Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ff2e2d46-44f0-4790-a453-0090beda0015.roa
File: ff2e2d46-44f0-4790-a453-0090beda0015.roa (raw, json)
Hash identifier: ZACKbcyqL2CGsoQBbULppw9zlOGg7I2lIJ+/FTo5nzo=
Subject key identifier: 87:69:DB:B4:65:D3:FF:AB:CD:04:DB:4F:5F:F2:D0:E6:64:79:79:17
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6CAE58D59C23E412CB70A28FB1A27DAD4EAA2D7D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ff2e2d46-44f0-4790-a453-0090beda0015.roa
Signing time: Fri 07 Aug 2026 05:50:09 +0000
ROA not before: Fri 07 Aug 2026 05:50:09 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 195.247.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ae:58:d5:9c:23:e4:12:cb:70:a2:8f:b1:a2:7d:ad:4e:aa:2d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:09 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=65f1ad0581025c3cff74b6dea0cc676a5d54793e9a92bdb5b7db4665f8b1bd2c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:bd:43:f4:b2:93:84:0a:ae:cc:bc:9f:15:
5d:12:fd:47:d3:0f:cb:88:90:67:69:04:8a:b2:39:
2d:23:fe:6f:bf:c0:5d:1a:b1:99:14:6a:fb:59:17:
1b:dd:b3:95:90:dc:b1:d6:e3:3a:44:f5:8c:ab:8d:
8c:65:5b:b4:6c:af:01:d2:20:0e:95:0e:9c:ce:26:
ce:05:9b:39:a3:91:e7:d5:0f:4e:bf:9a:ce:9a:f2:
ad:72:b6:5c:be:97:b7:1c:48:ca:eb:e6:91:74:97:
ba:76:f5:a8:99:c3:08:3b:a6:71:0f:4a:65:c9:0e:
0d:c3:00:56:90:73:08:bb:d3:39:fb:81:56:c3:ba:
5c:ad:62:96:04:6e:dc:88:03:32:62:1f:bb:69:18:
c6:5a:fb:ee:88:9a:3d:65:05:29:ba:d7:ae:98:ab:
47:3c:dc:f4:36:f0:5a:5d:33:79:ac:58:9d:62:7a:
65:0b:22:d1:e8:b4:6d:73:9c:19:d1:99:22:f2:5b:
38:61:fe:4f:d5:e7:16:17:30:c9:93:05:03:ef:5e:
a8:48:27:23:94:70:3a:91:75:f6:71:2c:ef:3b:d3:
66:d2:99:25:1a:ab:32:28:a1:a7:f2:0e:44:b6:cb:
9f:fa:07:ff:0e:6a:76:bc:69:42:e3:ee:9c:f4:44:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:69:DB:B4:65:D3:FF:AB:CD:04:DB:4F:5F:F2:D0:E6:64:79:79:17
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ff2e2d46-44f0-4790-a453-0090beda0015.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.247.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:28:d6:ac:bb:17:5e:d5:dd:6b:b0:5d:9e:c0:1d:eb:89:6b:
f6:94:38:57:a6:63:90:c7:5b:d5:dd:55:0c:9e:59:3a:d8:4a:
66:e1:ec:a1:1f:09:36:6c:f1:63:bb:33:67:a4:2a:80:35:84:
ba:0e:40:eb:7d:80:b0:80:41:58:59:d3:01:4b:4a:3b:bb:92:
24:30:f8:46:34:48:4a:ae:be:2c:4a:f1:b8:92:fe:5d:da:d2:
d9:13:cc:7e:54:e0:66:3a:f9:ec:e8:77:e7:af:70:74:2b:4a:
a0:95:dd:69:18:e8:71:15:10:55:6b:07:01:da:5e:be:79:97:
41:bd:fa:bd:f7:0a:d9:22:6b:0e:c7:f6:c9:b1:32:f5:dc:b1:
6b:3f:16:9a:d1:8b:d0:5f:48:ae:a1:1f:c9:8c:af:b6:54:0f:
9c:e7:1e:d0:0b:e0:7a:68:2d:13:36:35:b4:29:c0:06:05:e6:
42:d2:4a:15:7a:66:f4:3c:7a:b8:da:09:2e:8b:6a:bd:14:6b:
b6:c7:10:bc:15:12:78:ec:99:24:16:b1:d8:ed:71:c6:e5:61:
a6:6a:f7:f1:5e:75:ef:b8:47:d7:08:e3:71:e8:c9:e1:35:af:
34:79:6b:81:f6:96:5a:c2:40:7d:d3:46:6e:8f:f8:f0:16:29:
42:49:13:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:01 2026 by rpki-client