Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/01c4adee-b8dc-44e3-959a-e4ab13e63ba7.roa
File: 01c4adee-b8dc-44e3-959a-e4ab13e63ba7.roa (raw, json)
Hash identifier: cEKcq3z6oaAWBPbHh1q6pxzFTN5SUJ1HX5qOV+Zd1zc=
Subject key identifier: FF:21:90:1F:8C:8E:D5:79:EB:0E:02:D0:51:0C:92:4A:6D:B7:87:DE
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7795FFCFC9A5D328E9F63B5FA7EB93A5A3D84A20
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/01c4adee-b8dc-44e3-959a-e4ab13e63ba7.roa
Signing time: Sun 11 Oct 2026 15:20:08 +0000
ROA not before: Sun 11 Oct 2026 15:20:08 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 8987
IP address blocks: 83.118.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:95:ff:cf:c9:a5:d3:28:e9:f6:3b:5f:a7:eb:93:a5:a3:d8:4a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 11 15:20:08 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=329db90ec8aa3ac1a436eebdd7e98140d4c8063849a42b827c1ff077aecc75a5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:1a:ba:5d:2f:bf:6c:29:39:3b:28:98:6a:
28:86:f5:a7:dd:92:6c:e2:c4:6d:56:21:7f:63:ea:
a7:4f:a3:6c:53:f2:8d:50:92:28:21:64:29:a2:42:
15:97:84:0a:e0:b3:0f:88:ed:cf:6b:46:18:80:fb:
c7:bd:a8:35:a5:33:89:58:2d:7c:6a:25:0e:5c:a5:
1f:40:40:4b:78:a8:4f:7d:47:0a:2d:24:83:5d:ae:
bf:1e:f0:0d:37:04:97:46:f3:70:0b:ec:af:80:ba:
84:ed:49:ed:56:a0:0a:84:eb:5f:1a:85:da:e7:eb:
45:fa:24:ef:da:5d:ea:54:1b:6a:21:e7:04:7f:0f:
6d:46:0f:98:cb:10:a8:a8:57:c2:f9:95:96:03:f2:
a3:2d:22:18:ec:88:7a:db:c9:18:54:4d:62:1b:0c:
b6:16:d0:93:97:33:1b:53:0e:38:34:3d:1a:9d:ad:
9c:c7:06:21:92:27:b0:0d:60:4e:d9:14:cd:57:70:
98:94:e2:a9:11:a4:c3:84:a7:1d:80:0c:94:2e:ce:
09:be:99:b0:7f:de:9c:0f:94:88:8d:3e:bd:d7:08:
5e:08:2f:18:c1:b1:73:f3:dd:ad:b4:36:c9:eb:04:
19:b4:92:4e:77:50:c2:31:a1:fd:c5:5e:b2:79:fc:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:21:90:1F:8C:8E:D5:79:EB:0E:02:D0:51:0C:92:4A:6D:B7:87:DE
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/01c4adee-b8dc-44e3-959a-e4ab13e63ba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.234.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:b9:7b:1d:58:f5:64:a7:24:75:fa:48:bd:68:16:4b:62:36:
4a:5a:14:e2:32:76:2b:0c:37:99:86:8f:59:f9:b7:21:01:2a:
73:fc:22:f7:3f:0c:43:69:3f:cf:dd:b6:33:5f:c0:25:0f:0e:
b7:3f:ec:e7:ef:3e:eb:11:c9:25:c6:f1:ab:d8:73:06:2c:32:
74:d7:a4:57:e4:09:b7:de:ce:03:7c:db:8e:ef:5c:7e:51:c3:
73:85:61:0d:e1:04:b6:d0:03:57:9b:43:1a:af:73:9d:01:4a:
5b:f3:11:88:28:47:14:10:a3:1f:01:e2:05:92:b8:59:dd:14:
88:b5:49:14:a1:ba:b2:e3:ea:1a:75:97:ab:87:74:b9:44:e8:
1a:75:59:eb:1f:5b:53:a2:22:bb:3f:12:c0:43:20:f4:83:a7:
65:17:4a:61:db:e0:91:3e:6d:68:7a:7f:06:2a:9b:22:a3:d1:
ed:8c:83:7c:43:f9:49:e6:65:b8:69:dc:22:f1:2b:c3:cd:a2:
8e:3b:0d:8c:89:12:5b:a4:39:04:95:56:80:01:4f:1f:40:0c:
63:8e:b5:c1:98:58:9e:0c:20:23:da:49:04:e6:a0:8a:f4:b0:
3c:37:45:4b:10:ee:bc:cf:2c:8f:98:be:4f:06:67:4d:8c:3b:
4c:f1:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 11:44:46 2026 by rpki-client