Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e6379fd6-eaa8-4348-8280-afb9b8552668.roa
File: e6379fd6-eaa8-4348-8280-afb9b8552668.roa (raw, json)
Hash identifier: SUcI51w1a3HoITGPGeBg9tfQhPahrQtWjxaJ40Ye4xE=
Subject key identifier: B4:97:86:57:65:10:79:F6:5D:67:76:80:0D:26:84:63:8C:AF:F6:2E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0F921C80A52AF9F64ABD53F888BB4EB9C5283493
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e6379fd6-eaa8-4348-8280-afb9b8552668.roa
Signing time: Sun 04 Oct 2026 00:40:10 +0000
ROA not before: Sun 04 Oct 2026 00:40:10 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 7224
IP address blocks: 83.118.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:92:1c:80:a5:2a:f9:f6:4a:bd:53:f8:88:bb:4e:b9:c5:28:34:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 4 00:40:10 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=c4e86b6e5d39a54e1d4092ab80f90bb5715eb6e05c54d0484d0158a9ca076462, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:66:8e:1c:d7:16:e2:2c:40:15:e6:f8:75:
cf:f8:0d:9c:8d:be:27:22:bd:ed:bc:73:35:13:a7:
bc:09:ab:ea:da:2b:ce:64:4b:20:ef:80:60:b4:bc:
81:fa:c8:c8:e3:eb:56:c3:c3:65:eb:02:6a:5d:ad:
3d:0b:aa:03:88:9b:46:63:1e:7f:ff:67:73:f7:64:
8e:68:1f:24:9d:fc:82:a9:f4:4e:24:12:49:a4:e3:
9c:f5:1a:4b:87:55:0d:12:10:40:4a:25:8b:95:77:
2e:9f:30:91:3d:d2:38:3d:82:7c:9d:d7:6a:6e:32:
08:cc:a4:1b:44:71:51:12:1e:08:0e:19:89:0a:ed:
07:96:2c:69:26:44:2c:58:79:37:bf:95:d5:c7:db:
2d:71:74:9b:c1:6b:2b:41:9b:46:21:4b:ab:58:13:
dc:1d:13:d7:fe:ca:f1:c6:40:ef:de:81:24:fb:28:
89:e1:f2:aa:8c:af:33:ec:48:5c:48:96:e1:32:c9:
bb:a6:e6:2b:84:4a:f8:a8:93:5c:5d:0e:49:f9:b3:
8c:af:3c:ed:4b:c8:c6:62:8c:68:21:b6:d9:a2:d5:
b7:51:e1:b8:e2:b3:08:81:0f:ca:e0:ac:eb:8a:73:
42:77:75:01:4a:36:2f:a5:4e:07:97:c3:9a:e1:6e:
b1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:97:86:57:65:10:79:F6:5D:67:76:80:0D:26:84:63:8C:AF:F6:2E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e6379fd6-eaa8-4348-8280-afb9b8552668.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:ba:cd:12:fe:d9:06:d2:1d:bd:45:e1:be:64:a1:0d:eb:5a:
a1:0e:95:a5:fb:d0:c8:56:db:d4:47:87:c9:e4:3c:b6:70:2d:
cc:82:46:94:97:d5:9c:76:e7:71:6c:03:a0:2b:a6:a5:40:2e:
2a:d0:2c:01:50:11:72:e2:94:34:92:b1:72:d3:67:c5:3f:97:
b5:3d:3d:ed:c5:a6:4e:e5:51:50:6b:8e:ad:38:70:d7:8c:68:
11:d6:3d:79:1a:f9:c2:1a:89:4d:25:cb:aa:eb:4b:24:91:8f:
2f:ae:ee:36:d0:29:5b:75:df:6b:8d:b3:97:e0:dc:99:23:3a:
ce:f3:25:54:b8:18:a6:19:53:15:10:fd:d5:78:cb:56:01:93:
a2:16:07:63:71:93:9e:42:1f:3d:b9:65:88:e9:61:91:0f:35:
17:54:24:35:9e:03:ad:57:0b:a9:1e:5a:88:72:a2:ab:e3:82:
e5:0a:23:71:48:c4:f5:02:60:ca:6c:fc:54:85:12:11:24:a0:
25:79:a0:93:1d:44:2c:0e:1d:b2:ac:02:01:10:59:c2:e6:a8:
dd:55:e8:74:36:80:e7:12:e5:94:05:87:8e:a2:64:b8:35:0f:
be:07:05:0f:e6:78:3f:d9:88:59:ab:90:88:1f:19:47:67:03:
ef:25:e1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:35:34 2026 by rpki-client