Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/207ef309-dcb5-4264-bf57-0d52fea079cd.roa
File: 207ef309-dcb5-4264-bf57-0d52fea079cd.roa (raw, json)
Hash identifier: CQlNU9cAiy/K17xgWPfJDyT3MfnQYc9g+mat6fP/g9Y=
Subject key identifier: 69:A5:DB:84:18:07:71:65:C4:D5:80:6E:5E:5D:EC:1A:9D:58:27:25
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 49F012DB928180E06E355D2FB346DD580B27CDD6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/207ef309-dcb5-4264-bf57-0d52fea079cd.roa
Signing time: Thu 23 Jul 2026 15:30:41 +0000
ROA not before: Thu 23 Jul 2026 15:30:41 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.24.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:f0:12:db:92:81:80:e0:6e:35:5d:2f:b3:46:dd:58:0b:27:cd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:41 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=7a306bf8bd983cf09f7d98e391f82b3c4b6e51e388b8a7d455eed03ac876153c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:03:56:f6:29:70:e1:3c:ee:1c:23:fe:c8:
ca:81:d5:4a:13:ac:47:23:bd:6b:62:a1:33:ad:20:
0c:99:80:ae:61:36:a1:e3:b1:c4:11:87:d7:19:c7:
51:1b:f2:89:59:c0:63:23:39:f5:87:d1:7a:c7:d6:
7f:f1:b5:73:c8:e2:c0:f7:15:a7:e3:82:ed:6c:78:
36:bc:80:f2:42:7a:87:84:b0:0a:59:06:ae:24:c8:
69:62:a0:94:5f:82:f2:7b:fa:d9:5d:8b:ac:24:eb:
ad:77:c1:e6:c6:c9:47:c9:1a:2f:12:0d:6d:c6:d2:
03:e1:77:0c:9b:23:e4:57:f8:68:b6:b0:43:48:e9:
a0:c1:62:de:24:c0:26:90:7a:be:c6:05:da:2f:7f:
37:ff:fb:fa:40:9d:3e:dc:31:a9:21:44:3b:0f:b2:
02:85:83:73:54:a9:1f:56:66:03:3e:f3:b9:09:b4:
bb:ca:56:e6:7e:6b:ec:b1:3c:57:68:4e:b2:ef:ac:
9e:b4:a2:bc:6d:65:51:3a:fc:f6:73:08:46:82:35:
1b:0a:05:fe:db:22:44:31:70:06:57:e6:30:55:3d:
57:b1:c9:0c:2b:31:2a:25:fa:9c:5a:8c:26:d9:fa:
f9:a7:4e:cc:c0:b4:8e:34:57:78:88:39:f6:37:86:
ef:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A5:DB:84:18:07:71:65:C4:D5:80:6E:5E:5D:EC:1A:9D:58:27:25
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/207ef309-dcb5-4264-bf57-0d52fea079cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.24.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:1d:1a:4e:c2:1c:8d:6b:fb:f5:36:e1:a6:da:c1:bb:c3:f5:
af:cc:78:e3:63:e6:c3:f2:05:5a:94:2a:d4:a4:84:d7:2a:85:
80:e8:d3:53:cc:41:c2:d0:96:98:95:1e:60:c4:95:85:21:1d:
a8:a6:0f:96:ae:f5:c8:e1:20:36:15:df:2d:af:14:a3:95:b5:
57:0f:65:6d:56:f0:29:57:67:99:71:30:d9:db:70:3a:6d:42:
2e:0c:ef:57:22:3d:5f:5a:a0:ef:26:35:38:9d:1a:cf:68:f0:
91:4a:20:ea:4d:51:a1:99:cc:47:b5:fc:25:e2:d0:ab:e8:eb:
8f:cf:d8:2f:e6:a7:13:05:38:ca:dd:a5:16:43:a6:97:15:6a:
d5:0c:7d:30:5f:ae:5c:04:ef:5b:8e:c1:73:f0:88:19:07:5d:
a3:5f:01:05:15:66:ba:0c:64:f3:54:ab:6b:8b:9c:9e:3a:8f:
bd:29:ef:71:cf:f9:b5:69:81:b8:52:4c:ca:dc:bf:72:09:e0:
6a:6a:b7:f8:2c:49:a6:35:83:b5:83:ce:d7:dc:9e:77:9c:5d:
87:bd:84:11:e0:a1:44:db:fa:56:34:72:40:77:17:02:d4:98:
2e:11:44:77:e6:9c:fc:61:f7:74:4b:0c:ec:bc:d9:32:d9:11:
3f:f3:cb:6f
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUSfAS25KBgOBuNV0vs0bdWAsnzdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA3MjMxNTMwNDFaFw0yNjEwMjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDdhMzA2YmY4YmQ5ODNjZjA5ZjdkOThlMzkxZjgyYjNjNGI2ZTUxZTM4OGI4
YTdkNDU1ZWVkMDNhYzg3NjE1M2MxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL7cA1b2KXDhPO4cI/7IyoHVShOsRyO9a2KhM60gDJmArmE2oeOxxBGH1xnH
URvyiVnAYyM59YfResfWf/G1c8jiwPcVp+OC7Wx4NryA8kJ6h4SwClkGriTIaWKg
lF+C8nv62V2LrCTrrXfB5sbJR8kaLxINbcbSA+F3DJsj5Ff4aLawQ0jpoMFi3iTA
JpB6vsYF2i9/N//7+kCdPtwxqSFEOw+yAoWDc1SpH1ZmAz7zuQm0u8pW5n5r7LE8
V2hOsu+snrSivG1lUTr89nMIRoI1GwoF/tsiRDFwBlfmMFU9V7HJDCsxKiX6nFqM
Jtn6+adOzMC0jjRXeIg59jeG7z0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRppduE
GAdxZcTVgG5eXewanVgnJTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MjA3ZWYzMDktZGNiNS00MjY0LWJmNTctMGQ1MmZlYTA3OWNkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAIIYMA0G
CSqGSIb3DQEBCwUAA4IBAQBWHRpOwhyNa/v1NuGm2sG7w/WvzHjjY+bD8gValCrU
pITXKoWA6NNTzEHC0JaYlR5gxJWFIR2opg+WrvXI4SA2Fd8trxSjlbVXD2VtVvAp
V2eZcTDZ23A6bUIuDO9XIj1fWqDvJjU4nRrPaPCRSiDqTVGhmcxHtfwl4tCr6OuP
z9gv5qcTBTjK3aUWQ6aXFWrVDH0wX65cBO9bjsFz8IgZB12jXwEFFWa6DGTzVKtr
i5yeOo+9Ke9xz/m1aYG4UkzK3L9yCeBqarf4LEmmNYO1g87X3J53nF2HvYQR4KFE
2/pWNHJAdxcC1JguEUR35pz8Yfd0SwzsvNky2RE/88tv
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:16 2026 by rpki-client