Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa
File: ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa (raw, json)
Hash identifier: h1vHR7FuNxn+MTXdDc+D69PT72W7bSbd7KS6jeuO0Lk=
Subject key identifier: EE:E4:5D:84:47:AB:C7:A1:66:05:EC:85:74:78:BB:F7:98:5A:66:34
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 76317DC5DCB36FFFA6AAB2ED26790CDB29EBEEA9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa
Signing time: Mon 26 Oct 2026 05:50:52 +0000
ROA not before: Mon 26 Oct 2026 05:50:52 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 57.99.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:31:7d:c5:dc:b3:6f:ff:a6:aa:b2:ed:26:79:0c:db:29:eb:ee:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:52 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=a3caed1a53384311c320584671707df3579a846213b0dbee3dfdeb08b53fc843, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:ae:ac:27:79:88:b0:94:ed:73:87:11:04:
8f:13:b4:4b:b5:8e:8e:44:a0:b6:5d:7c:c3:b9:ca:
cd:5c:34:36:a2:cf:8f:ac:ea:be:e1:97:36:ef:fa:
76:30:10:c6:f6:4f:45:d7:92:81:0a:fd:93:85:c6:
bf:ee:a7:fc:34:8a:0b:e5:4e:6b:b6:44:8b:f4:7d:
2e:6f:df:a4:21:da:cb:1c:2d:a5:e0:90:f3:2f:7e:
74:2e:64:5a:ea:ad:04:a5:a0:12:09:b0:b3:cb:4c:
89:3a:50:88:2a:fd:10:3f:c3:98:52:05:10:d0:96:
06:3c:17:40:7f:47:ae:ba:8a:70:99:0b:2d:02:0a:
da:02:67:48:43:b3:fc:3e:da:ae:35:e5:be:e7:56:
31:38:4b:a9:fd:79:f4:e4:91:10:c6:be:ad:83:a7:
b8:12:d9:7c:f8:df:58:cf:01:22:e6:2e:0f:61:be:
ef:c4:d6:63:51:8c:9e:f9:e9:62:60:e1:5c:02:5f:
01:f8:d3:e2:36:ed:c9:c3:46:5a:83:32:51:ba:3d:
39:b6:40:3e:ea:4e:05:ec:5b:42:38:90:37:da:18:
8a:60:e2:b8:10:be:e3:9e:89:89:01:ed:94:ac:21:
0b:34:3d:4f:a8:85:7a:85:8d:3a:c8:df:9b:09:e2:
f7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E4:5D:84:47:AB:C7:A1:66:05:EC:85:74:78:BB:F7:98:5A:66:34
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ce87dbb9-4413-42c2-ba81-44ccdf95bd2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.99.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:d4:56:d3:52:c0:29:51:83:ca:2a:db:ea:94:3e:bd:74:01:
a5:7e:05:7a:76:f4:eb:f1:02:69:76:f5:10:d3:7b:01:04:fb:
0d:90:c9:85:f8:bb:b6:9e:b1:77:a7:ac:85:a1:c2:98:84:02:
f2:e4:74:b6:6a:a5:ed:fe:26:41:73:71:df:64:92:a3:66:4e:
ef:ab:4d:c7:6b:31:c4:12:6a:a5:83:55:82:9e:43:a3:b1:70:
10:a0:85:e0:4a:f9:7e:3d:78:15:6b:ba:65:61:6c:bd:ef:3c:
71:69:be:f2:8d:2f:54:a2:21:ee:11:5e:17:e5:3c:3f:b0:4c:
25:37:ee:3b:3c:94:ae:ed:c0:ee:e2:12:73:64:2e:fa:ca:f2:
1b:4d:51:d6:90:4e:b3:5f:9e:da:a0:e1:2e:8c:f9:f7:bd:d3:
93:04:ba:02:5e:10:11:4f:68:ca:76:4f:99:ba:c0:8c:68:42:
83:0f:e1:3a:f8:29:3f:05:9d:d5:05:3b:49:f7:11:c6:53:3b:
88:3f:81:84:0d:89:3b:ad:f1:9f:44:11:6f:05:f8:d7:46:01:
9d:ed:21:5d:80:d6:3d:21:e8:df:1a:ed:81:f1:a6:88:b9:73:
24:ba:e8:79:22:45:0a:dc:b3:26:aa:a3:d4:6c:32:c7:f7:07:
92:e2:e0:70
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUdjF9xdyzb/+mqrLtJnkM2ynr7qkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTUwNTJaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGEzY2FlZDFhNTMzODQzMTFjMzIwNTg0NjcxNzA3ZGYzNTc5YTg0NjIxM2Iw
ZGJlZTNkZmRlYjA4YjUzZmM4NDMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMmsrqwneYiwlO1zhxEEjxO0S7WOjkSgtl18w7nKzVw0NqLPj6zqvuGXNu/6
djAQxvZPRdeSgQr9k4XGv+6n/DSKC+VOa7ZEi/R9Lm/fpCHayxwtpeCQ8y9+dC5k
WuqtBKWgEgmws8tMiTpQiCr9ED/DmFIFENCWBjwXQH9HrrqKcJkLLQIK2gJnSEOz
/D7arjXlvudWMThLqf159OSREMa+rYOnuBLZfPjfWM8BIuYuD2G+78TWY1GMnvnp
YmDhXAJfAfjT4jbtycNGWoMyUbo9ObZAPupOBexbQjiQN9oYimDiuBC+456JiQHt
lKwhCzQ9T6iFeoWNOsjfmwni90kCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTu5F2E
R6vHoWYF7IV0eLv3mFpmNDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
Y2U4N2RiYjktNDQxMy00MmMyLWJhODEtNDRjY2RmOTViZDJjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADljMA0G
CSqGSIb3DQEBCwUAA4IBAQCk1FbTUsApUYPKKtvqlD69dAGlfgV6dvTr8QJpdvUQ
03sBBPsNkMmF+Lu2nrF3p6yFocKYhALy5HS2aqXt/iZBc3HfZJKjZk7vq03HazHE
Emqlg1WCnkOjsXAQoIXgSvl+PXgVa7plYWy97zxxab7yjS9UoiHuEV4X5Tw/sEwl
N+47PJSu7cDu4hJzZC76yvIbTVHWkE6zX57aoOEujPn3vdOTBLoCXhART2jKdk+Z
usCMaEKDD+E6+Ck/BZ3VBTtJ9xHGUzuIP4GEDYk7rfGfRBFvBfjXRgGd7SFdgNY9
IejfGu2B8aaIuXMkuuh5IkUK3LMmqqPUbDLH9weS4uBw
-----END CERTIFICATE-----
Generated at Thu Nov 5 03:07:40 2026 by rpki-client