Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3bba584e-2e0b-4492-94b0-e70177c8f2cd.roa
File: 3bba584e-2e0b-4492-94b0-e70177c8f2cd.roa (raw, json)
Hash identifier: ibBAUAtNwAdwj3UuWoWwaTFXQLhwj3TDqPZ+tkBRKC0=
Subject key identifier: 38:44:2D:E5:72:BE:5A:02:28:32:62:7A:F9:45:92:B4:F8:0C:CC:67
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: D58DD5D13638F2C3A134FE7F408D10DEE8DB1F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3bba584e-2e0b-4492-94b0-e70177c8f2cd.roa
Signing time: Thu 23 Jul 2026 15:30:39 +0000
ROA not before: Thu 23 Jul 2026 15:30:39 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 57.104.0.0/13 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d5:8d:d5:d1:36:38:f2:c3:a1:34:fe:7f:40:8d:10:de:e8:db:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:39 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=ad5f7c3d2efba02d54096098b03ac38607fff0c4c14264997066dfef8035c311, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:7e:b4:67:10:ee:5e:5e:41:f3:af:f5:8f:
e3:d3:26:4c:db:4b:3a:23:e9:db:53:89:af:46:d9:
af:be:17:c8:1d:eb:a5:f7:b0:32:3d:3f:2d:3b:dc:
0e:1b:58:21:40:3e:32:b5:5f:47:d9:69:ed:c5:43:
b8:c6:4f:b4:c1:d9:1e:84:a2:a2:a6:63:36:e8:44:
2c:80:2e:f2:2d:dd:1d:8e:4d:2d:cd:35:9a:dd:d7:
06:54:97:e9:d3:f2:1e:30:82:5c:6a:7c:f9:b3:1d:
35:85:cd:20:dd:fc:7b:be:a8:b7:c6:79:98:c5:1b:
23:43:4e:c1:81:04:69:90:e5:92:4b:7f:0a:a4:ce:
02:76:25:55:a6:ce:a2:12:6d:6b:20:a2:53:8a:f0:
3a:f1:4f:03:73:95:7e:35:94:f8:19:ed:4b:f0:a0:
34:f9:f5:d6:9c:47:d8:70:8d:39:84:b2:73:ad:26:
01:f8:8e:48:38:73:ea:c4:13:d8:26:79:11:ae:3a:
d1:de:27:0b:17:84:cb:8d:b9:58:e6:cc:a4:e8:85:
04:2a:53:69:48:24:88:3e:a4:64:e7:9e:78:d5:93:
8d:af:c3:b9:67:e8:ff:35:78:e6:73:57:b3:95:57:
cf:09:dd:f3:0b:82:30:2a:4e:63:88:42:7a:d1:0c:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:44:2D:E5:72:BE:5A:02:28:32:62:7A:F9:45:92:B4:F8:0C:CC:67
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/3bba584e-2e0b-4492-94b0-e70177c8f2cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.104.0.0/13
Signature Algorithm: sha256WithRSAEncryption
1f:30:2e:93:1b:e2:a6:ab:b5:9c:2d:8d:30:4e:e9:3e:71:bb:
1e:0a:2f:16:1d:90:2b:28:18:0d:fe:3c:ee:79:f4:1b:99:d0:
ff:1a:49:24:c2:60:4e:eb:87:71:bb:31:9a:4e:60:0b:8a:db:
64:a3:6a:7b:59:34:6b:71:61:a7:03:99:e2:25:a1:60:bd:06:
d8:6e:3b:29:f3:49:4e:4e:fc:d6:bd:ad:2a:c3:d0:61:88:e9:
55:d7:3b:eb:9d:b6:ca:2f:40:eb:f6:81:d4:16:a5:d9:f7:44:
54:9f:f1:0f:55:6e:88:5a:18:91:e7:c9:0f:61:3e:96:c8:1c:
54:2d:17:41:b8:47:53:0e:85:b9:91:c5:7b:3c:f8:8f:ab:47:
cf:7c:c7:8a:0d:06:ad:99:3f:16:d4:24:5e:e5:75:fa:4b:ee:
00:b6:2d:21:c4:06:51:55:74:5b:93:ce:7c:52:5a:0b:fa:32:
b4:69:65:03:60:d6:32:82:8a:5b:99:b8:51:59:4c:e0:bb:3f:
cc:22:8d:8d:e6:9d:85:c2:fa:b9:7c:e6:54:be:ff:25:14:17:
fa:41:f8:c1:d1:d0:97:06:ff:53:dd:20:28:14:42:ca:b6:cc:
14:d7:8e:04:7b:8f:f4:b3:1b:9a:f2:12:b5:f2:1b:e8:eb:46:
ec:37:a5:ef
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUANWN1dE2OPLDoTT+f0CNEN7o2x8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA3MjMxNTMwMzlaFw0yNjEwMjEyMzU5NTlaMHoxSTBHBgNV
BAUTQGFkNWY3YzNkMmVmYmEwMmQ1NDA5NjA5OGIwM2FjMzg2MDdmZmYwYzRjMTQy
NjQ5OTcwNjZkZmVmODAzNWMzMTExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALXlfrRnEO5eXkHzr/WP49MmTNtLOiPp21OJr0bZr74XyB3rpfewMj0/LTvc
DhtYIUA+MrVfR9lp7cVDuMZPtMHZHoSioqZjNuhELIAu8i3dHY5NLc01mt3XBlSX
6dPyHjCCXGp8+bMdNYXNIN38e76ot8Z5mMUbI0NOwYEEaZDlkkt/CqTOAnYlVabO
ohJtayCiU4rwOvFPA3OVfjWU+BntS/CgNPn11pxH2HCNOYSyc60mAfiOSDhz6sQT
2CZ5Ea460d4nCxeEy425WObMpOiFBCpTaUgkiD6kZOeeeNWTja/DuWfo/zV45nNX
s5VXzwnd8wuCMCpOY4hCetEM7ysCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQ4RC3l
cr5aAigyYnr5RZK0+AzMZzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
M2JiYTU4NGUtMmUwYi00NDkyLTk0YjAtZTcwMTc3YzhmMmNkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAzloMA0G
CSqGSIb3DQEBCwUAA4IBAQAfMC6TG+Kmq7WcLY0wTuk+cbseCi8WHZArKBgN/jzu
efQbmdD/GkkkwmBO64dxuzGaTmALittko2p7WTRrcWGnA5niJaFgvQbYbjsp80lO
TvzWva0qw9BhiOlV1zvrnbbKL0Dr9oHUFqXZ90RUn/EPVW6IWhiR58kPYT6WyBxU
LRdBuEdTDoW5kcV7PPiPq0fPfMeKDQatmT8W1CRe5XX6S+4Ati0hxAZRVXRbk858
UloL+jK0aWUDYNYygopbmbhRWUzguz/MIo2N5p2Fwvq5fOZUvv8lFBf6QfjB0dCX
Bv9T3SAoFELKtswU144Ee4/0sxua8hK18hvo60bsN6Xv
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:33:51 2026 by rpki-client