Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2dbc9912-b766-4000-9f7c-cb9e37916980.roa
File: 2dbc9912-b766-4000-9f7c-cb9e37916980.roa (raw, json)
Hash identifier: 1FDV7sEQ2ccGOuwQAfS6cUteVHbDNW3KqNmsOyzKOzo=
Subject key identifier: AE:C6:71:EF:48:83:02:3B:98:90:8E:B9:FD:0D:F0:FD:F9:A7:CE:43
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 272BE668431873836D3286A0AA30850E161EB1AC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2dbc9912-b766-4000-9f7c-cb9e37916980.roa
Signing time: Thu 15 Oct 2026 00:20:08 +0000
ROA not before: Thu 15 Oct 2026 00:20:08 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:2b:e6:68:43:18:73:83:6d:32:86:a0:aa:30:85:0e:16:1e:b1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 15 00:20:08 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=a283a6387e444a26d93513ef78991861d7a1f6a45665010c70306c35f51634b6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:7c:80:80:19:17:37:01:ba:89:ef:e1:63:
1d:18:ce:2c:dd:4c:2c:2d:9f:d6:58:f9:19:42:6d:
a1:0e:f6:3c:d1:df:80:6e:34:a6:ac:6b:35:db:51:
cc:62:51:54:1b:e0:eb:bb:11:9f:d1:46:d8:c1:ee:
be:c6:70:f5:28:a8:12:20:db:2e:4e:d7:85:be:67:
e5:be:34:87:20:5e:87:4d:87:58:f9:bb:88:d2:5b:
90:cb:2f:92:95:8f:ee:9d:cc:c7:22:63:3d:d4:fa:
fc:bf:f3:0f:74:8b:a3:12:bd:d2:81:7b:b9:f0:01:
94:02:42:79:9c:fe:60:a5:d3:8c:2c:5e:12:d9:79:
9c:cc:f0:d7:d5:08:0c:db:78:04:d8:7f:5a:17:78:
cc:d9:26:d6:27:93:07:4e:f1:01:93:1d:84:e0:fe:
8f:8a:0a:78:57:cb:69:3c:bf:42:c2:25:b1:7d:ad:
38:0d:5f:92:78:fe:c5:e0:42:d7:ed:a8:f9:42:ec:
4b:54:2e:07:de:9e:27:77:5c:af:5b:c6:2c:d2:4a:
36:81:66:47:4c:b2:7b:50:ff:0f:04:61:59:ba:6d:
25:a4:28:8b:2f:c6:fa:97:0c:e8:65:b3:99:a4:09:
28:16:d3:10:ed:47:11:8a:19:1e:5a:14:a8:3e:8e:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C6:71:EF:48:83:02:3B:98:90:8E:B9:FD:0D:F0:FD:F9:A7:CE:43
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2dbc9912-b766-4000-9f7c-cb9e37916980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.128.0/18
Signature Algorithm: sha256WithRSAEncryption
95:84:29:e7:f9:5a:de:4d:e6:56:b3:8c:0e:96:e3:fe:14:99:
ff:a6:f6:53:ed:12:d3:c5:58:a6:98:7c:7f:5b:ee:f3:f0:70:
1c:e6:4b:29:eb:04:8f:3b:ff:ab:d0:6e:48:d8:cc:8b:56:12:
c3:aa:9e:99:7a:c3:77:93:39:21:1d:03:30:5a:93:d1:9f:1d:
6f:30:78:43:3e:c8:61:4e:67:1f:3a:58:29:87:54:67:1b:ec:
ad:de:4d:58:1b:7b:d3:38:90:8b:f7:c0:53:4a:46:26:82:d7:
99:93:0c:9b:9b:3c:5e:7a:af:1a:47:84:f4:cb:59:11:56:f7:
e1:f8:a8:2e:46:03:1d:7c:41:61:80:37:5a:48:73:66:ef:33:
e0:d0:cf:6d:7f:2f:07:d9:63:d6:b6:17:eb:53:3c:c6:8e:ba:
2a:0c:81:1d:a3:87:cc:aa:ec:29:eb:a5:88:1b:2c:28:fe:01:
6a:8d:8e:91:32:7a:18:0b:16:1b:a7:f5:6b:51:5b:60:16:3e:
21:aa:56:4d:1f:82:72:41:24:3e:63:d8:8a:41:d7:1c:66:b5:
3b:97:a2:e9:df:ad:72:5f:13:98:c5:e0:f7:f1:30:e3:78:82:
6e:54:b4:74:db:3b:38:b2:92:76:79:cc:94:5a:12:b9:47:f2:
df:c4:d0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 15:56:54 2026 by rpki-client