Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
File: e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa (raw, json)
Hash identifier: 9dwHPuq8dS6hnkz5VkyHzJvU4HjCemKK+XDvuGDCkLM=
Subject key identifier: CE:7D:1E:FB:BD:F9:34:4A:28:3C:A5:FF:84:9F:2F:0B:9A:F5:3A:35
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 68858666B124314F9DA2A9F9B2F06258CBBAA7AD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
Signing time: Tue 05 Aug 2025 20:30:44 +0000
ROA not before: Tue 05 Aug 2025 20:30:44 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.101.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:85:86:66:b1:24:31:4f:9d:a2:a9:f9:b2:f0:62:58:cb:ba:a7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 5 20:30:44 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=c87a465500c984fa83e919673d9907e34e3e03647e981c8bb3ce991044dbe78c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:4d:ca:14:38:3b:9e:c6:de:76:9f:1c:d0:
42:9f:78:b4:11:85:38:d6:63:56:b5:d3:3c:06:23:
26:12:82:93:7d:46:76:1d:1c:de:fe:94:4b:f4:3a:
f9:17:e3:11:20:d5:47:88:55:e1:09:9c:c4:d2:11:
b4:36:dd:fe:c6:19:50:1f:82:e1:0c:f4:8c:c1:ff:
ef:c5:1b:56:50:42:f7:43:59:8b:33:18:43:95:da:
ec:dd:66:36:3f:d7:49:fe:99:13:99:f0:27:69:33:
f9:02:7d:71:79:48:77:e8:c4:e9:1b:6c:2b:eb:ab:
e4:3a:cb:e1:29:6f:d0:c2:48:db:e0:bf:7c:c3:0a:
95:64:53:37:55:9c:68:9a:11:bf:7f:ca:27:3f:98:
9b:c6:e1:c3:06:78:c6:08:c0:9f:a0:2e:37:65:1b:
00:b6:0c:ab:c0:9d:90:9b:fc:1e:9f:5b:71:a6:e1:
0b:03:12:f0:66:a0:52:41:2b:25:07:7c:83:f2:c9:
43:cd:47:63:f1:a1:8f:1a:33:bd:79:06:7c:59:7f:
5d:16:2b:40:b5:da:e7:44:5c:01:d6:04:8d:1c:bc:
40:8a:32:5a:88:39:e7:f5:fd:61:21:d4:53:56:fa:
27:08:94:b1:13:f3:a5:e6:3b:66:36:70:4f:ed:74:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7D:1E:FB:BD:F9:34:4A:28:3C:A5:FF:84:9F:2F:0B:9A:F5:3A:35
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.101.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:53:54:9a:d8:c7:f3:96:7a:58:9d:19:45:31:9e:14:ec:9a:
95:35:79:8c:a6:cd:3f:8b:79:41:99:ed:c9:2f:87:3a:3a:c3:
4e:7c:8d:e5:84:c8:55:15:1b:37:32:c7:8e:7a:a0:f5:a2:e4:
0b:32:9e:33:84:00:00:02:b7:89:6c:97:35:1f:c9:da:db:92:
a2:21:b3:f7:55:89:c1:87:aa:d1:5b:de:00:14:81:1e:51:a6:
4f:38:59:08:33:b0:cd:6b:6c:6e:ad:dd:67:1b:e6:38:74:aa:
cc:a6:f5:2f:03:15:f6:c9:61:7d:27:9e:a2:96:e5:c2:0d:4e:
38:57:c6:68:3c:14:89:11:b0:72:01:03:09:8f:07:c2:6d:b1:
13:b2:b7:2a:ac:e4:68:a1:44:ca:c5:9c:9a:96:5f:e3:87:50:
72:5b:9c:ea:4f:e7:cd:ce:91:88:12:85:07:eb:e8:85:2a:98:
2f:d3:0c:8b:bd:61:fb:f2:b8:2d:e5:30:66:d2:80:7d:4a:73:
da:f9:49:f1:ef:2b:74:ca:a1:63:78:c8:d4:a8:1f:34:1b:5a:
23:42:16:cd:ab:cd:dc:02:f9:c1:12:cf:fa:46:12:d4:3c:64:
21:f3:02:8f:4b:90:ba:da:b9:8b:0e:d5:73:6d:98:8b:37:86:
84:fc:8e:94
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUaIWGZrEkMU+doqn5svBiWMu6p60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA4MDUyMDMwNDRaFw0yNTA5MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGM4N2E0NjU1MDBjOTg0ZmE4M2U5MTk2NzNkOTkwN2UzNGUzZTAzNjQ3ZTk4
MWM4YmIzY2U5OTEwNDRkYmU3OGMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANHrTcoUODuext52nxzQQp94tBGFONZjVrXTPAYjJhKCk31Gdh0c3v6US/Q6
+RfjESDVR4hV4QmcxNIRtDbd/sYZUB+C4Qz0jMH/78UbVlBC90NZizMYQ5Xa7N1m
Nj/XSf6ZE5nwJ2kz+QJ9cXlId+jE6RtsK+ur5DrL4Slv0MJI2+C/fMMKlWRTN1Wc
aJoRv3/KJz+Ym8bhwwZ4xgjAn6AuN2UbALYMq8CdkJv8Hp9bcabhCwMS8GagUkEr
JQd8g/LJQ81HY/GhjxozvXkGfFl/XRYrQLXa50RcAdYEjRy8QIoyWog55/X9YSHU
U1b6JwiUsRPzpeY7ZjZwT+10h/kCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTOfR77
vfk0Sig8pf+Eny8LmvU6NTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZTdlYmUyOWMtYjI5YS00MWI5LTgyMDUtY2Y5ZTAzOTI1ZTkzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADllMA0G
CSqGSIb3DQEBCwUAA4IBAQCXU1Sa2MfzlnpYnRlFMZ4U7JqVNXmMps0/i3lBme3J
L4c6OsNOfI3lhMhVFRs3MseOeqD1ouQLMp4zhAAAAreJbJc1H8na25KiIbP3VYnB
h6rRW94AFIEeUaZPOFkIM7DNa2xurd1nG+Y4dKrMpvUvAxX2yWF9J56iluXCDU44
V8ZoPBSJEbByAQMJjwfCbbETsrcqrORooUTKxZyall/jh1ByW5zqT+fNzpGIEoUH
6+iFKpgv0wyLvWH78rgt5TBm0oB9SnPa+Unx7yt0yqFjeMjUqB80G1ojQhbNq83c
AvnBEs/6RhLUPGQh8wKPS5C62rmLDtVzbZiLN4aE/I6U
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:27 2025 by rpki-client