Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dbc88f4b-781b-45e4-8402-e6b216deacc3.roa
File: dbc88f4b-781b-45e4-8402-e6b216deacc3.roa (raw, json)
Hash identifier: ox1mTjMcb3bCc+gQwPvja8x+jOMsckiRkUxMGtP+9sM=
Subject key identifier: 85:CC:3A:DB:D2:70:B3:F2:B4:9C:CF:3F:B7:56:DC:63:1E:96:3A:A9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 02C79C168916E776058B1D91415F09DFB0E23B28
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dbc88f4b-781b-45e4-8402-e6b216deacc3.roa
Signing time: Fri 07 Aug 2026 05:50:49 +0000
ROA not before: Fri 07 Aug 2026 05:50:49 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 151.176.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c7:9c:16:89:16:e7:76:05:8b:1d:91:41:5f:09:df:b0:e2:3b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:49 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=1bab56a0d32961a7a988d454d991573e29dde2e2c3cdd5b360be97924791e5b7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:ce:55:79:e5:c3:5c:b3:f6:ca:ce:b2:76:
34:f6:51:61:1f:a6:3e:d4:bd:5a:6f:df:e2:e4:0c:
74:2c:07:f5:cc:1b:3f:d8:53:2f:7e:e3:5c:62:3b:
b2:ba:a1:f5:22:04:d0:e0:1d:77:f3:df:c3:8c:2c:
dd:60:b1:1b:a7:70:9f:82:f5:e1:99:63:78:d7:18:
11:88:19:19:f5:b2:91:4f:3f:bf:94:f0:8a:3a:9b:
27:17:bc:43:8a:1b:7c:46:80:a0:38:35:03:38:56:
2e:4a:f1:5e:c5:2f:70:7f:aa:e8:4e:71:34:19:35:
69:85:df:10:fd:94:49:a5:4a:39:c0:a4:1c:e4:7a:
55:da:64:9d:56:fc:5a:80:43:b0:a3:61:d4:a9:7b:
72:c9:fa:fb:66:d9:f2:74:84:12:db:54:46:3c:1a:
91:3d:94:9b:fd:e6:5f:e5:9d:f4:ae:62:0f:4b:4c:
6a:62:7b:cd:9e:0f:ac:de:7e:ce:13:35:9b:6b:cb:
b2:a9:5f:6a:af:f2:0f:bb:83:80:57:94:5d:71:42:
68:33:e0:24:fb:d2:47:df:54:07:b5:b8:52:9a:aa:
49:f1:e1:2e:be:29:76:28:a4:77:9f:c6:30:5a:bd:
36:3e:3d:8c:0a:89:54:fc:b5:78:a8:ab:be:3d:44:
00:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CC:3A:DB:D2:70:B3:F2:B4:9C:CF:3F:B7:56:DC:63:1E:96:3A:A9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dbc88f4b-781b-45e4-8402-e6b216deacc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.176.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:94:84:29:bc:d7:c6:bf:6c:61:75:2d:0e:0e:98:5d:79:ec:
5f:57:90:66:62:09:ae:90:25:fe:6a:b0:d9:cb:ba:e9:c2:c5:
48:ef:23:19:6d:37:18:dc:ab:1d:49:95:72:3d:fb:a7:39:44:
55:7a:f6:30:f4:0f:3c:90:9e:ac:43:68:85:3e:e4:e2:ab:84:
91:f4:c8:d0:8b:8a:7b:39:7b:6a:22:03:48:b9:b0:61:7d:08:
ee:ac:3c:53:56:19:1b:ae:dc:1d:6c:9b:b1:8b:ad:16:34:f6:
34:7b:75:ed:fd:b0:04:a2:a0:9f:77:53:82:1f:eb:9e:ed:1e:
de:cc:6d:46:cd:54:29:f8:ad:fb:05:d1:60:01:16:43:8f:42:
b0:12:52:c7:1b:ac:e7:30:25:66:f4:22:ce:a8:bd:23:e5:4b:
b4:84:40:35:0e:c4:4a:e9:bd:6a:d2:be:fa:af:eb:2c:45:a5:
9a:bf:b0:ef:04:93:7e:ac:69:6e:f5:62:32:32:23:64:1a:c7:
e9:03:62:e7:75:05:67:d3:0a:7c:86:22:93:ee:36:62:e9:b9:
33:bc:03:8e:50:28:5a:65:84:e5:1c:9b:30:d7:5b:c3:47:c9:
95:ba:09:23:da:d2:56:f7:40:2f:9f:08:1a:47:08:44:6e:a4:
4b:bc:47:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:09 2026 by rpki-client