Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
File: c0cc077c-c457-49fe-8373-08e978cb64fd.roa (raw, json)
Hash identifier: 7BhV4wugC2oTpiCbmyGPiscuWiVV3kLpAlvdR5CoZJM=
Subject key identifier: 64:A5:34:E9:BA:A6:46:FF:A9:8D:7F:ED:B6:BB:12:A3:B7:F8:66:47
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4CAB22BF4333ECC368CB94EA852CFF7DFCAE70C7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
Signing time: Fri 07 Aug 2026 05:50:30 +0000
ROA not before: Fri 07 Aug 2026 05:50:30 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 195.254.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ab:22:bf:43:33:ec:c3:68:cb:94:ea:85:2c:ff:7d:fc:ae:70:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:30 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=deba51457b896f660b1a32029fdfb5d83060bfd80ee73cf23bb5b178f5033158, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:56:44:5a:86:f5:89:cc:85:c9:d8:9d:58:
49:1e:f1:ca:f2:9a:cb:4f:df:52:65:50:f8:b9:7e:
85:f9:93:c7:a1:90:25:08:c2:d2:b5:bb:24:3f:97:
f6:b0:df:b2:3f:84:f8:18:3b:8d:32:53:19:0a:0d:
92:72:90:81:c9:c2:e0:d9:a8:56:da:eb:8a:ad:47:
89:77:07:4b:16:9b:63:2e:16:4f:db:75:c6:02:aa:
86:3b:5f:9f:70:fc:af:3a:06:63:e4:26:a7:53:d2:
0a:a4:95:24:10:e6:fa:57:5d:b8:35:26:12:d3:5c:
02:fa:44:5e:73:23:89:20:2c:87:41:1d:b5:0f:25:
ad:8c:19:ab:56:16:eb:f5:a9:71:3a:3e:17:90:1e:
30:2e:12:04:e9:57:75:25:c8:14:89:15:c5:9e:a2:
7b:83:02:7e:f9:87:88:8c:93:46:25:03:f0:be:4f:
66:63:e3:f0:c0:ed:9d:c3:53:5e:d7:56:c8:26:38:
ea:dc:04:1b:e7:8a:99:cc:d7:fc:98:e8:03:59:21:
32:e5:0e:7e:a4:56:69:da:d9:2d:e4:82:44:ff:98:
4f:c9:a4:29:0b:01:87:74:14:0d:8a:b3:8a:02:3d:
66:35:20:38:52:0e:1c:dc:45:00:95:8f:23:ca:4b:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A5:34:E9:BA:A6:46:FF:A9:8D:7F:ED:B6:BB:12:A3:B7:F8:66:47
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.0.0/17
Signature Algorithm: sha256WithRSAEncryption
7c:4b:61:f9:77:53:91:68:14:38:c7:03:10:84:a0:6e:47:d4:
5b:09:98:d9:5a:48:36:28:88:e1:79:87:9a:e1:76:7d:df:b2:
40:c7:2a:47:de:95:b6:23:24:e2:b7:26:cd:09:7f:3f:97:92:
07:66:ba:76:df:46:fa:0b:0f:fa:21:d0:3e:1a:a1:e0:58:fa:
38:53:0a:45:1e:be:57:86:a9:2a:7a:f4:08:87:67:b9:ec:6d:
16:8d:07:21:4e:78:1e:41:fd:c8:7f:6d:8a:78:e6:52:56:ea:
2f:d3:fd:38:b7:3f:b7:68:58:88:cd:26:25:71:b0:b0:c9:79:
ec:c5:56:9a:69:da:47:49:2d:7b:70:c1:60:fa:18:6c:48:36:
9d:6e:89:30:be:98:f9:b7:ea:9e:0b:44:d0:ef:4c:2a:b0:9b:
38:86:99:7f:47:55:c5:ac:fe:5f:3d:b4:55:e6:83:b0:80:fa:
0d:ea:d9:02:a5:93:11:eb:83:71:04:0b:80:bb:c7:21:06:2b:
0f:93:87:4a:9b:1d:2c:0b:52:4d:2b:87:1f:9b:18:2b:0f:37:
7d:84:ba:24:cd:9a:b6:60:bd:e3:cd:0a:41:7f:2e:35:df:f0:
95:63:f1:be:c0:3f:dc:bb:d5:9f:eb:a9:02:59:5e:da:14:06:
5f:a3:73:30
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUTKsiv0Mz7MNoy5TqhSz/ffyucMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDcwNTUwMzBaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGRlYmE1MTQ1N2I4OTZmNjYwYjFhMzIwMjlmZGZiNWQ4MzA2MGJmZDgwZWU3
M2NmMjNiYjViMTc4ZjUwMzMxNTgxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALqUVkRahvWJzIXJ2J1YSR7xyvKay0/fUmVQ+Ll+hfmTx6GQJQjC0rW7JD+X
9rDfsj+E+Bg7jTJTGQoNknKQgcnC4NmoVtrriq1HiXcHSxabYy4WT9t1xgKqhjtf
n3D8rzoGY+Qmp1PSCqSVJBDm+ldduDUmEtNcAvpEXnMjiSAsh0EdtQ8lrYwZq1YW
6/WpcTo+F5AeMC4SBOlXdSXIFIkVxZ6ie4MCfvmHiIyTRiUD8L5PZmPj8MDtncNT
XtdWyCY46twEG+eKmczX/JjoA1khMuUOfqRWadrZLeSCRP+YT8mkKQsBh3QUDYqz
igI9ZjUgOFIOHNxFAJWPI8pL7O0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRkpTTp
uqZG/6mNf+22uxKjt/hmRzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YzBjYzA3N2MtYzQ1Ny00OWZlLTgzNzMtMDhlOTc4Y2I2NGZkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB8P+ADAN
BgkqhkiG9w0BAQsFAAOCAQEAfEth+XdTkWgUOMcDEISgbkfUWwmY2VpINiiI4XmH
muF2fd+yQMcqR96VtiMk4rcmzQl/P5eSB2a6dt9G+gsP+iHQPhqh4Fj6OFMKRR6+
V4apKnr0CIdnuextFo0HIU54HkH9yH9tinjmUlbqL9P9OLc/t2hYiM0mJXGwsMl5
7MVWmmnaR0kte3DBYPoYbEg2nW6JML6Y+bfqngtE0O9MKrCbOIaZf0dVxaz+Xz20
VeaDsID6DerZAqWTEeuDcQQLgLvHIQYrD5OHSpsdLAtSTSuHH5sYKw83fYS6JM2a
tmC9480KQX8uNd/wlWPxvsA/3LvVn+upAlle2hQGX6NzMA==
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:44:16 2026 by rpki-client