Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e398b47e-9867-4e71-96db-760f9102a39f.roa
File: e398b47e-9867-4e71-96db-760f9102a39f.roa (raw, json)
Hash identifier: Fs6H6gIiKu4xf4ubkw4iXMvCQlLxaiQyGBoyDpIpbIY=
Subject key identifier: 9B:44:F9:90:33:59:F5:52:1A:43:B4:F7:87:59:10:51:09:6E:6A:8C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4E70DE668D9669BC842E16518E6B36E9A89ECA06
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e398b47e-9867-4e71-96db-760f9102a39f.roa
Signing time: Fri 07 Aug 2026 05:40:10 +0000
ROA not before: Fri 07 Aug 2026 05:40:10 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 62785
IP address blocks: 193.57.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:70:de:66:8d:96:69:bc:84:2e:16:51:8e:6b:36:e9:a8:9e:ca:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:40:10 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=68529493a917bf51e2a027b1d2569ae3ad9d0fd9122f45453e5e7500e9ebf4e5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:d4:f9:3a:e2:30:76:11:ac:8f:30:b2:c6:
94:63:57:a8:6b:7d:aa:a9:c8:e6:7e:b2:3e:ed:7e:
4a:a3:0d:45:0a:ff:c5:f0:70:bd:db:30:01:cc:a1:
22:db:e5:44:ca:6f:0b:e0:b9:6b:74:05:21:e9:e8:
eb:be:32:16:a1:d1:21:3b:f0:d2:f2:60:b9:ff:0a:
0b:3c:54:0d:4b:97:8c:7c:ac:ee:54:9d:67:98:be:
7d:c5:10:62:b3:bc:c0:1e:9a:39:9d:48:eb:c2:47:
ba:9b:a0:93:bb:63:e9:f1:bb:e2:e7:3e:55:e5:5b:
87:73:11:48:5c:80:b1:b8:58:91:59:54:f2:0c:f1:
70:43:0a:00:91:e1:f6:22:1d:0d:a8:43:f0:37:2f:
65:55:29:53:f6:3e:e7:7f:1e:f2:ee:6f:70:02:ca:
77:71:7f:f0:26:5b:b8:5f:3b:25:72:98:ed:bf:b8:
cc:a2:08:9d:c5:d3:d3:11:97:bc:66:ea:82:5d:88:
2b:8d:0f:45:c3:69:0a:e2:b4:d9:cd:4d:57:03:31:
1c:7e:e1:ac:b6:9d:a2:97:31:2a:13:fc:00:8c:87:
be:4b:45:cc:7d:d4:69:ad:ad:f1:5a:66:53:64:03:
e0:a7:0f:13:47:11:fe:d2:db:29:9f:01:15:20:b8:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:44:F9:90:33:59:F5:52:1A:43:B4:F7:87:59:10:51:09:6E:6A:8C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e398b47e-9867-4e71-96db-760f9102a39f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.182.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:e4:5b:cf:dc:2e:93:a4:65:70:4e:ff:e2:29:11:fc:65:86:
d0:36:23:ef:ba:26:2e:ff:c4:b7:25:31:b0:c9:70:fa:09:e9:
bd:3f:0f:49:d4:5a:1d:a4:be:c1:5f:cd:2b:f9:a8:a7:1c:8c:
d3:44:3c:bd:f8:9a:a6:5a:a1:bd:df:4c:cc:b9:d4:ec:3f:bf:
dc:c6:c9:3d:ed:f3:a0:54:2a:c2:bf:29:c5:85:e6:35:61:06:
5d:5d:c5:d1:f8:41:e5:4b:2b:2b:3b:24:82:49:2d:75:54:d3:
f5:5c:2e:d9:be:36:3f:85:74:5b:f8:c0:9b:b6:e6:5e:c9:88:
2d:81:da:81:07:16:f4:65:f3:e7:35:60:35:cf:00:e5:70:07:
69:da:d2:ed:c2:36:a3:78:4f:fd:10:30:f6:3c:87:f9:cb:3f:
30:81:cf:02:09:03:a5:f5:66:a2:06:15:cc:5f:06:67:cb:33:
2d:2d:0c:7b:3d:b8:b1:37:2a:be:f4:23:c1:44:8f:c3:07:11:
7e:45:6f:a2:84:6c:fa:8b:7f:d6:f8:fc:47:f9:d7:30:8f:60:
1c:00:bc:00:b1:ef:e8:a3:88:b9:20:b5:c3:1d:e4:df:8f:a4:
be:5f:97:1c:9e:5a:b8:71:49:56:55:86:11:3a:0c:4f:ff:7d:
d0:04:46:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 16:50:33 2026 by rpki-client