Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fb2bc1bb-cbbe-4f6c-8ef3-eabfdb4fa7b9.roa
File: fb2bc1bb-cbbe-4f6c-8ef3-eabfdb4fa7b9.roa (raw, json)
Hash identifier: AJaKOu+gZrJoWIUmw8+fGl/hYGoIWLQr3SYEgPP4sgw=
Subject key identifier: 6E:E2:87:79:01:A4:13:F7:C9:3C:69:B8:9F:C3:E2:93:7D:4C:27:15
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 24DEB42ACD65C47600D34C8BFCB9C80C60015530
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fb2bc1bb-cbbe-4f6c-8ef3-eabfdb4fa7b9.roa
Signing time: Fri 07 Aug 2026 05:40:12 +0000
ROA not before: Fri 07 Aug 2026 05:40:12 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 212.167.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:de:b4:2a:cd:65:c4:76:00:d3:4c:8b:fc:b9:c8:0c:60:01:55:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:40:12 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=6323bac4ec4589bff177e50bf0d39ebb3c542895cfacda1d2ea19a181deebae0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:44:00:c1:de:bd:2b:65:7d:63:d4:2f:f0:
63:d7:6c:83:08:70:fd:e4:21:44:df:dc:83:a5:f5:
3a:59:c2:41:a7:b6:79:39:87:d7:c9:b3:99:cb:44:
2d:f1:8a:e0:67:22:00:30:c1:b8:3f:4b:d9:ee:ea:
5e:ba:7a:ee:03:cc:d7:68:67:06:1b:ff:a2:8b:50:
8a:a3:92:b9:5b:eb:b2:eb:5f:2b:9d:4a:bf:7e:67:
ff:9e:f6:2a:3e:6f:2a:94:94:f7:bd:c9:ed:6c:e8:
18:35:04:30:58:ae:ea:f6:fc:6a:3c:16:ac:5e:ab:
e2:61:99:75:1d:e4:78:2f:89:e6:d6:02:ff:7a:a1:
78:41:da:7a:7a:3a:75:eb:3b:dc:a2:48:21:d5:2b:
ec:7a:e8:d1:8c:87:c3:3b:1a:e0:35:98:f5:3b:56:
05:51:63:9e:ec:90:7d:5e:01:49:ec:c9:4b:b5:b8:
f3:20:79:4d:58:00:cf:ae:76:4a:b6:85:ae:1e:8e:
19:03:bf:8f:d5:10:d5:41:08:33:fb:66:31:de:3c:
10:3a:f5:93:07:f3:5e:e4:57:9c:2a:e4:92:cb:83:
97:4a:2a:fb:e4:4a:6c:03:7d:16:6c:5b:89:14:80:
a8:bb:50:73:af:bd:76:c0:96:b9:50:58:c3:b3:8e:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E2:87:79:01:A4:13:F7:C9:3C:69:B8:9F:C3:E2:93:7D:4C:27:15
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fb2bc1bb-cbbe-4f6c-8ef3-eabfdb4fa7b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:9a:d3:62:46:7b:40:57:1f:33:c7:92:27:bf:39:c2:5b:5d:
7f:37:29:d1:38:0b:46:e7:e6:4a:e9:e8:c5:85:f4:43:1a:32:
9e:3a:30:23:56:5d:61:9e:ef:45:c1:a1:47:a1:ee:e9:cf:9d:
af:bd:a6:de:57:ad:a1:9d:72:cd:60:11:91:8a:85:82:d9:49:
d1:43:80:1d:df:cc:bb:b8:96:3c:66:5a:3b:77:84:3d:8e:c8:
66:a1:98:b9:4b:4d:af:73:02:95:c2:43:f7:82:f3:d6:0d:0e:
18:9e:04:bf:07:0a:e2:30:f1:71:73:73:19:59:77:be:b0:14:
77:9b:08:15:ab:4e:10:fe:81:d6:82:b1:eb:6d:12:1a:2d:c7:
99:1c:29:a3:b2:5f:ed:88:87:ed:9f:9d:bd:4d:e8:d0:68:dd:
36:87:81:07:d9:e4:1f:4e:fb:7c:86:a4:fd:46:e7:b1:04:ec:
85:d3:19:52:86:2a:a3:9b:12:c0:90:4d:70:de:f7:d1:7d:a1:
cb:0e:91:4c:d7:5f:ed:d9:aa:d1:d7:3f:a6:2d:ee:3b:d4:93:
71:1d:6a:77:12:4d:fd:64:ae:ec:c2:3f:20:79:68:fc:51:c4:
47:77:1f:cc:97:7d:37:b0:92:87:c3:35:c4:4c:94:f4:10:92:
af:57:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:27:20 2026 by rpki-client