Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
File: b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa (raw, json)
Hash identifier: jI5PJF9upfozuzowNs1RfOW25Rmz7L7kRnXVk/U17eE=
Subject key identifier: 49:24:42:C7:4E:2B:AE:10:66:83:12:A7:BA:A0:36:23:DB:D2:D4:20
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3AD15B73940EE021E06D226B77B1BA8FF0451EC7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
Signing time: Mon 26 Oct 2026 05:40:19 +0000
ROA not before: Mon 26 Oct 2026 05:40:19 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 57.85.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d1:5b:73:94:0e:e0:21:e0:6d:22:6b:77:b1:ba:8f:f0:45:1e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:19 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=80f1d80f4f48da7dbe51e14c6882595c021199e8233863f02e9d469a5d397183, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b1:f1:ab:5c:13:c2:5d:e7:7a:a8:e2:86:99:
63:f0:bb:14:fa:15:92:e1:46:11:6d:76:e9:8e:03:
68:4c:8e:f7:d3:01:d3:8d:24:de:92:e1:56:9e:2c:
b4:b4:f3:20:36:32:2e:8e:5e:9f:9b:19:8e:7d:21:
e8:fa:25:ee:b2:66:59:c9:81:7d:68:cf:1a:c0:9d:
b8:62:03:8b:16:47:02:20:49:dc:37:af:d7:1d:aa:
d3:c9:7c:e3:80:1d:35:e7:9e:bb:5b:cb:bb:bb:60:
04:1c:f7:9e:57:ee:f5:05:1b:b7:e8:89:95:44:1c:
63:4c:22:cd:4f:bf:bd:fe:b5:68:24:49:f5:cd:e4:
ff:0b:c6:1a:f2:26:3a:ac:ad:00:c5:d7:2e:09:53:
3d:5c:eb:10:38:8c:09:17:fb:5c:b9:c5:07:9b:6f:
2f:cf:c0:cd:20:0f:41:2f:0e:b5:f8:82:f5:95:24:
f2:14:26:c1:58:25:28:86:52:10:c9:86:52:09:d9:
7f:cc:3c:4f:a6:fa:55:dd:b8:24:27:2c:8c:c0:fc:
04:38:7f:27:3e:63:db:19:b8:18:81:8c:e7:ae:6c:
b5:c2:f7:cc:e2:db:15:b4:41:a1:81:ca:7b:a4:2c:
a8:ea:b6:82:50:c3:e8:ca:16:dd:b1:dc:32:6e:df:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:24:42:C7:4E:2B:AE:10:66:83:12:A7:BA:A0:36:23:DB:D2:D4:20
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:6d:f1:ab:44:90:c0:66:b8:58:1c:0f:c8:92:04:4c:af:17:
e2:24:39:5a:e1:ff:03:52:aa:18:5c:6c:7b:ba:98:f0:42:75:
fc:7f:40:58:48:6e:bf:3f:79:56:b7:b4:bb:3a:73:a0:f5:86:
a1:37:83:61:dd:97:d7:58:a7:89:2a:f2:a8:02:48:f5:fd:89:
ce:52:dc:c9:14:54:bf:70:50:d1:4b:b4:5e:47:9c:71:07:00:
9d:bc:ad:a8:58:e4:19:e6:c7:4f:8a:44:25:7c:18:01:7c:04:
a8:3f:b3:c3:ce:39:1b:e3:f3:ee:4d:4c:89:04:a1:fa:a2:0c:
72:46:5d:54:e9:a5:45:32:0d:22:7d:ad:e8:a1:f5:01:f5:11:
1a:51:49:53:32:50:cd:12:af:75:0a:e4:2b:43:93:20:06:bb:
5b:70:f8:35:3d:26:c4:05:09:11:52:12:8e:c3:6c:cd:e0:66:
8f:9a:ec:04:12:26:c1:f3:ca:2e:2c:a3:42:11:2a:61:9e:4c:
ba:30:71:eb:11:d5:47:9b:0f:55:4c:ea:b9:a1:69:bc:5e:65:
aa:a0:70:70:91:0e:7e:f6:62:f1:2f:26:a0:37:e0:4f:7b:1a:
b4:3a:47:bb:2b:f8:cd:eb:5e:e6:fc:7e:20:2e:ea:5d:61:44:
20:26:b8:95
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUOtFbc5QO4CHgbSJrd7G6j/BFHscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTQwMTlaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDgwZjFkODBmNGY0OGRhN2RiZTUxZTE0YzY4ODI1OTVjMDIxMTk5ZTgyMzM4
NjNmMDJlOWQ0NjlhNWQzOTcxODMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAISx8atcE8Jd53qo4oaZY/C7FPoVkuFGEW126Y4DaEyO99MB040k3pLhVp4s
tLTzIDYyLo5en5sZjn0h6Pol7rJmWcmBfWjPGsCduGIDixZHAiBJ3Dev1x2q08l8
44AdNeeeu1vLu7tgBBz3nlfu9QUbt+iJlUQcY0wizU+/vf61aCRJ9c3k/wvGGvIm
OqytAMXXLglTPVzrEDiMCRf7XLnFB5tvL8/AzSAPQS8OtfiC9ZUk8hQmwVglKIZS
EMmGUgnZf8w8T6b6Vd24JCcsjMD8BDh/Jz5j2xm4GIGM565stcL3zOLbFbRBoYHK
e6QsqOq2glDD6MoW3bHcMm7f8YsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRJJELH
TiuuEGaDEqe6oDYj29LUIDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
Yjk0YzAxYWItNzhjOS00ZGVhLTg2MDUtMjA2ZWRmNGY0YWMzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADlVMA0G
CSqGSIb3DQEBCwUAA4IBAQCHbfGrRJDAZrhYHA/IkgRMrxfiJDla4f8DUqoYXGx7
upjwQnX8f0BYSG6/P3lWt7S7OnOg9YahN4Nh3ZfXWKeJKvKoAkj1/YnOUtzJFFS/
cFDRS7ReR5xxBwCdvK2oWOQZ5sdPikQlfBgBfASoP7PDzjkb4/PuTUyJBKH6ogxy
Rl1U6aVFMg0ifa3oofUB9REaUUlTMlDNEq91CuQrQ5MgBrtbcPg1PSbEBQkRUhKO
w2zN4GaPmuwEEibB88ouLKNCESphnky6MHHrEdVHmw9VTOq5oWm8XmWqoHBwkQ5+
9mLxLyagN+BPexq0Oke7K/jN617m/H4gLupdYUQgJriV
-----END CERTIFICATE-----
Generated at Mon Nov 2 08:27:26 2026 by rpki-client