Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c5b27928-f79b-49c0-80c5-88852eab11e3.roa
File: c5b27928-f79b-49c0-80c5-88852eab11e3.roa (raw, json)
Hash identifier: 7P4yv9Iizb1RQCWF55uQI9eciRuz2UpBe82UeSXOQxo=
Subject key identifier: 72:57:AD:2E:71:49:5D:EE:CE:2A:48:27:FC:68:F0:9A:98:3D:84:83
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 39B21638F145F5EACE91EE55F6038D82D92E0174
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c5b27928-f79b-49c0-80c5-88852eab11e3.roa
Signing time: Fri 07 Aug 2026 05:40:11 +0000
ROA not before: Fri 07 Aug 2026 05:40:11 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 193.57.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b2:16:38:f1:45:f5:ea:ce:91:ee:55:f6:03:8d:82:d9:2e:01:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:40:11 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=1a031776c1bbbbd31900a363d85c1c3c413ff4dc394980aecbe23f3b1ba10c75, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:4f:99:31:0d:c5:88:78:c3:6b:36:62:fc:
bc:85:50:5d:ef:c9:19:f2:5e:52:16:54:f2:b0:12:
6e:24:a1:74:8a:eb:10:e2:eb:af:f1:89:98:83:f6:
c3:8a:ce:08:b1:02:f4:57:7f:72:51:23:a1:de:20:
e9:76:41:15:16:76:69:c4:76:11:88:15:32:8c:96:
b0:3e:a5:d4:5e:2e:ab:da:30:5c:af:6e:25:5b:d8:
5c:d2:e3:23:3b:0e:bd:db:e2:91:4b:0c:26:fa:14:
48:61:e1:d8:5e:a1:1a:33:a2:43:b3:00:4f:9c:0d:
e8:9e:9d:a3:1a:79:84:0f:18:39:d1:0c:7e:77:01:
71:1b:c9:f7:01:84:8e:bc:22:14:c2:a6:86:cc:c5:
2e:36:49:f9:b1:b8:d3:de:f0:94:5c:dd:db:14:60:
b6:89:82:a2:8d:dd:ff:40:3e:3b:e8:81:9d:6c:66:
b4:5c:c9:cd:3c:10:44:10:d8:ab:95:c0:ec:7a:a1:
19:74:2f:83:70:af:e8:bb:a5:22:43:69:45:3d:af:
12:a7:8a:e0:b0:1e:2f:f6:ee:e6:8a:7a:c5:56:49:
9b:63:6e:10:8e:a0:c3:f0:92:8d:bd:e6:77:07:19:
ea:0f:05:ab:c7:b4:4c:46:31:e2:3c:05:fc:76:90:
2f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:57:AD:2E:71:49:5D:EE:CE:2A:48:27:FC:68:F0:9A:98:3D:84:83
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c5b27928-f79b-49c0-80c5-88852eab11e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.182.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:55:c9:88:e5:1c:b0:4c:54:46:fa:9d:26:19:1c:24:81:cb:
a2:6a:86:14:7d:23:e6:7b:74:68:7e:bc:67:b8:e0:15:64:40:
0b:29:d8:5f:35:71:db:0b:ca:bc:3f:fd:41:e9:a6:d6:99:50:
a5:e2:fb:14:fd:e4:7c:d9:13:e5:92:87:02:8e:dc:d3:02:9c:
78:de:82:82:12:f3:75:bf:ae:4b:56:93:e4:6e:7b:57:a7:5c:
64:b6:fe:19:78:ce:c2:bf:86:fc:f9:32:b2:71:ba:b5:86:38:
47:f4:cf:b2:5f:17:8d:c5:7a:a1:8e:be:b8:ca:84:54:8e:a0:
22:df:e6:1b:3c:1f:b2:1a:21:b6:79:ad:e2:77:9e:b1:ee:3c:
9e:91:42:9b:dd:6b:fc:46:8d:b9:53:06:0f:1a:77:b2:9c:da:
d5:2a:83:eb:01:26:17:5e:d9:50:ed:b0:5d:4d:fc:a9:98:20:
9c:93:2e:af:72:5b:04:ea:b0:96:e5:c5:97:f2:fc:35:cf:0d:
19:f6:15:fa:de:77:7e:45:98:e4:a5:44:97:4f:93:19:91:73:
17:2c:97:8e:ae:33:36:91:5e:e7:69:5c:61:d3:10:9b:97:ce:
c8:01:19:1f:26:da:35:41:9d:14:91:23:41:69:99:46:d2:7d:
5d:b9:25:ce
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUObIWOPFF9erOke5V9gONgtkuAXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDcwNTQwMTFaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDFhMDMxNzc2YzFiYmJiZDMxOTAwYTM2M2Q4NWMxYzNjNDEzZmY0ZGMzOTQ5
ODBhZWNiZTIzZjNiMWJhMTBjNzUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKHVT5kxDcWIeMNrNmL8vIVQXe/JGfJeUhZU8rASbiShdIrrEOLrr/GJmIP2
w4rOCLEC9Fd/clEjod4g6XZBFRZ2acR2EYgVMoyWsD6l1F4uq9owXK9uJVvYXNLj
IzsOvdvikUsMJvoUSGHh2F6hGjOiQ7MAT5wN6J6doxp5hA8YOdEMfncBcRvJ9wGE
jrwiFMKmhszFLjZJ+bG4097wlFzd2xRgtomCoo3d/0A+O+iBnWxmtFzJzTwQRBDY
q5XA7HqhGXQvg3Cv6LulIkNpRT2vEqeK4LAeL/bu5op6xVZJm2NuEI6gw/CSjb3m
dwcZ6g8Fq8e0TEYx4jwF/HaQL/sCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRyV60u
cUld7s4qSCf8aPCamD2EgzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YzViMjc5MjgtZjc5Yi00OWMwLTgwYzUtODg4NTJlYWIxMWUzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcE5tjAN
BgkqhkiG9w0BAQsFAAOCAQEAPFXJiOUcsExURvqdJhkcJIHLomqGFH0j5nt0aH68
Z7jgFWRACynYXzVx2wvKvD/9Qemm1plQpeL7FP3kfNkT5ZKHAo7c0wKceN6CghLz
db+uS1aT5G57V6dcZLb+GXjOwr+G/PkysnG6tYY4R/TPsl8XjcV6oY6+uMqEVI6g
It/mGzwfshohtnmt4neese48npFCm91r/EaNuVMGDxp3spza1SqD6wEmF17ZUO2w
XU38qZggnJMur3JbBOqwluXFl/L8Nc8NGfYV+t53fkWY5KVEl0+TGZFzFyyXjq4z
NpFe52lcYdMQm5fOyAEZHybaNUGdFJEjQWmZRtJ9Xbklzg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:33 2026 by rpki-client