Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
File: e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa (raw, json)
Hash identifier: PaHnRFXlFBpzfV3hxs9yLZUCCFS/Ul27mk5nTD0iGyQ=
Subject key identifier: 8B:48:B3:B7:94:08:31:29:77:98:B5:19:98:E5:D9:CF:7B:EE:C0:A5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0B6AFB01BA4285161A6E5CAE6BC0DA26E515E313
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
Signing time: Tue 19 May 2026 05:50:26 +0000
ROA not before: Tue 19 May 2026 05:50:26 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 57.101.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 14:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:6a:fb:01:ba:42:85:16:1a:6e:5c:ae:6b:c0:da:26:e5:15:e3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 19 05:50:26 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=2034dde817668895608db4a184496516bb1d3bb9efe0d91cc8b64c013553fdab, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:75:63:62:29:6c:c2:77:e7:d8:33:a2:c7:
83:c6:e6:77:05:65:d9:a1:33:f5:24:6a:1a:ba:16:
c2:d5:50:69:de:0e:86:55:70:2a:fc:37:ab:77:93:
d7:a1:82:33:11:29:87:10:7e:4a:4a:0e:07:a4:c7:
db:8b:63:8f:5f:e4:af:bc:b5:5e:3f:d1:00:52:92:
e0:9f:39:18:4a:4f:8e:ac:da:4c:8e:85:1f:9c:47:
e2:1b:60:e8:54:08:98:08:a6:0f:af:51:af:1b:02:
e2:c3:18:d0:18:2d:3c:1e:73:7a:89:67:f7:83:c6:
16:51:6f:ed:8e:f6:79:10:2a:93:f9:df:0c:36:80:
57:60:f4:11:3d:47:73:38:90:df:3b:b6:b7:dd:53:
6a:1e:9e:d3:a4:db:0b:46:4d:c6:34:e5:b2:bb:eb:
9e:58:fe:62:7f:1d:04:cf:41:c7:9e:4e:71:94:6d:
34:6f:be:50:6b:02:02:f8:57:a9:e9:f8:81:c9:29:
5f:a9:cf:ca:ab:b3:00:3b:7b:38:d0:12:88:a9:4f:
d4:fd:22:b2:0a:5f:8f:02:f8:44:49:ae:0c:91:d7:
f8:e6:6f:07:d2:f9:02:78:1b:8d:8e:ba:a2:20:ce:
70:20:db:51:b6:97:47:f2:7a:05:f4:c4:45:7e:f0:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:48:B3:B7:94:08:31:29:77:98:B5:19:98:E5:D9:CF:7B:EE:C0:A5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.101.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:b2:ac:14:fe:59:7d:cc:fd:78:9d:79:1d:49:d7:ca:be:bb:
01:22:65:8a:18:02:2a:75:0c:eb:59:b6:95:08:c4:9f:e5:c6:
71:7a:6c:3b:1a:97:3b:1f:45:f4:51:e7:0d:0b:a2:05:3d:4f:
40:5a:eb:cb:0d:1a:c7:aa:f2:a4:f4:dc:c4:4f:ea:84:23:10:
fb:a0:a3:10:d0:05:50:fc:05:80:6a:10:e8:40:72:57:d6:ec:
57:b1:9d:09:dc:35:09:57:50:c1:e3:bb:46:f8:93:31:43:1c:
4f:2c:9f:8d:bb:61:00:14:3b:ee:e4:e2:48:e3:a2:21:1b:ff:
e5:c4:cb:c8:2d:08:ee:19:c3:78:cd:0e:57:ce:9c:b8:4d:0a:
85:c2:0f:54:86:66:22:67:e7:df:e1:2a:1d:44:13:2a:78:18:
be:cf:6f:da:e2:a6:e5:9d:4b:22:e4:a3:9c:5b:7c:84:9e:f1:
fb:25:b6:cb:b3:c4:bc:64:71:51:7e:ac:19:07:9c:fa:e1:8a:
c0:f2:d4:e1:b5:67:8b:6e:4e:26:e7:3d:8b:b1:f7:3f:64:31:
ee:40:fb:09:5d:23:c8:4a:91:49:f9:3d:ff:17:a1:b0:54:2e:
79:9e:b8:e8:51:f8:b5:fa:c2:04:95:b5:83:9e:2b:f7:3c:e4:
42:7b:ac:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 22:00:02 2026 by rpki-client