Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
File: fc353215-935f-47d2-9298-767ccc0eae1a.roa (raw, json)
Hash identifier: ieUA1VpSfP6OUzGAQYgmAFX89kenPhjMx3BjVuYW3NY=
Subject key identifier: EF:CC:FE:B8:63:55:73:53:4B:3A:9B:5E:89:E2:17:E7:12:52:94:C1
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 07F601D6DF5B8BD5D493EC7FFCCE5A46160C751A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
Signing time: Fri 07 Aug 2026 06:00:19 +0000
ROA not before: Fri 07 Aug 2026 06:00:19 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 85.151.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f6:01:d6:df:5b:8b:d5:d4:93:ec:7f:fc:ce:5a:46:16:0c:75:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 06:00:19 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=8de61d374e01ef91fa2fa6b863a83bae44a60c8c5cc578a02a7fa2b555a7d1db, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:d0:90:da:78:8e:c2:68:b1:c4:31:41:09:
dc:ce:12:ca:8f:b4:45:aa:66:9e:8f:a7:e9:9d:38:
b8:f4:fc:64:aa:5b:3d:cc:02:9b:24:a5:bf:73:e0:
9c:18:dd:0f:64:b9:13:5c:c7:2a:7d:bd:bb:ef:16:
e9:de:de:59:64:fa:50:ff:0b:f1:d1:d8:8f:5d:ec:
25:b4:7b:f8:2f:92:fe:25:76:bd:d3:f0:05:30:52:
26:81:6c:4a:92:b4:ca:47:1f:f8:6e:28:2f:75:e7:
8c:59:65:e0:f4:77:ad:f5:cd:14:4b:4c:d3:cc:5e:
23:42:b3:01:7b:cc:8a:eb:30:6a:15:55:e3:c4:0e:
1c:f9:55:50:c9:ef:12:62:20:19:3e:c3:95:e9:8a:
e8:cc:46:90:82:ed:05:52:d6:2b:33:ca:7c:0a:4a:
d7:9b:c1:17:3b:c9:5f:cf:4d:c6:5c:d0:48:a5:57:
3c:4c:90:c0:bf:b3:b9:b3:50:9a:af:2a:b7:28:55:
47:cd:58:58:cf:e7:d0:e7:0b:e7:19:d3:cb:88:ed:
32:c7:ab:22:ca:19:44:83:79:8b:c9:e7:8c:ac:5b:
86:e9:11:b5:47:0d:7b:ca:bf:85:9f:c3:44:2d:c7:
28:c9:d1:9a:4b:d2:fd:fc:5f:25:6d:a5:e9:1b:fc:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CC:FE:B8:63:55:73:53:4B:3A:9B:5E:89:E2:17:E7:12:52:94:C1
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cf:7d:d7:e5:1e:82:97:84:91:2d:c6:9c:1f:66:b3:e6:b7:d2:
13:c0:2d:2f:0c:b6:26:db:ce:61:ea:26:6c:40:d4:25:a7:3e:
fa:d3:0a:4c:6d:ea:00:27:a2:a4:5f:98:fb:21:9f:97:8a:50:
0d:79:6b:6d:85:20:12:e3:12:f8:1d:f6:86:23:b0:d1:06:5c:
bb:f1:d5:81:fe:c4:5b:a7:8b:07:1c:b5:2d:fe:81:b5:74:3d:
ab:a7:01:0e:b6:a6:c8:ac:5c:81:26:a2:64:1e:90:ae:83:b8:
71:c7:91:c0:57:29:20:a7:ed:9b:61:b3:92:96:21:d4:e6:c8:
a9:c5:19:5b:92:c5:a7:93:47:e1:cf:56:20:ad:53:37:4a:4e:
29:17:51:bd:e0:6d:8a:f7:1e:07:ee:3c:50:83:5e:e9:d9:dd:
67:05:31:5f:20:7f:cc:7b:5f:2b:2d:29:df:64:b0:c1:c6:36:
0a:68:c7:54:e9:0c:8a:b4:38:74:3b:88:b0:ef:49:b6:46:52:
45:13:63:0f:83:2a:e1:77:cb:f2:ed:e1:ed:f1:e9:b8:54:0f:
c7:f1:88:51:c1:a6:fd:23:99:69:a6:5e:fc:d6:a3:a8:d9:b9:
6d:f6:af:2a:77:55:84:80:4e:b3:db:7d:94:56:d6:bc:54:96:
aa:d8:4d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:05 2026 by rpki-client