Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
File: b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa (raw, json)
Hash identifier: +2pGeqwf+ppeDXH3SMHrcxrkxJl/3wwRoi7lZFnJl/A=
Subject key identifier: 43:65:4C:1C:96:C0:A5:36:C6:5E:CE:48:90:EE:F7:97:31:94:3E:A3
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 764578C6C65A8EA83F8F3FADAC11070CE87E0AB4
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
Signing time: Fri 07 Aug 2026 05:00:09 +0000
ROA not before: Fri 07 Aug 2026 05:00:09 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 57.85.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 14:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:45:78:c6:c6:5a:8e:a8:3f:8f:3f:ad:ac:11:07:0c:e8:7e:0a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:00:09 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=ab6291d025a29342ed72b97e1cfc71930514ffcfcd5fc1dac26aa00340c2247c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:f8:62:a0:0c:74:00:52:5e:ac:49:d8:66:
c1:b6:0d:4b:0c:19:9f:3b:1b:f4:39:84:bd:6f:7a:
5b:af:ee:9e:1e:12:64:95:f5:07:12:cd:5c:67:ec:
ea:50:18:4b:84:93:a2:d3:dd:83:da:09:09:9d:73:
9d:b0:24:7f:6a:48:fe:c9:01:6c:50:ff:83:4b:be:
19:27:d6:64:d8:1e:46:05:f7:58:3c:d6:01:24:78:
a3:d3:a7:8d:b4:4a:db:c1:af:09:55:54:35:a9:06:
f4:b2:a7:e1:e1:25:f6:10:62:07:2b:3c:97:fc:53:
52:56:f5:75:a9:b5:40:c3:59:9c:fe:47:10:09:17:
86:55:98:5a:7b:83:48:b6:99:76:82:c0:b7:47:0a:
e2:7e:c2:2e:e0:df:e9:6f:34:cb:c5:e1:b1:70:e4:
f7:e7:8b:20:ab:73:68:5c:c3:a9:cb:6c:ef:5a:3b:
28:a8:87:fc:ef:85:53:9b:9d:d3:b1:31:a9:48:f6:
fd:ce:dd:36:88:f0:6b:1d:93:73:cc:ea:07:1f:0c:
97:cf:78:7a:31:e3:fd:a5:43:19:72:84:90:6d:77:
1d:49:2f:19:2f:87:cf:05:f1:62:be:5b:f5:d9:b6:
dd:a9:f4:c9:78:0e:6b:4b:9b:d7:6b:70:0e:95:3f:
1a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:65:4C:1C:96:C0:A5:36:C6:5E:CE:48:90:EE:F7:97:31:94:3E:A3
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:53:43:be:a3:50:b2:42:74:32:c0:87:12:90:a5:a9:e9:b9:
1f:87:fd:c9:31:4a:16:5f:66:13:3f:8f:aa:99:04:7e:0a:6c:
10:46:5c:5c:fd:1a:d2:1e:05:02:2f:b0:b9:79:45:6f:4c:ba:
2d:b9:f7:b4:90:d2:ac:88:56:d1:56:0b:85:20:1c:dc:28:52:
24:35:b4:bf:f7:13:0b:b3:b9:db:bd:d2:3d:9f:48:51:44:d4:
f2:f7:53:4f:49:70:a8:9d:8e:38:62:7e:64:ce:5b:a0:21:0d:
bf:68:a8:55:88:74:4f:ec:94:cd:08:d7:2c:15:9d:44:30:0a:
ba:ad:dc:f6:0a:3a:e3:8c:b1:f4:71:e2:eb:dc:e8:f6:f6:37:
65:8c:ca:01:2d:83:23:a2:85:b5:8a:3b:e0:7d:2e:ad:cf:8f:
67:0e:94:d5:d3:93:b5:f5:36:1d:96:9e:38:44:e4:44:d8:53:
f3:37:b5:47:d7:3f:69:fb:f2:f4:79:8e:7b:7e:26:c5:41:cb:
6f:72:17:27:6d:a2:f5:df:54:22:ef:a0:b8:43:65:d3:f2:6c:
34:f8:81:62:01:1c:e5:d8:95:22:40:a4:f5:91:2f:5f:3e:76:
e3:61:85:ad:69:36:9f:a0:73:77:e5:0e:9a:a2:0a:df:c5:3d:
4b:7f:dd:57
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUdkV4xsZajqg/jz+trBEHDOh+CrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDcwNTAwMDlaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGFiNjI5MWQwMjVhMjkzNDJlZDcyYjk3ZTFjZmM3MTkzMDUxNGZmY2ZjZDVm
YzFkYWMyNmFhMDAzNDBjMjI0N2MxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKb4+GKgDHQAUl6sSdhmwbYNSwwZnzsb9DmEvW96W6/unh4SZJX1BxLNXGfs
6lAYS4STotPdg9oJCZ1znbAkf2pI/skBbFD/g0u+GSfWZNgeRgX3WDzWASR4o9On
jbRK28GvCVVUNakG9LKn4eEl9hBiBys8l/xTUlb1dam1QMNZnP5HEAkXhlWYWnuD
SLaZdoLAt0cK4n7CLuDf6W80y8XhsXDk9+eLIKtzaFzDqcts71o7KKiH/O+FU5ud
07ExqUj2/c7dNojwax2Tc8zqBx8Ml894ejHj/aVDGXKEkG13HUkvGS+HzwXxYr5b
9dm23an0yXgOa0ub12twDpU/GoUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRDZUwc
lsClNsZezkiQ7veXMZQ+ozAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
Yjk0YzAxYWItNzhjOS00ZGVhLTg2MDUtMjA2ZWRmNGY0YWMzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADlVMA0G
CSqGSIb3DQEBCwUAA4IBAQCdU0O+o1CyQnQywIcSkKWp6bkfh/3JMUoWX2YTP4+q
mQR+CmwQRlxc/RrSHgUCL7C5eUVvTLotufe0kNKsiFbRVguFIBzcKFIkNbS/9xML
s7nbvdI9n0hRRNTy91NPSXConY44Yn5kzlugIQ2/aKhViHRP7JTNCNcsFZ1EMAq6
rdz2CjrjjLH0ceLr3Oj29jdljMoBLYMjooW1ijvgfS6tz49nDpTV05O19TYdlp44
RORE2FPzN7VH1z9p+/L0eY57fibFQctvchcnbaL131Qi76C4Q2XT8mw0+IFiARzl
2JUiQKT1kS9fPnbjYYWtaTafoHN35Q6aogrfxT1Lf91X
-----END CERTIFICATE-----
Generated at Wed Sep 2 22:22:57 2026 by rpki-client