Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
File: b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa (raw, json)
Hash identifier: 8PWgd8mejpomFnWaS2scWr1RJ/8m4LScglfRr8LEBE4=
Subject key identifier: 91:D8:A5:C5:8A:AF:14:E8:B8:0E:AF:EB:29:A1:F6:4C:1B:89:15:68
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2149A455D2DCBE70F28243A97260066D953D4927
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
Signing time: Tue 19 May 2026 05:40:04 +0000
ROA not before: Tue 19 May 2026 05:40:04 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 57.85.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:49:a4:55:d2:dc:be:70:f2:82:43:a9:72:60:06:6d:95:3d:49:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 19 05:40:04 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=3d975b830cb865b80b0692b435ecb084d6d32ffa2ed61e40e3759fce426e84f5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:00:b3:a0:a2:6f:aa:c9:7b:41:1a:9f:35:eb:
64:68:7a:fd:7a:ff:b6:ec:95:78:36:02:98:d3:3f:
28:29:88:0f:a4:8f:b7:e2:72:e0:69:28:5a:1c:50:
b7:ce:b8:37:6c:a4:a8:23:4d:5a:f0:91:41:cd:5f:
58:71:73:90:dd:5f:fa:2b:b1:22:95:48:dc:33:e5:
13:ac:a8:31:45:e5:47:d4:8b:df:fb:b3:49:16:5d:
70:66:43:ed:2c:b3:52:7d:f9:c9:d9:82:88:59:fb:
cd:3a:0a:7b:b8:d6:21:3b:fe:d3:6d:40:63:c0:88:
d9:8e:09:85:63:c8:95:30:45:4a:5e:9b:27:75:10:
70:d9:4a:d1:2e:da:e3:37:00:b5:b9:73:8a:c2:af:
0f:2e:b2:e9:45:43:ee:a5:a3:f6:16:fd:a6:70:8b:
36:87:de:11:9b:58:f4:b9:f9:cc:e8:db:b4:75:6c:
fe:5c:7b:3e:3b:9c:3d:09:1f:cb:a7:ce:0b:56:02:
88:63:26:36:db:6c:e9:7a:20:ff:8a:da:c7:8f:d6:
a2:e9:3f:6e:0e:1f:2a:d0:c4:c7:dc:51:0c:77:09:
06:7f:e3:5f:58:d9:4f:44:c7:a6:84:b0:24:9d:27:
a9:78:de:76:5b:2a:fd:1b:ed:6d:f8:e6:20:5f:12:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D8:A5:C5:8A:AF:14:E8:B8:0E:AF:EB:29:A1:F6:4C:1B:89:15:68
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:fe:da:d5:50:42:14:c9:3c:d7:fc:f1:ba:83:7c:90:a1:3b:
bc:83:62:35:07:22:30:66:51:ae:35:b5:48:e9:18:67:80:1d:
8e:10:4d:1a:ce:d8:90:2a:68:57:0c:f7:dc:1a:0e:28:e2:3b:
91:a4:88:83:d3:1f:4f:2b:78:e0:fd:2c:c8:ed:9d:25:96:ef:
60:7d:bc:1e:0f:aa:1f:88:fb:e3:70:51:e4:12:88:95:40:d2:
e7:ec:a9:70:43:9b:e1:2f:27:eb:ce:60:de:37:49:58:5a:13:
dd:96:be:5f:63:69:ed:29:1d:c0:b3:e1:a7:8b:af:23:24:d9:
29:69:03:12:66:8d:52:9c:1e:f0:54:5d:71:b3:f9:f3:a4:08:
8e:7a:2d:dc:42:f3:3d:59:45:83:7e:14:ad:61:15:78:9b:b6:
02:ba:12:61:07:69:4e:5d:cd:96:9e:6a:4e:c8:2d:a1:ba:da:
97:04:2b:9d:7b:d8:06:7b:06:42:f0:48:e5:f2:5d:0e:c1:47:
03:00:a9:85:47:0c:7e:63:f7:e4:6e:5a:ec:cc:1c:88:22:ee:
0a:4d:99:35:41:18:7b:b9:63:78:ad:92:ce:50:85:f6:98:19:
25:4d:3d:f8:13:43:42:b5:81:8e:1b:fb:27:c4:77:bb:c6:4b:
26:82:a6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 21:56:42 2026 by rpki-client