Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
File: f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa (raw, json)
Hash identifier: XXt9bwzw5siPdrBNowHHp0SnyQNRbnpv90CdRTCV0F8=
Subject key identifier: 1A:64:BD:66:66:FD:CF:5D:5C:04:74:41:17:38:2D:FD:27:3D:B6:85
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4E0A02961378786133CDA3895863AA2ACBACF095
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
Signing time: Fri 07 Aug 2026 05:50:08 +0000
ROA not before: Fri 07 Aug 2026 05:50:08 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 193.26.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:0a:02:96:13:78:78:61:33:cd:a3:89:58:63:aa:2a:cb:ac:f0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:08 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=9c81703ddf3ab77c17dc2b39988bc5eb2844c84db9026f7524336d849425600e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:27:57:89:13:bc:fe:f8:c2:73:02:0f:e6:
1e:e1:08:ac:ef:f3:3e:95:82:ea:2a:16:5c:28:1d:
f8:71:d3:51:46:94:1a:d3:e2:22:ca:b7:78:d8:0c:
45:97:60:ff:96:29:d8:a1:90:aa:59:3e:00:1c:a4:
5c:6f:16:22:17:69:96:ef:4e:2d:54:f6:71:2e:b6:
38:87:a9:24:d7:43:7c:e9:fa:8a:8d:74:66:84:f6:
98:4c:67:fb:c1:5c:48:34:68:d5:9c:6c:de:1a:47:
71:93:c6:cf:fa:9e:ee:61:3a:9a:1c:75:d0:d3:c0:
bb:92:e5:7f:da:e4:b4:73:82:b0:02:52:b9:1b:94:
58:ae:29:4c:49:fc:cf:86:0b:ee:47:7d:fc:19:69:
0e:86:5d:3d:a1:56:32:12:7a:e2:a7:41:b1:51:17:
02:1c:fb:93:c7:49:79:95:40:65:a6:5d:38:0a:de:
50:6d:0b:10:7c:11:81:ce:f6:cb:d9:04:28:bc:ac:
5e:c6:ec:a7:57:f0:b6:2c:1d:37:fd:ce:38:af:e5:
b0:63:67:23:c6:15:dd:68:18:f3:bf:fe:ed:40:20:
ca:49:51:0a:a7:07:8e:a5:6a:c7:c3:6b:dc:04:cd:
d6:f0:04:2d:0a:e3:ac:cf:5e:26:6a:df:74:a6:7d:
9a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:64:BD:66:66:FD:CF:5D:5C:04:74:41:17:38:2D:FD:27:3D:B6:85
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.64.0/19
Signature Algorithm: sha256WithRSAEncryption
59:82:7b:c1:28:ce:d5:0b:9e:8b:ff:70:58:57:77:e5:0e:53:
40:45:38:36:bf:60:d0:b2:cd:27:7a:6e:65:7a:60:a8:ea:89:
65:53:a6:29:2f:92:db:40:40:27:01:fa:6e:63:42:27:01:65:
c8:e3:32:7f:78:d9:64:63:de:0a:9a:8a:55:1c:86:44:27:80:
0c:94:2f:61:11:ba:1a:96:94:21:4d:d7:b9:9c:18:bd:51:5b:
cd:3a:2e:e0:b9:a4:9b:a8:34:84:37:e2:12:83:63:55:ff:7b:
95:0f:69:fd:3c:99:5a:21:a5:d9:a2:18:23:88:6f:93:8d:6d:
9a:2b:57:ef:c2:79:3a:91:2d:b0:40:0c:ef:56:74:c2:79:3a:
be:e3:ec:4c:86:7c:bd:5b:84:a8:29:48:16:68:b7:82:e2:40:
bd:5b:9d:3a:50:ef:41:c1:de:63:80:47:ea:12:3f:cf:3f:92:
25:02:af:e4:49:d4:54:2e:94:fe:5c:ca:d5:6b:c1:e3:95:5d:
17:b5:10:5e:1f:29:fa:a6:ce:41:da:de:00:37:10:34:28:0e:
b7:41:62:29:44:1f:8c:8e:5c:8a:40:39:3d:f9:b1:7f:cb:55:
2d:b2:63:0c:55:3a:db:84:00:0a:c9:13:c9:5e:1d:d3:36:0c:
72:9a:2b:87
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUTgoClhN4eGEzzaOJWGOqKsus8JUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDcwNTUwMDhaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDljODE3MDNkZGYzYWI3N2MxN2RjMmIzOTk4OGJjNWViMjg0NGM4NGRiOTAy
NmY3NTI0MzM2ZDg0OTQyNTYwMGUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMAzJ1eJE7z++MJzAg/mHuEIrO/zPpWC6ioWXCgd+HHTUUaUGtPiIsq3eNgM
RZdg/5Yp2KGQqlk+ABykXG8WIhdplu9OLVT2cS62OIepJNdDfOn6io10ZoT2mExn
+8FcSDRo1Zxs3hpHcZPGz/qe7mE6mhx10NPAu5Llf9rktHOCsAJSuRuUWK4pTEn8
z4YL7kd9/BlpDoZdPaFWMhJ64qdBsVEXAhz7k8dJeZVAZaZdOAreUG0LEHwRgc72
y9kEKLysXsbsp1fwtiwdN/3OOK/lsGNnI8YV3WgY87/+7UAgyklRCqcHjqVqx8Nr
3ATN1vAELQrjrM9eJmrfdKZ9mm8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQaZL1m
Zv3PXVwEdEEXOC39Jz22hTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZjBjYjM2YWUtMjFlZS00ZTk5LTkzYzYtZTYzYWU1NzBlNDgzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcEaQDAN
BgkqhkiG9w0BAQsFAAOCAQEAWYJ7wSjO1Quei/9wWFd35Q5TQEU4Nr9g0LLNJ3pu
ZXpgqOqJZVOmKS+S20BAJwH6bmNCJwFlyOMyf3jZZGPeCpqKVRyGRCeADJQvYRG6
GpaUIU3XuZwYvVFbzTou4Lmkm6g0hDfiEoNjVf97lQ9p/TyZWiGl2aIYI4hvk41t
mitX78J5OpEtsEAM71Z0wnk6vuPsTIZ8vVuEqClIFmi3guJAvVudOlDvQcHeY4BH
6hI/zz+SJQKv5EnUVC6U/lzK1WvB45VdF7UQXh8p+qbOQdreADcQNCgOt0FiKUQf
jI5cikA5Pfmxf8tVLbJjDFU624QACskTyV4d0zYMcporhw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:27:26 2026 by rpki-client