
bb:91:e2:6c:d5:30:d1:90:07:a4:6c:aa:08:84:0e:d6:55:15:
62:8c:ab:1f:fd:26:ab:e6:5f:ac:80:a3:ff:2b:29:f1:b9:34:
47:f6:de:19:97:c5:20:f6:17:bf:fa:97:ac:c4:a1:4e:9e:7b:
52:03:1f:30:fc:d0:f7:a2:b0:70:5c:25:a3:fb:3f:d0:34:b2:
76:02:0c:0c:c7:3b:98:5a:c9:51:16:6e:23:5b:a7:a9:41:98:
e1:99:9f:fb:46:63:d2:81:95:52:d0:51:e9:9a:a9:45:c9:d7:
a5:43:a0:c6:80:bf:19:e0:65:78:d4:01:b5:90:eb:09:91:a8:
ef:2c:b9:55:57:d6:af:7a:3b:d6:98:e9:91:a9:33:1f:7b:7e:
d9:d9:90:b8:30:bc:5b:ad:a5:c2:8d:1e:8c:5f:c5:71:3e:51:
ad:0e:d6:2a:46:f7:62:40:d5:49:6e:f9:4d:98:ad:c6:16:e0:
56:a1:65:82:17:68:67:b9:ad:51:3d:2a:4e:ac:be:f1:98:82:
33:a0:ad:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:44:15 2026 by rpki-client