Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
File: 1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa (raw, json)
Hash identifier: yj79j939gPQnkYZDIItlmPJvIYwJ04Q5sH/wNW9kU+I=
Subject key identifier: 40:DF:02:AA:93:75:65:33:48:3A:A5:BD:90:09:14:7C:6C:C0:0E:A0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 395B10D7E33E0484C3BFBDFB11C41F3C99681FCF
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
Signing time: Mon 26 Oct 2026 05:50:05 +0000
ROA not before: Mon 26 Oct 2026 05:50:05 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 194.133.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:5b:10:d7:e3:3e:04:84:c3:bf:bd:fb:11:c4:1f:3c:99:68:1f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:05 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=eaf5583b579430753a3e5f5fda0c9e5b6c8e6f12d2da2affb7492bd7c71b772e, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:fc:f6:69:23:72:a7:23:f0:81:00:c9:4c:
fc:de:50:30:3e:4f:bb:a5:eb:2e:15:c0:d7:dc:b5:
4f:e2:99:d8:d8:29:c0:15:57:d1:52:44:33:6f:27:
33:42:48:71:6c:95:5c:0f:38:1c:04:32:14:3b:f1:
26:25:d0:12:03:12:41:8d:73:ca:3e:33:6e:76:db:
61:5c:de:59:b4:89:39:cb:fa:cf:ff:9e:5d:c7:d8:
c5:66:0a:eb:88:6e:5a:b1:75:c4:eb:e9:cf:cb:c0:
f7:34:4d:37:a2:fe:bf:e0:9d:ee:0a:71:9c:2c:08:
9d:97:e6:68:33:30:05:67:8d:02:f2:2c:7f:7c:fd:
9f:be:13:09:70:4b:6d:b1:c8:3e:8c:45:db:20:7d:
6f:70:8e:39:a5:ec:ca:61:a0:8e:70:d3:5d:7c:ac:
06:57:22:79:c6:1c:9f:16:6f:4c:fe:f3:22:90:59:
3a:ca:81:d5:98:3c:53:86:a8:75:5e:66:23:f3:69:
bf:88:74:2e:ac:61:72:3c:a3:96:19:5d:e7:8e:df:
8a:46:cf:3e:0b:f6:04:02:ae:cc:b8:d0:6b:b1:c2:
d4:73:f4:4b:b6:e9:93:b3:85:9a:ca:f9:67:49:94:
5b:69:cb:6a:0f:fa:97:3d:2e:8b:aa:df:31:6e:b9:
95:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DF:02:AA:93:75:65:33:48:3A:A5:BD:90:09:14:7C:6C:C0:0E:A0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.133.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:19:4e:c0:91:5b:be:a0:2e:c0:97:75:09:9e:40:fa:09:98:
af:32:21:3b:98:91:71:6d:39:01:c6:b9:5f:6a:4a:84:76:1a:
23:ad:e6:04:1e:3e:29:f5:db:c8:58:07:28:ee:d4:e7:e8:28:
5e:13:4a:66:49:00:d6:ec:cd:dd:7f:fd:6e:14:6a:97:4b:f4:
81:db:13:a3:b4:2b:9b:44:5a:88:fb:9b:78:53:cd:f8:4a:c6:
dd:3d:a3:bb:30:be:1c:ec:1f:f4:2d:5b:10:1b:cc:8d:69:d5:
b3:fc:30:fc:7a:3c:f4:e4:57:ac:a6:54:53:40:5c:bf:42:44:
bd:cd:f9:cf:1c:23:1a:18:c1:61:bc:f9:68:65:4d:0f:51:71:
e8:23:e6:c4:aa:01:22:52:2b:57:65:e3:80:d9:8b:27:35:af:
6f:19:94:e1:77:82:2e:62:44:42:54:4c:b1:29:a7:13:34:7d:
0a:f2:6c:1e:b3:87:25:a6:50:31:18:7a:9a:4a:91:94:0a:5c:
82:66:27:86:38:81:d7:bd:f5:22:4d:78:d2:a6:05:6a:24:a1:
e3:b6:34:d0:a4:2b:a5:2f:53:c4:fa:63:f4:2a:44:c7:7c:08:
02:6e:53:1b:a0:2a:4d:44:78:7c:7a:9d:cf:85:55:7e:fa:7a:
33:a0:f0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:49:21 2026 by rpki-client