Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/21ed4032-a4d1-486a-97f8-a4eed91bb627.roa
File: 21ed4032-a4d1-486a-97f8-a4eed91bb627.roa (raw, json)
Hash identifier: SSbd1o6VPUnyT01g1DgTjPdTbVXMShSKgvqGgNLHZcQ=
Subject key identifier: 80:93:62:3F:9F:80:78:68:3A:03:EF:61:FA:69:B5:82:2E:42:18:4C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 12F436A8FCE033D8F3DBE8AD09CC43E5D3A9BF12
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/21ed4032-a4d1-486a-97f8-a4eed91bb627.roa
Signing time: Mon 26 Oct 2026 05:40:37 +0000
ROA not before: Mon 26 Oct 2026 05:40:37 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 194.52.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:f4:36:a8:fc:e0:33:d8:f3:db:e8:ad:09:cc:43:e5:d3:a9:bf:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:37 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=86e575ecbe34ae5d99fae1ae9aa3e6c35afa338b11f8d56e8b43a71b718d7615, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:33:6b:28:71:b6:0c:65:14:ec:fb:26:b4:
0d:f9:94:f1:33:46:86:f4:96:de:d1:e9:b6:29:ea:
a2:81:16:18:24:04:05:52:30:12:04:9a:a2:4f:66:
b5:a5:0a:16:ee:bd:ae:31:27:f9:b5:1f:9e:5f:22:
a6:88:6f:94:2d:35:be:9a:26:03:fa:52:f9:dc:44:
ce:d9:8b:fd:f1:89:f1:a6:08:28:cf:d8:9c:73:38:
62:d3:a6:2c:ae:70:0e:ce:a8:cb:f8:4f:ad:e8:98:
59:dc:f5:d3:cb:63:0e:1d:00:b6:eb:ed:0a:a8:3d:
5c:61:f9:eb:f2:00:26:7b:99:f8:f2:51:d8:a1:0c:
8e:79:63:2d:d5:9a:2b:ef:37:b8:4e:57:96:13:cd:
b8:d6:5f:30:56:36:c6:cd:68:f6:dd:f3:17:7a:f6:
ce:3f:55:83:34:c1:ff:2a:63:61:e9:d1:6e:ce:0e:
89:a2:c8:b8:18:a5:63:ca:03:59:ba:f6:41:02:4e:
7b:1a:3a:7a:10:cb:09:72:fd:3e:fd:60:2d:6b:67:
91:03:21:ee:54:1f:e4:b3:04:b4:bd:bd:b4:0e:8b:
47:94:0f:68:a2:01:32:9b:b5:5f:db:8c:ce:af:00:
be:bf:d2:b4:f2:f7:32:e7:a8:d5:2b:f3:57:5c:6c:
d4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:93:62:3F:9F:80:78:68:3A:03:EF:61:FA:69:B5:82:2E:42:18:4C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/21ed4032-a4d1-486a-97f8-a4eed91bb627.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:81:98:33:79:56:4c:53:68:af:68:55:b4:65:58:d0:7f:ad:
0a:e9:3c:c1:96:ae:dc:bd:06:b5:be:0d:85:c8:8d:26:7b:bb:
2a:38:42:a2:18:21:5f:ef:6d:9d:64:71:94:e6:6d:81:90:21:
7c:47:7e:62:2a:cd:24:54:31:bb:7f:2f:ce:2c:16:40:b9:b6:
c1:27:d5:42:61:ec:ba:38:4d:d8:07:e5:33:94:44:00:4f:a3:
e3:84:82:bb:df:ff:32:7d:1d:0e:0f:5f:67:37:6b:5f:f0:d6:
d0:92:f0:82:74:4d:a5:23:66:7d:4c:d0:a6:c3:e9:ac:89:28:
07:5f:25:07:db:fc:2f:cb:68:aa:8a:77:7b:2b:2d:30:c1:9f:
d4:77:c6:2d:d4:7b:e3:69:a4:2a:39:86:c2:4c:d4:08:9e:9a:
09:3f:05:82:d7:8f:6e:f7:76:f7:a1:b2:1c:f4:ab:3e:c8:88:
5c:bb:61:02:f4:e8:8c:6b:90:8c:03:40:87:2d:be:16:05:6e:
da:6a:3d:e4:b3:ce:9e:55:ac:8b:23:d9:93:17:17:e4:da:16:
ee:7e:bd:e5:40:a2:60:3a:ea:ff:8d:9b:06:a8:f9:20:f7:93:
28:8a:d5:f9:e8:92:d7:8e:0c:02:83:08:ed:7d:6c:07:1b:cc:
88:f6:9f:d9
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUEvQ2qPzgM9jz2+itCcxD5dOpvxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTQwMzdaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDg2ZTU3NWVjYmUzNGFlNWQ5OWZhZTFhZTlhYTNlNmMzNWFmYTMzOGIxMWY4
ZDU2ZThiNDNhNzFiNzE4ZDc2MTUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ0DM2socbYMZRTs+ya0DfmU8TNGhvSW3tHptinqooEWGCQEBVIwEgSaok9m
taUKFu69rjEn+bUfnl8ipohvlC01vpomA/pS+dxEztmL/fGJ8aYIKM/YnHM4YtOm
LK5wDs6oy/hPreiYWdz108tjDh0AtuvtCqg9XGH56/IAJnuZ+PJR2KEMjnljLdWa
K+83uE5XlhPNuNZfMFY2xs1o9t3zF3r2zj9VgzTB/ypjYenRbs4OiaLIuBilY8oD
Wbr2QQJOexo6ehDLCXL9Pv1gLWtnkQMh7lQf5LMEtL29tA6LR5QPaKIBMpu1X9uM
zq8Avr/StPL3Mueo1SvzV1xs1BUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSAk2I/
n4B4aDoD72H6abWCLkIYTDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MjFlZDQwMzItYTRkMS00ODZhLTk3ZjgtYTRlZWQ5MWJiNjI3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMI0MA0G
CSqGSIb3DQEBCwUAA4IBAQApgZgzeVZMU2ivaFW0ZVjQf60K6TzBlq7cvQa1vg2F
yI0me7sqOEKiGCFf722dZHGU5m2BkCF8R35iKs0kVDG7fy/OLBZAubbBJ9VCYey6
OE3YB+UzlEQAT6PjhIK73/8yfR0OD19nN2tf8NbQkvCCdE2lI2Z9TNCmw+msiSgH
XyUH2/wvy2iqind7Ky0wwZ/Ud8Yt1HvjaaQqOYbCTNQInpoJPwWC149u93b3obIc
9Ks+yIhcu2EC9OiMa5CMA0CHLb4WBW7aaj3ks86eVayLI9mTFxfk2hbufr3lQKJg
Our/jZsGqPkg95MoitX56JLXjgwCgwjtfWwHG8yI9p/Z
-----END CERTIFICATE-----
Generated at Wed Nov 11 14:13:52 2026 by rpki-client