Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05d2e6e0-648a-472a-b287-1b954eae646d.roa
File: 05d2e6e0-648a-472a-b287-1b954eae646d.roa (raw, json)
Hash identifier: x95rlVCKPs2g+ucY8TLl7liffcgQzJjUCoFOvYWkvxQ=
Subject key identifier: B1:F2:E5:A8:30:B3:B2:F2:5D:CE:49:9A:AB:7B:E3:BD:99:3A:53:05
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 154A0F126BFB7295E14FE4EDBE2A1057C4ABA169
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05d2e6e0-648a-472a-b287-1b954eae646d.roa
Signing time: Thu 23 Jul 2026 15:30:13 +0000
ROA not before: Thu 23 Jul 2026 15:30:13 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 83.118.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:4a:0f:12:6b:fb:72:95:e1:4f:e4:ed:be:2a:10:57:c4:ab:a1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:13 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=de8877dd89025257073be273024c3c183f1e4d22fe347ea345cf20cfd29537cf, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:ef:62:0c:1b:fb:bd:56:a9:35:f6:85:23:
9a:4b:f2:4d:a0:e0:71:30:2f:7f:4e:99:0d:74:73:
0b:e7:e5:65:ad:26:48:fa:96:df:2e:d3:dc:69:90:
4c:48:36:bd:1d:e3:c2:76:85:60:34:71:12:f5:cc:
00:4c:a5:ab:c3:67:17:6b:c4:ce:87:7a:1a:9c:f4:
75:a8:1b:43:c3:ba:d3:4e:e5:5c:04:82:ad:69:74:
8b:b9:f0:80:7c:de:ef:1a:0c:b3:8c:b9:86:70:3e:
12:d7:86:1f:dd:fb:12:c5:63:ed:b6:81:51:22:0d:
cf:4b:89:a2:59:4e:8a:b5:71:75:9d:ea:6c:c8:64:
58:99:fc:88:66:0e:9a:29:d6:54:d1:67:93:aa:75:
6f:62:e9:21:e9:ec:c5:ba:ac:12:22:2d:75:a6:b5:
9b:3c:8c:c5:3b:44:c0:01:07:9d:6f:d4:07:49:66:
87:ce:91:79:fa:89:41:d3:2b:b2:f4:97:5a:af:e7:
36:90:b1:da:76:fa:2f:8b:f8:ac:fd:a2:be:07:df:
85:27:17:29:5c:de:fc:d1:2e:c7:4e:00:38:db:dc:
f7:fd:60:46:0f:30:f4:d0:fd:5e:a1:aa:d6:81:45:
ba:95:3e:07:89:42:b0:ea:93:1a:ca:a4:ff:74:42:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F2:E5:A8:30:B3:B2:F2:5D:CE:49:9A:AB:7B:E3:BD:99:3A:53:05
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05d2e6e0-648a-472a-b287-1b954eae646d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.234.0/23
Signature Algorithm: sha256WithRSAEncryption
01:52:38:27:72:f9:6d:d9:0a:b6:4c:a4:d5:63:05:04:0a:ad:
30:27:5c:a6:3c:40:18:0a:30:ee:f9:eb:9b:e3:5b:5c:af:c0:
d9:33:d9:c5:2d:fa:3d:36:a9:80:c8:64:b9:3e:f2:2c:98:09:
e0:4e:d0:fa:13:7c:9e:40:ce:9b:07:43:f8:55:9a:e1:d1:47:
81:07:b8:8a:db:aa:68:02:40:f9:1c:14:03:04:4e:b7:b9:29:
4a:8a:38:73:87:71:99:bf:82:dc:bc:e1:20:27:5f:f0:48:23:
5a:8b:58:77:dc:e7:3b:85:58:36:ce:de:48:b7:e5:b1:bd:8f:
ba:bd:fd:ca:ea:51:6f:58:62:5c:97:d8:03:e9:c7:5e:67:f3:
d0:e4:32:ac:0e:b1:ed:8f:77:b4:38:86:b0:7d:ca:bd:59:72:
59:d5:ef:5a:b7:65:c3:6f:e7:ef:29:4f:5e:34:bd:f3:a5:2c:
3b:aa:57:1b:f1:08:78:dd:8f:ea:31:a0:1c:8a:15:c4:bf:cd:
04:7b:59:51:64:bf:03:ee:75:46:0e:ac:95:0d:92:aa:f6:69:
75:c2:ef:f5:25:3d:c1:40:7d:f3:bc:7a:37:3d:08:f5:c1:7d:
af:e6:bf:96:f1:81:a4:12:5f:a3:6a:22:f9:d6:93:43:7e:51:
70:3a:df:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:31:46 2026 by rpki-client