Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
File: e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa (raw, json)
Hash identifier: AyGToMNblLUjOpw3d8CGm57tuBr5O3Hd4dHK3zAYETw=
Subject key identifier: 8C:AC:0F:47:B9:79:24:D8:CE:D1:75:C3:5C:59:B7:A2:E9:F4:95:F6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4FF7A72ACCD70165D37FA1AC5DB85BAD7CCB6031
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
Signing time: Fri 07 Aug 2026 05:50:53 +0000
ROA not before: Fri 07 Aug 2026 05:50:53 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 57.101.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f7:a7:2a:cc:d7:01:65:d3:7f:a1:ac:5d:b8:5b:ad:7c:cb:60:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:53 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=aedaa55796bf628eff5b19fcb9f338017db5fbdf4064376fa7311c7e25ce9ede, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:fc:f1:62:f4:61:2a:bb:a4:83:5b:9c:b8:
9a:88:08:c5:0f:20:9d:8e:0e:a8:d6:c2:56:87:64:
02:93:2a:d0:46:6b:5c:5c:39:fd:0b:48:c6:d1:fa:
c6:99:a7:7e:75:f8:7a:32:3e:d7:bb:56:66:f2:51:
60:bf:00:e9:db:47:3a:79:c0:63:d9:da:a9:54:dd:
26:1e:b9:5f:cf:8d:05:e4:a2:51:d7:51:73:8e:d4:
8d:40:4d:14:af:51:5d:11:c9:ca:04:ea:d3:d6:a7:
76:9e:6b:23:88:69:a2:66:78:16:dc:f2:82:80:b6:
06:ca:f9:3d:cc:91:f2:41:57:91:fe:a3:a6:9f:72:
c1:a8:e6:68:be:b8:c0:54:dd:ab:da:71:de:62:cb:
99:d2:0a:ae:19:77:b2:ba:3f:b1:a1:a3:f1:11:2d:
82:66:a8:57:b0:a0:ba:fd:9b:86:f7:dc:35:2a:4a:
6a:8c:1e:93:24:fd:c6:fa:9b:7f:9e:e6:00:e0:f1:
95:da:65:02:fb:05:ed:0a:96:d8:4f:92:58:2a:c6:
ac:ed:e1:87:60:58:b3:ff:5c:7d:dd:7e:45:b0:91:
5b:70:03:15:06:a3:5e:3d:fd:56:fa:c8:46:16:be:
b3:70:43:bd:7b:cf:ac:45:a4:7b:1d:53:88:f1:a4:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AC:0F:47:B9:79:24:D8:CE:D1:75:C3:5C:59:B7:A2:E9:F4:95:F6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.101.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:e2:66:d5:7b:08:9e:16:47:94:be:52:16:66:2c:f0:92:e5:
3c:5e:28:28:4f:a8:7c:fe:11:f2:cb:b8:6d:94:ed:33:9e:5f:
89:ac:2a:9c:e4:9a:a0:8d:34:68:2b:2b:74:e5:1a:9c:b4:73:
49:20:b5:0d:2c:ad:7f:48:f9:b0:9c:5c:59:cf:fa:48:8a:ee:
72:df:fb:f7:cb:af:4c:59:b3:c0:f0:12:6b:a6:e3:46:49:52:
4e:ed:18:55:a0:48:a8:9e:44:b2:ac:00:26:22:70:a9:8c:6a:
25:d6:aa:32:71:4e:f7:d1:5e:bb:26:54:f6:f3:02:2c:d0:8d:
6f:2e:e6:92:82:80:34:c5:c0:32:4c:fd:d6:42:9f:d7:d7:49:
83:98:f5:76:a7:3f:39:3f:20:c4:b3:c2:3e:29:e2:03:db:8f:
38:71:fe:35:2c:69:25:a3:eb:6c:41:49:6e:3a:4e:2c:88:ea:
17:a8:c0:27:9b:3c:17:b0:fd:5b:72:67:4b:65:c0:84:b1:5c:
af:98:9c:b1:4c:14:19:62:cd:08:b1:99:ec:39:d4:dc:85:8a:
14:51:84:4a:b8:e7:4c:57:14:4b:02:f2:1c:c5:11:7e:a0:71:
a8:97:4e:91:98:66:98:59:df:5a:c8:48:49:4a:6d:aa:19:dc:
c8:ac:2e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 23:14:04 2026 by rpki-client