Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/387a5e5f-3658-431f-b236-d486cddcae07.roa
File: 387a5e5f-3658-431f-b236-d486cddcae07.roa (raw, json)
Hash identifier: KPv0vQSzwN96kbuQ5Ylq6Abl8rl8mcniFlrizPwFfMc=
Subject key identifier: 16:20:52:F2:1E:6D:1D:0F:E1:20:84:AD:2F:03:D6:1E:01:C3:FB:8D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 07965EBDA9B7A81B843805346092E6229C307301
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/387a5e5f-3658-431f-b236-d486cddcae07.roa
Signing time: Thu 15 Oct 2026 00:20:07 +0000
ROA not before: Thu 15 Oct 2026 00:20:07 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:96:5e:bd:a9:b7:a8:1b:84:38:05:34:60:92:e6:22:9c:30:73:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 15 00:20:07 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=17c5aad57a47b0f07c6cc26e2b591a566bcba8a4476815fc15c0481c2410664d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:4e:1b:00:f1:ef:95:cf:35:68:d0:82:e8:
48:6e:5a:06:7d:d4:6f:67:70:a8:4b:e2:74:d7:6a:
af:18:36:b8:bc:c7:17:3f:80:35:93:1e:c7:d8:bd:
be:f2:62:b5:16:91:c8:dd:91:b2:76:13:91:4e:93:
42:43:43:16:bf:9e:7b:2c:d5:74:95:e3:36:29:e0:
bc:9e:b9:13:8b:0f:74:35:50:61:08:22:93:a0:48:
8b:ce:20:d3:db:57:2d:9d:6b:ca:95:89:45:26:10:
cb:f2:96:27:73:08:57:cf:99:55:1e:36:f7:a8:1f:
ea:c1:cb:b8:0f:f5:3d:9b:7d:76:d3:ea:69:d0:7f:
fb:b7:27:7e:69:a3:c7:7f:2d:24:2c:d5:a5:ac:ec:
f7:2d:6b:e5:e0:67:95:76:12:a8:4a:90:68:79:51:
c9:ba:90:67:55:c4:b7:5d:27:c0:b0:2b:43:c1:41:
33:ab:29:48:11:ea:b8:cf:0f:8b:2f:d8:f9:ff:8b:
8c:fd:6a:28:36:ba:63:86:69:ec:d8:01:2a:41:f8:
df:ba:47:a2:9a:8e:0b:18:40:29:87:17:80:b2:49:
62:41:9e:ff:ad:61:0d:16:0c:28:8e:79:74:c0:61:
8c:84:05:2f:6c:6d:79:92:6d:37:45:47:3b:20:5e:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:20:52:F2:1E:6D:1D:0F:E1:20:84:AD:2F:03:D6:1E:01:C3:FB:8D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/387a5e5f-3658-431f-b236-d486cddcae07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b8:a4:33:3d:67:34:f5:bb:6f:70:2c:55:52:71:75:4a:59:10:
d3:c1:e9:ca:da:b2:df:89:0a:b3:63:a8:6e:51:08:17:0f:b1:
be:78:f5:1a:66:53:de:ea:6a:06:0c:ed:e1:a5:14:08:b9:45:
40:e2:b1:cc:d5:a8:29:cd:0b:fc:f4:b6:e1:8d:ca:e4:5d:66:
a8:a4:0e:2f:08:93:80:0e:45:8b:92:50:94:0f:f9:9d:c2:a6:
47:fc:fb:88:4a:6b:31:df:6c:5c:7b:52:b5:c5:12:63:37:55:
3a:87:68:c7:c7:2b:64:40:24:32:6c:14:e2:b8:4d:71:12:1e:
f8:f4:ef:85:21:f4:6f:47:e9:64:78:0f:bb:20:7c:b2:58:a5:
ae:13:79:d0:57:cd:9d:04:d2:7d:a0:f1:e1:92:a6:75:e0:e3:
b0:40:68:f3:b7:6d:ae:c6:e9:b4:b9:38:36:79:a0:62:33:45:
9b:f0:b1:54:d2:a3:e6:39:ef:df:54:95:f6:fd:42:51:a3:41:
7d:49:4b:f6:63:5a:a0:34:4f:32:8c:34:b3:04:dc:6d:51:74:
6c:f3:a5:b8:73:9f:94:d8:f3:28:4c:be:49:93:21:aa:03:31:
fb:00:4c:ce:a2:2b:04:2a:7d:3d:9b:c9:df:f0:c2:b2:a1:11:
1f:d1:97:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:01:46 2026 by rpki-client