Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16337db0-8420-40f0-982b-9d50c20f4e08.roa
File: 16337db0-8420-40f0-982b-9d50c20f4e08.roa (raw, json)
Hash identifier: IeujXtrX+YKz95mZ2l/KuKDW9m57j1/92bcfMgkfMLA=
Subject key identifier: 26:99:F9:49:FD:5F:8F:C7:3F:E4:6D:1E:EF:8C:AB:55:A6:76:AA:C8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 14763B5A223FD8C0266C37CC1EEC06C73C925317
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16337db0-8420-40f0-982b-9d50c20f4e08.roa
Signing time: Mon 26 Oct 2026 05:50:45 +0000
ROA not before: Mon 26 Oct 2026 05:50:45 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 193.57.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:76:3b:5a:22:3f:d8:c0:26:6c:37:cc:1e:ec:06:c7:3c:92:53:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:45 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=8cf3b5bb1f87440b36bfdb5dbc9e04bb5e8711cea5cbcfadc1ffa02db5d71f5e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:f2:cd:e9:25:a5:95:cd:a1:3a:1c:6e:3b:
ee:de:41:63:67:48:6c:ac:21:cb:55:dd:7c:7e:16:
bf:9b:f0:9b:4a:71:69:5f:33:77:5b:3a:a0:0d:fd:
a9:48:30:04:0f:66:9e:6a:80:10:61:27:24:2a:5d:
97:de:86:83:94:6d:32:b7:b6:99:23:a1:61:77:3d:
32:a6:67:bf:a6:f4:c1:2b:50:ae:3c:c1:0d:16:34:
62:c9:56:f2:a7:cf:85:44:d6:26:2d:f3:c7:a0:cd:
34:ea:9a:28:24:83:ee:b2:12:8d:72:9f:5d:62:69:
d9:6c:10:6c:a1:82:34:c8:91:41:4c:65:cf:bd:b6:
a3:16:f0:6e:c6:80:83:2b:04:18:fe:b2:72:e4:75:
09:d7:60:9c:86:4d:e8:91:45:a4:fb:e6:01:be:97:
56:46:45:cf:2f:03:7d:bf:6a:91:93:f8:84:65:af:
35:a6:59:66:63:84:e3:e0:b5:81:be:4e:99:1d:ed:
ec:7f:e3:f2:4a:0d:38:9b:67:0b:98:b9:9e:fb:fa:
cd:d6:1b:d6:c9:94:19:f2:dd:71:44:66:fe:b1:90:
cd:c6:b9:03:57:60:76:77:ab:73:c9:b9:41:41:ba:
96:41:39:62:4c:eb:0f:47:ed:34:c0:8b:e4:c8:b0:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:F9:49:FD:5F:8F:C7:3F:E4:6D:1E:EF:8C:AB:55:A6:76:AA:C8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/16337db0-8420-40f0-982b-9d50c20f4e08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.254.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:29:64:60:48:7e:7e:7c:56:22:f3:cb:db:9e:4f:52:f9:8c:
db:d5:c4:c9:aa:61:5c:87:fb:88:68:79:e1:1a:33:54:24:78:
1e:a4:42:ea:10:5a:6a:58:8b:40:54:79:23:db:66:9d:19:bb:
62:12:26:3c:5a:f1:98:45:a4:fa:be:1f:53:ee:11:62:6a:4f:
bb:72:78:c9:9e:39:40:8a:2a:bb:2f:f2:42:e2:a0:8f:1f:9c:
a4:d9:55:7b:d3:f4:cb:d3:75:75:9c:fb:31:ef:4a:32:a0:06:
b0:bc:da:0d:bf:cf:20:36:0f:79:a0:99:8a:08:f3:ee:dd:ec:
9a:3f:b2:71:e6:a7:00:ec:57:33:23:32:3e:71:27:9e:20:b9:
cd:b0:e2:7a:41:0d:4f:48:4c:25:96:88:52:16:aa:e6:00:64:
d3:b6:5d:59:f3:f0:a9:f4:04:4a:70:f8:22:2f:a6:91:d4:ef:
ee:d4:b4:a2:23:a4:4c:2c:e2:04:9f:81:df:d3:0e:01:0f:ea:
d5:1c:de:33:b5:4c:83:b3:52:c9:ae:23:48:cd:56:c3:c8:0a:
02:f8:26:86:87:b6:a1:16:a5:ac:6a:8c:99:bc:24:1d:0a:a3:
09:04:9f:e6:34:fa:06:e2:65:5e:8b:fd:cf:e6:68:2c:79:70:
a7:68:ce:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:49:33 2026 by rpki-client