Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa
File: 0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa (raw, json)
Hash identifier: fYaqR64AcJkyToMlBuT8EeNrCT0rt7yp/OHJ6/ZPiXU=
Subject key identifier: 71:CC:9E:1D:20:93:8D:71:AE:B6:A6:CF:BD:E6:F0:84:6E:AE:3E:15
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 46552E98776EC55806177A48FD7220C7F5D12B12
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa
Signing time: Thu 16 Jul 2026 00:40:07 +0000
ROA not before: Thu 16 Jul 2026 00:40:07 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 193.57.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:55:2e:98:77:6e:c5:58:06:17:7a:48:fd:72:20:c7:f5:d1:2b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:07 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=3991abd06d1507ae27548852d84f3b1dc619e8e932b6876353a355f83de7b243, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:d5:f1:3a:33:db:d6:c1:23:76:05:98:11:
c4:06:23:23:80:4f:07:fc:0d:7e:2c:7a:f8:0a:b2:
da:f9:36:73:3e:0c:54:c3:c1:02:78:5d:2b:d5:33:
8e:14:00:f0:c4:f0:0a:95:ac:0a:65:06:81:be:45:
a4:ce:8f:85:e7:8c:b8:3d:d0:67:f3:1c:11:1b:e4:
82:0e:c7:e3:10:f2:c3:16:88:ca:fa:a6:fd:e2:6b:
2f:d9:90:15:a2:5c:06:2e:9d:57:82:c2:06:c6:59:
ae:a8:85:68:9a:88:77:10:9c:00:d5:73:80:5a:bd:
2c:d8:e1:62:b7:e7:23:4b:58:e1:5b:14:55:5c:65:
a0:c5:26:4c:56:4b:4a:b1:02:3c:e0:df:64:61:db:
be:4f:d0:f4:29:e5:e5:83:26:fb:71:99:2f:f4:21:
f2:21:1e:42:90:93:5c:19:1b:5d:bc:63:16:b7:fb:
16:19:68:e2:15:e2:9e:ef:5e:61:fc:e0:2b:18:7c:
fa:f9:2e:43:05:05:07:79:c4:1c:7b:5d:9e:ad:d2:
1a:eb:c1:33:fa:0e:e2:f8:6b:2e:73:4b:6c:e1:af:
0f:f7:db:71:b5:a7:da:20:07:a0:c9:a0:79:76:e3:
19:35:d7:92:94:98:33:06:8d:68:7d:40:85:89:56:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CC:9E:1D:20:93:8D:71:AE:B6:A6:CF:BD:E6:F0:84:6E:AE:3E:15
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/0cdce43b-0ed9-46d0-bf13-e6d99a26e097.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.170.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:20:13:1a:ff:82:6d:8a:ef:81:d1:06:9a:ad:32:c2:e3:65:
c0:3e:df:51:f3:51:51:0d:de:45:05:d2:2f:64:da:11:c0:6d:
1b:9c:fe:9b:a8:02:a1:44:2c:57:3e:b7:72:99:11:27:cd:36:
20:4c:bf:7e:6d:1e:5f:9b:19:10:a9:bb:bb:1a:b9:87:c4:37:
4c:59:49:73:44:97:d7:b1:c8:0c:41:f9:d0:2f:aa:ee:fb:63:
f2:85:9e:a0:73:4d:24:1a:b2:d4:6b:8c:7e:e7:2b:d7:8a:0a:
35:c9:2c:df:b8:d8:e5:bd:a8:93:f2:40:d5:5b:e2:ed:c9:cf:
62:eb:be:35:08:d0:7f:ac:a3:f7:07:44:d2:e2:3f:95:26:86:
78:64:29:4a:f9:05:b6:b4:c2:5f:7b:f3:f7:38:94:0c:55:9e:
54:0c:d8:91:9f:6d:80:07:0f:2e:68:96:95:fb:cf:ab:d6:99:
17:2a:b7:4a:8a:94:65:0c:ae:ac:7b:8a:fc:13:78:03:46:1c:
3a:30:f2:96:56:66:8d:9f:00:af:5e:0b:6f:84:4c:7c:77:ec:
0f:93:c3:3d:f8:c5:8f:ab:47:bb:0b:4f:e6:a7:bf:3d:64:f1:
9c:16:47:3c:56:de:a9:45:af:94:56:f1:e3:b2:c4:a9:04:53:
fb:df:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:26 2026 by rpki-client