Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2a59044d-ec7e-45ff-a5bb-b9ab54f5cfb8.roa
File: 2a59044d-ec7e-45ff-a5bb-b9ab54f5cfb8.roa (raw, json)
Hash identifier: EJb11ZGbUtpNBx8T+RIOhehE68S+K6wS68QbmQHHU/k=
Subject key identifier: DD:52:A9:51:04:4C:4E:25:EF:E9:A3:B2:68:42:2F:82:32:F2:17:8B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7ABE0173F31265E15C0FFAF0027FDF80822C6F48
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2a59044d-ec7e-45ff-a5bb-b9ab54f5cfb8.roa
Signing time: Mon 29 Jun 2026 00:00:06 +0000
ROA not before: Mon 29 Jun 2026 00:00:06 +0000
ROA not after: Sun 27 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 57.81.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:be:01:73:f3:12:65:e1:5c:0f:fa:f0:02:7f:df:80:82:2c:6f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 29 00:00:06 2026 GMT
Not After : Sep 27 23:59:59 2026 GMT
Subject: serialNumber=d9053af0cc696e68f0444c2b301efa0e1f84bdf0872cb56bc1b158a1aec3457a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:55:72:4d:59:fa:b0:3f:c3:5e:01:89:82:
34:ad:17:ad:31:1f:35:df:56:fd:0b:07:89:27:9a:
02:c9:6a:ee:1d:aa:d9:5a:6c:4d:e4:14:bc:4e:4a:
5d:c7:ef:b1:64:94:64:ce:bc:f9:8a:14:86:2d:20:
6f:5b:7f:4a:48:9e:ab:b8:57:b9:54:d7:e7:cb:68:
13:c5:3c:9c:58:b3:8d:90:3a:dd:c3:7e:4a:db:1d:
51:4a:3c:7b:bc:27:93:1d:60:14:e0:92:d6:73:ce:
3f:de:e6:5c:d1:97:21:81:3b:98:af:a6:73:38:c6:
ef:6a:f2:90:da:7f:d1:ff:be:cd:53:a4:40:46:4b:
18:23:9c:c9:93:50:a6:88:78:10:98:ee:ba:92:98:
59:2a:15:39:45:94:fa:36:ad:fe:1c:4d:a0:81:42:
54:64:35:64:40:6a:ce:61:fc:9e:7d:13:b4:02:7f:
47:2b:b0:2b:c3:e7:24:59:3a:ed:23:96:e6:26:9a:
f3:3f:1e:4b:e6:5c:ed:3b:62:9a:2e:af:1f:69:58:
c3:fc:f0:af:9a:be:e9:24:d4:b4:89:e5:21:08:1d:
a0:0a:1d:5e:ee:97:cd:38:0b:5f:81:18:78:02:32:
e5:53:d7:97:58:b4:ac:64:5e:38:12:72:42:cf:49:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:52:A9:51:04:4C:4E:25:EF:E9:A3:B2:68:42:2F:82:32:F2:17:8B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2a59044d-ec7e-45ff-a5bb-b9ab54f5cfb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.81.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:42:77:08:d2:a0:c0:3b:58:f1:a2:f3:80:e7:4c:34:bd:79:
29:dd:ce:af:27:a0:93:46:5d:97:bd:59:75:65:a5:6a:b0:03:
ce:2d:78:32:38:41:e1:e2:92:1a:6e:a1:a1:ec:f8:33:46:11:
25:77:6f:97:b5:45:f2:da:dd:64:3a:32:73:28:93:7f:eb:d4:
05:32:98:5e:9a:61:33:9d:e4:c9:9f:51:b4:8d:72:20:69:18:
2d:29:a5:59:90:db:7f:3b:b6:d4:93:04:dc:5d:9e:e1:39:91:
6a:02:c4:04:72:86:40:d0:8a:95:5e:52:4b:cb:e0:2c:62:46:
08:72:c9:17:59:c5:0a:4c:87:4c:cb:03:fa:bc:77:8b:15:69:
ac:ef:35:02:b8:19:20:e4:7a:e7:da:4d:c8:0f:36:53:30:c7:
b9:e7:97:f3:11:99:86:b7:10:4a:30:ae:1e:cc:1b:c0:37:25:
f8:20:2e:44:29:0f:97:be:18:1b:20:df:29:3d:35:80:46:29:
be:a9:d8:a3:b1:d7:aa:bd:e5:e6:1d:91:84:fb:3c:ee:c0:e1:
6a:fa:48:ff:5f:c8:e4:d3:c3:41:e6:a1:c0:d4:6a:cb:86:b9:
2b:8c:b0:ba:91:6c:c2:f0:31:e1:a3:99:53:5b:a4:c1:cd:87:
e3:2b:c5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:20 2026 by rpki-client