Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c3872047-e1f4-4ee3-832d-c624ea352355.roa
File: c3872047-e1f4-4ee3-832d-c624ea352355.roa (raw, json)
Hash identifier: 3KnOxVVYn1FBdyelL5X2Uxe06i+RD491SM+7InFT11U=
Subject key identifier: 7B:2E:95:6F:B6:3B:0B:D3:A7:4C:4F:E5:06:00:EC:75:39:06:9A:8D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 67621B48FA899C008767DC366ED942509FDA9110
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c3872047-e1f4-4ee3-832d-c624ea352355.roa
Signing time: Mon 26 Oct 2026 05:50:23 +0000
ROA not before: Mon 26 Oct 2026 05:50:23 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 193.57.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:62:1b:48:fa:89:9c:00:87:67:dc:36:6e:d9:42:50:9f:da:91:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:23 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=ee24f59faa863f9f6df70f1ac6ba8a33dfdc22ce1d9273ac5b95e0ad6903200e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:62:22:00:0c:ca:e0:54:05:a8:4b:53:d8:
ff:e5:2f:92:3a:56:80:ae:4d:36:30:79:3e:41:1b:
7f:9e:6f:e4:05:8d:e7:05:c1:77:b7:ad:8c:a5:9f:
52:d6:4a:b0:63:66:77:70:e4:ad:c5:a1:b6:5d:bd:
00:20:38:51:e6:5a:5e:94:3e:93:f2:37:2d:02:dd:
74:bb:05:d2:1c:42:b4:11:23:4c:6b:5f:b2:00:68:
39:b8:71:34:4d:c6:f6:4e:28:92:24:0e:cd:ed:f0:
19:c0:94:e7:05:29:fb:96:de:75:32:a0:d6:86:57:
a1:51:63:4a:48:bc:8b:c7:7b:f6:5d:c7:1a:59:29:
83:a3:9a:61:73:ca:29:7a:c5:35:d6:98:e1:63:9a:
f3:df:7e:6a:63:0d:b2:11:4f:ef:59:47:cc:59:b0:
4b:35:cc:72:91:9b:ab:49:a2:e2:57:46:69:2d:dd:
1c:4c:7b:09:e9:d0:41:a7:16:e9:86:10:d2:7a:6f:
79:93:0f:25:8f:80:49:8e:f6:ea:96:6c:55:c5:15:
56:b1:28:5f:97:b3:bd:62:4c:52:9c:b4:07:7c:12:
e5:25:c6:da:ba:c9:83:c6:cc:ea:3a:d4:c9:e6:8f:
01:f0:e0:73:de:ef:ba:8b:2d:7a:cd:6f:ff:75:83:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2E:95:6F:B6:3B:0B:D3:A7:4C:4F:E5:06:00:EC:75:39:06:9A:8D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c3872047-e1f4-4ee3-832d-c624ea352355.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.169.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:19:17:e0:b8:a2:82:e8:d8:ee:eb:21:a4:68:fd:e8:0b:84:
17:bc:f9:9a:35:61:28:0a:1b:e1:52:fe:c2:79:f7:45:e9:8b:
3e:59:49:b6:d4:98:1c:6d:7d:a6:4f:31:1d:7d:77:09:dd:72:
e2:50:b9:fa:7f:99:1f:6c:62:fb:f7:7a:46:95:32:46:e1:62:
8f:a7:7d:d6:fb:9d:3e:7f:7c:98:0b:5e:c9:2e:ce:6c:c1:ad:
54:91:46:d5:57:c7:a2:b5:01:cf:09:47:56:57:cc:18:86:bc:
59:c5:a2:03:b0:f1:fa:bc:eb:5e:55:e7:2a:30:53:08:80:65:
e0:61:f6:4c:65:dd:fe:d9:ea:49:06:24:8a:fa:76:40:c4:22:
dc:d8:e3:2d:de:06:7b:3d:b3:58:d5:e7:bb:07:f1:e6:7b:e9:
98:70:c2:35:93:ee:ab:b6:ec:96:ca:a4:4d:4e:87:92:da:78:
b9:e4:0b:82:d4:58:2b:44:92:bb:8d:e3:3e:36:aa:cc:6a:6d:
aa:af:b6:b0:99:fc:3d:85:a7:4b:cd:c6:5c:bc:a7:88:e9:1f:
23:2a:fa:dd:a8:82:73:00:a2:b4:2f:89:06:70:70:8c:08:e3:
f8:ef:2c:52:0d:1d:b6:9a:e2:72:77:8c:f5:eb:d1:9a:1c:ea:
be:c9:2d:94
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUZ2IbSPqJnACHZ9w2btlCUJ/akRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTUwMjNaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGVlMjRmNTlmYWE4NjNmOWY2ZGY3MGYxYWM2YmE4YTMzZGZkYzIyY2UxZDky
NzNhYzViOTVlMGFkNjkwMzIwMGUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMB0YiIADMrgVAWoS1PY/+UvkjpWgK5NNjB5PkEbf55v5AWN5wXBd7etjKWf
UtZKsGNmd3DkrcWhtl29ACA4UeZaXpQ+k/I3LQLddLsF0hxCtBEjTGtfsgBoObhx
NE3G9k4okiQOze3wGcCU5wUp+5bedTKg1oZXoVFjSki8i8d79l3HGlkpg6OaYXPK
KXrFNdaY4WOa899+amMNshFP71lHzFmwSzXMcpGbq0mi4ldGaS3dHEx7CenQQacW
6YYQ0npveZMPJY+ASY726pZsVcUVVrEoX5ezvWJMUpy0B3wS5SXG2rrJg8bM6jrU
yeaPAfDgc97vuostes1v/3WDexMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR7LpVv
tjsL06dMT+UGAOx1OQaajTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YzM4NzIwNDctZTFmNC00ZWUzLTgzMmQtYzYyNGVhMzUyMzU1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAME5qTAN
BgkqhkiG9w0BAQsFAAOCAQEAHxkX4LiigujY7ushpGj96AuEF7z5mjVhKAob4VL+
wnn3RemLPllJttSYHG19pk8xHX13Cd1y4lC5+n+ZH2xi+/d6RpUyRuFij6d91vud
Pn98mAteyS7ObMGtVJFG1VfHorUBzwlHVlfMGIa8WcWiA7Dx+rzrXlXnKjBTCIBl
4GH2TGXd/tnqSQYkivp2QMQi3NjjLd4Gez2zWNXnuwfx5nvpmHDCNZPuq7bslsqk
TU6Hktp4ueQLgtRYK0SSu43jPjaqzGptqq+2sJn8PYWnS83GXLyniOkfIyr63aiC
cwCitC+JBnBwjAjj+O8sUg0dtpricneM9evRmhzqvsktlA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 11:18:42 2026 by rpki-client