Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5112f144-85b1-4c62-8729-84d86ff353a1.roa
File: 5112f144-85b1-4c62-8729-84d86ff353a1.roa (raw, json)
Hash identifier: KfDayLfQ70TYNe6E6MpnstC/ivgAHcV2wLeT/jjKpHQ=
Subject key identifier: A7:32:5F:34:53:D9:66:30:93:D4:CB:65:A3:AC:0E:83:94:AF:42:2A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0720E2EA88065F2436E5FEADBCDDAB6187946D87
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5112f144-85b1-4c62-8729-84d86ff353a1.roa
Signing time: Thu 23 Jul 2026 15:30:19 +0000
ROA not before: Thu 23 Jul 2026 15:30:19 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 84.48.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:20:e2:ea:88:06:5f:24:36:e5:fe:ad:bc:dd:ab:61:87:94:6d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:19 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=680fbc539724523b2f2223c80b3e58006058907ac3bbaf204b6daab88b80c38b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:f7:dd:83:e5:c9:68:3c:ba:38:ea:e9:7d:
cb:60:ae:52:97:51:94:a2:9b:90:8f:f2:d2:5c:06:
b0:2e:0f:74:61:bd:c1:2a:b7:d3:d8:b1:df:7c:e8:
bd:63:60:43:e2:28:2c:8b:81:9f:1b:66:e2:c8:e9:
60:9c:90:ab:ae:d1:8e:ac:e1:ef:e9:63:f3:3a:a9:
aa:96:d9:da:bc:4c:9a:57:4f:3f:de:fa:43:d4:d3:
e9:70:50:75:03:89:8f:d7:52:a9:00:9c:60:41:8c:
ae:11:6f:36:f6:26:b1:24:0f:7a:d5:60:2d:72:b3:
be:62:5c:ff:be:b0:af:97:ee:f3:5f:6d:cd:48:0f:
c2:5a:ff:b4:b6:47:1f:63:56:3c:dc:c0:9d:85:f1:
01:8b:b9:8c:ad:d0:f5:0b:62:a6:55:56:71:8b:a0:
cd:d8:61:f6:90:7c:55:a8:2d:e5:cd:55:a3:57:da:
04:cc:63:e4:fd:20:cd:50:b3:4c:52:9e:66:25:56:
e2:7a:0a:d6:98:e5:40:67:fd:07:57:18:c9:91:5f:
2e:e4:97:93:58:57:93:bf:a9:19:64:68:09:3e:42:
27:3d:0c:d3:0b:64:1c:6e:90:16:e9:0f:0a:6e:57:
2d:27:a0:85:4e:9f:8e:9e:39:e6:17:69:c0:9f:9a:
98:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:32:5F:34:53:D9:66:30:93:D4:CB:65:A3:AC:0E:83:94:AF:42:2A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5112f144-85b1-4c62-8729-84d86ff353a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.48.128.0/17
Signature Algorithm: sha256WithRSAEncryption
22:8c:dd:b1:7b:2f:3b:73:3b:c1:2a:91:91:76:48:68:4f:5e:
f8:6d:c8:6b:a8:36:47:31:ee:08:57:8d:60:64:f2:8f:c6:f3:
b2:0e:e8:04:c1:77:39:7f:fd:30:b7:27:ba:0d:18:b0:71:58:
7c:13:f0:df:e3:22:f6:6c:96:6e:d6:f8:6d:c5:fb:6f:35:87:
bb:d7:65:f7:55:ea:78:47:fd:85:1d:f9:34:0a:86:dc:f5:b9:
03:c8:0e:9f:d1:ac:ff:f9:69:8e:61:92:a7:f6:ea:99:cb:9b:
38:ae:7e:d8:af:09:12:43:4e:46:99:69:b1:4d:75:01:e2:08:
ec:cb:52:f2:2d:1a:5b:16:5c:92:65:2b:65:25:77:c2:83:5a:
ff:71:f4:5b:18:60:89:a1:4b:a8:9e:6d:da:1b:f9:76:58:0a:
31:08:39:b9:2a:3c:a7:29:36:73:4f:e8:5b:1a:5f:19:fe:19:
3b:d8:38:f0:b8:45:e1:a7:29:3a:ba:02:f3:c4:71:ef:24:1e:
3f:8b:57:f6:ca:b3:89:ad:59:c0:04:a8:04:20:9c:81:2d:86:
2c:5f:7e:79:ee:5f:fc:07:fd:9b:d5:69:bf:1f:1e:7d:d6:62:
a0:48:4f:c9:09:09:71:db:f5:f6:13:b8:b9:b4:0a:a1:2e:54:
33:c8:2d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:41:22 2026 by rpki-client