Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d485a465-65e9-4a19-a397-f29d1a36d166.roa
File: d485a465-65e9-4a19-a397-f29d1a36d166.roa (raw, json)
Hash identifier: HbW5Q0DeGjm7Ra7kUw5YX2QxC9utPDyud4ISVLVd6XY=
Subject key identifier: 0F:8C:E3:C3:A7:80:3B:EF:5F:17:1E:53:3D:FA:77:30:44:F0:F7:6D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6510DBD9E53294FBBCB2FF577DA7ABBDC6A1B906
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d485a465-65e9-4a19-a397-f29d1a36d166.roa
Signing time: Mon 26 Oct 2026 05:50:43 +0000
ROA not before: Mon 26 Oct 2026 05:50:43 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 195.17.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:10:db:d9:e5:32:94:fb:bc:b2:ff:57:7d:a7:ab:bd:c6:a1:b9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:43 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=806c280d1bb9ee6347e34187f085bc48be80a2fa44b1bc79185faabb66d833a4, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:0d:d6:4d:12:2a:cf:67:93:45:f9:15:05:
89:ba:0a:ff:56:2c:e1:ba:56:84:86:3f:2a:3f:68:
c1:31:50:52:1d:8c:3e:76:b3:e8:60:cd:38:7f:d2:
4c:7b:ff:1c:27:2c:a4:4d:3a:d0:c0:4c:43:b4:56:
a7:a1:cd:2e:ee:2f:62:ad:af:64:df:bd:4b:b1:29:
64:60:24:4a:a5:50:e2:a5:17:05:cd:fe:f4:78:7e:
e8:86:e0:bc:3e:3d:83:06:1b:a4:c1:3c:15:94:26:
da:57:36:0d:8e:94:4b:c1:fc:0c:b1:e4:d5:37:b7:
d7:c4:c9:1e:c0:8c:eb:8e:b3:77:50:7f:12:ea:b9:
4d:0d:39:01:3f:29:84:0e:50:54:ea:00:58:83:d2:
02:75:95:b6:e1:58:aa:2b:20:33:95:56:b3:aa:5d:
16:d7:5a:01:57:b7:29:d3:66:df:e3:5d:77:bf:75:
31:03:f8:60:d6:29:34:50:fa:86:d4:16:f3:df:a4:
e6:21:52:dd:ed:fa:db:93:c9:3c:86:c9:8c:9a:cc:
50:8a:38:dd:93:9e:6d:d5:12:4f:00:fe:55:00:0e:
10:8c:06:f3:83:14:e8:0c:f3:e5:1f:17:bc:88:13:
34:8f:2c:19:dc:98:e2:03:00:42:af:c5:64:56:1c:
be:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8C:E3:C3:A7:80:3B:EF:5F:17:1E:53:3D:FA:77:30:44:F0:F7:6D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d485a465-65e9-4a19-a397-f29d1a36d166.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.17.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:08:77:b4:45:54:16:a2:b0:cf:c0:9f:98:23:cc:e1:89:73:
53:63:da:eb:51:ab:04:b6:59:4b:bd:fa:89:3d:ac:f8:b0:c4:
0d:ef:0b:3f:2e:33:ba:e3:f1:0f:ec:cd:c5:e4:cf:e7:36:e4:
21:5c:af:91:97:10:a1:30:6e:11:b5:7f:78:62:65:7c:a6:64:
91:2f:3d:1b:80:93:a2:61:5f:c8:57:24:8f:c0:0e:0d:b9:ea:
b7:66:7e:b7:e1:78:77:f0:cd:e6:22:c3:6f:f8:92:28:da:25:
fc:d6:ab:8f:2b:6d:42:49:47:cd:18:db:91:26:9c:d3:bb:58:
2c:11:00:21:77:72:5d:3a:c5:92:f0:98:db:ff:de:e1:f7:a8:
3e:fe:55:c0:9f:00:a1:83:b3:32:10:49:4e:78:d1:94:d3:9f:
c0:e4:c1:ad:3b:cd:53:3c:4b:e3:43:44:08:78:01:a4:bb:a8:
4c:b3:43:f9:4a:90:0d:91:6c:cf:5f:43:87:42:05:55:4b:5d:
00:80:79:b4:eb:96:b7:b0:94:3e:ae:f5:50:99:cb:7d:82:7f:
47:2e:22:ec:db:63:a3:81:b0:76:69:32:4e:41:ae:a6:70:6d:
66:82:21:f1:9b:04:86:f6:78:fa:94:5e:c7:24:ba:65:30:08:
67:dd:dd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:21:56 2026 by rpki-client