Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecd45447-b567-4c62-b588-28bb50cce889.roa
File: ecd45447-b567-4c62-b588-28bb50cce889.roa (raw, json)
Hash identifier: GGJR/JZ2KJ9CQgNnpuCY/xdbWCM0Ep94EFl7Ts/7da4=
Subject key identifier: A5:7A:6D:57:57:5D:EF:10:E2:81:06:BA:F7:C2:DF:D5:34:39:82:85
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4906B90837A14775919C334FC8CC5F19C42F8184
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecd45447-b567-4c62-b588-28bb50cce889.roa
Signing time: Fri 07 Aug 2026 05:50:09 +0000
ROA not before: Fri 07 Aug 2026 05:50:09 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 195.17.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:06:b9:08:37:a1:47:75:91:9c:33:4f:c8:cc:5f:19:c4:2f:81:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:09 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=7c8fcf46b7fb7d29d5b5b28a2243e8893abb307ed5feb560345fb803553fdd31, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c6:5f:f0:51:93:55:2a:f2:f7:52:88:72:65:
da:96:85:67:89:d0:4a:9f:d5:4a:ab:ca:9e:e8:1d:
4b:e0:70:42:74:b3:85:9c:b6:df:41:00:62:b8:ad:
61:e6:8b:0a:98:60:5f:08:9b:b8:72:42:4e:0e:fe:
90:60:cc:7e:5b:35:9f:f6:66:9d:b5:f4:7b:d8:c2:
e9:07:01:2f:cd:5c:7f:04:5b:fd:08:68:31:36:fe:
54:32:7f:99:12:b7:2b:ab:a0:d6:a0:47:88:34:1c:
2f:4c:d1:13:a5:7b:7d:63:9e:f6:8b:9d:7b:ce:87:
89:a9:8a:c1:9a:89:89:78:a1:10:7d:1e:c4:b9:46:
24:9e:61:f6:7c:6b:e0:7b:50:6a:00:b1:cb:1a:9a:
6e:74:77:e3:7f:2a:e5:c9:4b:4a:11:8f:17:69:8d:
98:f8:83:87:23:74:93:29:ab:f1:1e:a0:11:2c:21:
72:c4:cf:c6:48:75:a5:aa:ce:2e:b2:80:32:1a:aa:
25:62:82:84:a3:45:9b:85:21:ab:20:c7:11:ab:be:
c9:30:50:d4:50:c3:3e:d9:3b:93:80:f0:04:aa:b6:
10:9e:41:3e:28:5f:dc:0e:2e:49:f2:0c:2d:14:58:
5a:e8:b2:7a:0e:1f:da:a3:ff:8e:d4:f0:f9:9e:e0:
34:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7A:6D:57:57:5D:EF:10:E2:81:06:BA:F7:C2:DF:D5:34:39:82:85
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecd45447-b567-4c62-b588-28bb50cce889.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:00:db:70:43:db:77:b9:58:84:76:bd:cb:bf:79:23:04:25:
85:41:d6:7d:98:ee:a6:ca:4a:19:15:99:d8:ce:40:35:fd:71:
6c:24:f3:4f:f8:c1:97:dc:90:a8:04:8f:7e:de:04:fe:f2:c9:
2d:30:27:cb:73:d6:cb:09:fa:7b:6d:da:16:5a:6e:90:83:d3:
7f:07:0d:19:b4:94:86:5e:83:b3:3c:bc:e3:15:75:96:45:e6:
66:e5:35:b9:31:f8:d0:45:dc:73:d5:a4:bb:c6:f2:35:81:46:
1c:98:63:7a:e4:a4:41:44:0a:f2:0a:82:d2:9f:a2:04:80:52:
27:1c:74:14:64:e1:0d:20:3f:67:d0:f9:8c:6d:d3:d5:d5:e2:
ad:27:99:ed:9f:8d:c7:57:ea:16:f2:00:af:57:5e:3a:04:7d:
06:f5:82:e5:30:a0:a6:fc:07:01:9d:97:d3:8c:19:ea:21:8f:
a6:db:5d:03:32:77:31:a5:06:df:16:05:ba:46:be:73:9a:4a:
31:05:b4:48:73:f7:b1:1c:1c:14:db:a6:2f:ff:3c:8f:60:26:
c0:06:f3:a4:8f:84:7f:e5:67:99:5d:81:63:92:9b:03:02:90:
d0:24:6f:e3:ce:4a:c1:1f:b1:5b:05:a5:38:7e:96:a0:f8:db:
0b:3a:5e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:02 2026 by rpki-client