Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
File: c0cc077c-c457-49fe-8373-08e978cb64fd.roa (raw, json)
Hash identifier: bsDDs5R31o0Tw0fAZOOlY/cvDSx4jd6fEIod9eau6UU=
Subject key identifier: C9:3A:28:FD:D0:8A:21:9E:80:D5:C8:C0:2D:40:07:27:DA:31:D7:32
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 152AA93EE7D66868D29BA23E77250F9A9B7C2ECD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
Signing time: Mon 26 Oct 2026 05:50:06 +0000
ROA not before: Mon 26 Oct 2026 05:50:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 195.254.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:2a:a9:3e:e7:d6:68:68:d2:9b:a2:3e:77:25:0f:9a:9b:7c:2e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=0d28745b13bf5d14336d90eb9ad0c2fcb3761eb5ef58faae59a48ab8efa17671, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:52:97:14:da:f1:2f:89:76:80:2e:7f:fe:
8d:67:da:f9:62:46:de:08:3a:96:3a:ac:68:b0:ca:
b5:7a:5e:0a:14:ce:a1:3c:e1:cf:c6:1d:8b:c5:2f:
c6:64:5f:3c:63:72:1c:0d:03:85:b7:c6:1c:cd:7e:
be:e9:34:29:a9:e1:22:56:3b:82:54:e7:4c:82:59:
01:2a:38:5f:eb:38:14:47:8d:a8:a6:04:08:b8:4e:
a2:a9:46:a9:f2:7a:bb:46:81:08:80:b6:2c:ee:6f:
e7:40:22:12:9d:1c:d2:43:9c:d8:5a:4f:1d:67:e8:
c4:e7:67:ea:62:11:40:b7:e8:d3:b0:67:1b:af:e1:
db:fc:85:3b:37:b0:0f:5a:90:ab:b8:55:d0:38:b5:
39:14:51:5d:b9:9f:88:08:47:ce:8c:f8:ad:59:52:
da:43:af:ff:ae:80:40:9f:d4:77:5d:f6:27:10:c7:
37:72:2e:e7:e0:a4:fd:1d:3f:bb:ad:fa:e2:be:f7:
04:d3:e0:4a:c4:4b:fd:93:c3:8f:d9:14:ef:d1:c6:
63:bd:c3:73:e2:8a:9b:3c:5a:c6:1e:cb:ed:be:37:
01:fe:cc:a3:d6:5c:a4:38:56:7a:f3:2e:55:f9:7e:
1f:e4:b3:43:1b:dd:99:41:71:f4:27:a0:ef:d6:c2:
ee:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3A:28:FD:D0:8A:21:9E:80:D5:C8:C0:2D:40:07:27:DA:31:D7:32
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.0.0/17
Signature Algorithm: sha256WithRSAEncryption
1b:34:13:8e:49:50:d8:a1:cf:94:e1:89:2f:a0:64:cb:c1:81:
d1:71:c6:89:b0:31:72:64:8f:30:e8:8c:bd:79:74:c8:b3:61:
99:07:80:d5:8a:4f:72:cd:50:27:bf:18:d2:7d:0e:19:c1:72:
80:34:be:1f:f0:1d:c5:03:10:39:5b:70:51:12:14:54:42:1e:
29:19:2e:b0:19:4c:ea:86:cf:5f:6c:6c:27:a9:c6:2d:f6:ce:
2f:28:bc:1a:81:98:1a:66:9b:52:aa:44:06:45:8b:e1:ce:a6:
97:83:6a:8a:7b:de:3d:0c:77:32:db:a8:e6:42:eb:50:e7:11:
2c:57:f7:59:4d:6d:8b:ac:a5:6c:d7:a4:04:8d:90:a5:b1:de:
e8:f4:a1:f1:4b:2a:78:f7:07:35:6a:39:cf:6b:ab:c7:1e:7a:
8e:4c:b1:4e:e9:7a:4f:34:7e:38:9d:54:c2:3b:9c:a3:ba:dd:
cd:d4:da:b9:ab:b1:48:8c:c2:0f:24:68:20:f9:18:c4:61:88:
46:a9:f5:af:74:6e:ec:91:52:90:76:46:d7:f0:e8:f1:74:5b:
55:d9:2c:45:70:78:dc:36:9b:8c:a0:f0:54:08:e3:0e:c2:3a:
ff:86:d4:a4:21:84:76:7e:bf:c5:cc:93:be:d1:71:f4:7c:e7:
16:03:1f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:58 2026 by rpki-client