Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa
File: 157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa (raw, json)
Hash identifier: X/HX/99YpNKkY47z8Rh8/jm9eS5tVn+t8Wc75J5KsXE=
Subject key identifier: BE:A5:D9:A7:1B:F1:F6:CB:16:9C:99:29:CC:C7:4B:0D:F2:05:47:0C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7A8E87C9049D2CE171F7FC60ECE8B2E7C2ECDC25
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa
Signing time: Thu 23 Jul 2026 15:30:15 +0000
ROA not before: Thu 23 Jul 2026 15:30:15 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 80.203.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:8e:87:c9:04:9d:2c:e1:71:f7:fc:60:ec:e8:b2:e7:c2:ec:dc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:15 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=700caa4fd92734a3e9d0f69fa2ac8c33338286bde8a876bebd7d695209947f7b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:d7:ee:23:d7:8d:8f:de:95:8c:79:c9:08:
a9:83:e8:27:1a:75:dd:77:fc:f4:0b:f0:e6:51:bc:
2c:e5:77:66:3f:e2:fd:a9:ed:b8:71:b2:87:24:e7:
9d:75:a4:81:3a:a7:6e:2d:e5:33:ea:eb:18:7b:62:
b2:bf:d3:46:05:b9:c6:04:46:f0:27:b4:01:83:1a:
64:12:3f:a6:a9:cc:57:20:a6:8a:97:18:cd:72:18:
37:8d:4a:c4:a8:99:3e:5b:e0:c3:ff:29:08:2f:fa:
a2:a6:73:a6:ba:7c:39:10:ee:22:6e:0f:79:c5:51:
ff:d5:7a:e4:6a:28:d9:3d:38:5f:e8:4d:69:a9:ef:
c6:6f:a9:52:7a:bd:b8:bb:7d:ec:53:2e:7f:07:0a:
81:0d:e6:f3:d9:e7:39:75:a0:28:6a:d1:f9:73:fb:
cc:ab:69:43:09:a2:2f:98:59:4b:1a:fa:9d:fc:6c:
d7:00:df:b9:f8:dd:1e:31:6f:59:7d:cc:95:69:ec:
fd:c0:7e:96:1c:7b:08:4f:8d:f1:02:82:a0:ef:9f:
67:5c:98:54:ca:c7:88:9d:49:45:c5:e2:48:a5:58:
79:8e:bd:21:27:2a:12:ff:dc:0e:21:e9:34:da:47:
35:7f:57:be:ca:bd:9d:b6:0c:df:21:6e:db:2d:e4:
19:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A5:D9:A7:1B:F1:F6:CB:16:9C:99:29:CC:C7:4B:0D:F2:05:47:0C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.203.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5d:14:05:40:54:d1:5c:fe:aa:e1:3c:51:7a:18:5e:07:60:3a:
80:47:b6:24:2e:ea:d1:30:6a:e2:3f:3f:0f:88:87:63:79:ef:
bd:d8:c4:5e:49:45:e7:93:89:eb:bb:94:a4:4b:cd:ca:11:ad:
61:d2:fa:c7:76:c7:ae:0d:63:35:39:dd:be:23:bb:73:97:c7:
5b:d6:f7:57:54:5a:63:a6:cb:d5:40:c6:16:d8:a0:9b:1f:64:
21:79:f9:5a:f2:52:31:03:69:85:bf:0a:bd:c9:eb:01:13:4b:
fe:44:cd:cc:d0:9b:02:56:f1:e0:91:9d:b5:3d:fa:7d:0a:ed:
94:04:f8:1a:75:43:49:cf:a6:24:35:95:6d:b0:a0:60:34:6d:
fe:46:1f:ed:fd:de:8a:f3:ec:64:f0:4b:2f:60:1a:8a:a6:7d:
bf:ee:59:d1:49:a6:9b:7d:22:93:9d:b4:3e:75:ab:ee:ed:76:
fa:3b:c0:1b:35:99:48:5a:13:f5:7d:42:0b:7c:65:46:01:94:
0d:60:e3:75:e7:37:7c:15:69:55:99:21:ff:bf:c2:19:c1:74:
49:25:74:20:d9:a3:40:ba:dd:7d:2a:9d:e9:29:a6:04:17:82:
fd:a5:55:ee:7a:10:20:d6:a1:4d:a6:23:7d:a8:28:8c:55:4b:
71:25:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:11 2026 by rpki-client