Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
File: 1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa (raw, json)
Hash identifier: yH6QSPKlVGvx/mACiFb973qG71zTF+6SCJAue7bGfTM=
Subject key identifier: 37:62:94:1D:D6:C1:40:17:25:2A:A2:06:FC:AD:A3:58:C2:05:64:2A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 26AE832B438BA8C2B3EAD9FA3E5D7B40184D303C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
Signing time: Fri 26 Sep 2025 20:10:21 +0000
ROA not before: Fri 26 Sep 2025 20:10:21 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 194.133.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ae:83:2b:43:8b:a8:c2:b3:ea:d9:fa:3e:5d:7b:40:18:4d:30:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 26 20:10:21 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=66fd9d0cbbf05af8442a2a898d820d516d8cb2015c9950a7890748fcb8707b00, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e5:c9:c6:c4:6f:d2:c7:34:ce:25:fd:d4:b5:
00:00:4f:3c:56:5d:75:86:46:e6:44:91:bd:35:a7:
dd:93:6f:7e:0c:c9:08:4f:9b:81:75:e1:93:e1:15:
1d:01:fa:92:25:b2:fa:5d:28:f6:41:af:1c:c4:20:
60:45:f9:b3:69:4a:3e:a0:70:27:d2:1f:0b:65:57:
9a:63:b6:25:c8:a1:a6:a0:58:ce:96:74:18:b1:5a:
e7:57:14:17:5f:bd:80:95:4a:5c:a7:46:72:a8:84:
8e:42:af:48:b9:22:08:fc:89:ef:d1:09:f0:3f:3c:
a0:97:48:d3:44:d7:a1:f2:49:f2:49:61:1f:5d:df:
6a:3e:c0:2e:5d:88:e9:ea:e6:d8:81:8e:b6:d1:b9:
c1:60:f8:c3:63:0d:e7:b0:24:2e:a9:76:d9:50:89:
22:b3:bc:3c:29:d7:11:74:5a:46:b9:95:f9:68:3f:
e3:76:37:7f:af:4d:e4:d7:5c:49:07:06:f8:bc:61:
de:63:b6:4d:9a:44:9b:c9:e5:e0:5c:42:f1:95:e7:
92:d6:e4:bf:04:ae:7f:63:82:a7:5b:aa:93:b8:de:
85:2d:49:52:db:b3:c8:40:4f:09:b3:1d:46:36:61:
14:f4:d6:91:c5:6e:8c:b0:4c:41:60:54:90:c3:c6:
e0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:62:94:1D:D6:C1:40:17:25:2A:A2:06:FC:AD:A3:58:C2:05:64:2A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e868e55-b1b6-47f2-b1d2-6daf64461ffc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.133.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d6:1d:42:a9:14:fc:b5:a8:89:17:10:9a:43:af:8f:9c:9c:a1:
80:2d:f2:d3:09:4d:a3:00:df:16:02:10:e0:3f:5a:f7:55:60:
e2:25:6c:68:24:fe:b9:aa:2d:f4:7a:73:25:a1:0a:77:0e:98:
16:ba:4b:60:48:90:38:5d:05:68:8f:2d:37:d3:66:a3:ef:d5:
88:78:d9:29:f6:1f:e5:b1:10:4e:a9:0a:97:ec:29:54:dd:b1:
96:93:62:f3:dd:23:c2:73:a4:8e:d1:d2:67:4e:6e:a7:37:94:
31:6f:67:db:a0:36:7e:ab:ad:9f:0a:1b:b7:4a:e8:32:49:17:
ad:64:89:07:60:43:b2:9c:b1:ae:99:99:c3:f0:ee:aa:67:f6:
e2:a2:d8:c5:ee:52:47:b1:bd:9b:00:3c:ad:48:c5:54:97:03:
ab:52:15:b9:8b:c3:af:22:58:15:62:ce:d4:98:90:13:35:dd:
a9:44:44:22:fd:46:34:d6:27:b6:1e:37:04:e4:10:65:d4:71:
56:af:65:42:58:38:12:34:c7:c7:fc:e9:a8:09:f7:ea:fb:b6:
b4:d9:a9:34:2c:e3:d8:26:16:94:34:c4:d9:d8:d9:7c:d6:4c:
ae:53:7d:d7:60:ae:56:d6:52:b4:3d:16:a1:bf:8e:ec:28:3a:
77:cc:7f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:34:50 2025 by rpki-client