Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/575d6f80-6d4b-4183-8b86-cc4106bedd78.roa
File: 575d6f80-6d4b-4183-8b86-cc4106bedd78.roa (raw, json)
Hash identifier: txdUC41G4vJEIX+uzdNdGWyORLVkW9m85VR03plUnBg=
Subject key identifier: 89:09:2D:9B:43:F2:93:B7:A4:45:29:73:41:3F:48:6D:9A:9D:C7:2B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 21E7692F3B0FA3864020DC22D70C5CA0C380ED56
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/575d6f80-6d4b-4183-8b86-cc4106bedd78.roa
Signing time: Thu 23 Jul 2026 15:30:17 +0000
ROA not before: Thu 23 Jul 2026 15:30:17 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 195.119.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e7:69:2f:3b:0f:a3:86:40:20:dc:22:d7:0c:5c:a0:c3:80:ed:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:17 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=24abfcd2c3a40463eb61c19a16e9a12f823663b48a244403e2ca986e8735f0df, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:b5:bc:ce:f9:e0:4e:92:73:b4:c5:c3:e2:
7e:d8:98:4b:ec:90:bd:3f:ee:31:f3:ba:7e:b4:cb:
98:96:46:38:22:05:9b:74:e9:f2:0c:fd:3f:37:b6:
5f:58:7e:37:93:39:e9:d4:23:6e:5e:35:bf:1b:52:
8f:79:00:3c:e2:99:57:07:c2:a2:6d:b1:b6:52:2c:
6b:4e:72:63:0b:32:6a:44:f2:88:a0:33:b9:a9:4b:
c7:3e:b0:13:06:d5:54:36:7c:40:03:d9:9b:ee:50:
7f:da:cf:2e:49:1d:02:a7:70:33:1f:7c:d3:af:25:
54:83:7c:c1:54:0f:2f:37:74:bb:1d:9c:49:0b:0a:
06:04:b7:08:91:19:01:5a:87:44:04:45:71:9b:d4:
99:f1:42:bd:95:91:00:81:ca:92:9f:65:5f:2b:5c:
f6:e2:30:c0:45:b6:12:92:b0:c0:f5:9a:34:62:7b:
fb:5c:c8:cf:ed:d5:9b:a5:65:61:18:d1:fd:98:02:
99:98:f2:64:42:b6:36:a8:5f:6c:dc:83:76:fd:8a:
ad:7c:c6:b1:85:2b:46:c9:95:68:c0:ff:ab:a1:bd:
d4:7f:fb:4b:55:be:d8:7e:80:0f:57:2b:b0:93:0c:
08:8a:2e:57:9c:41:f0:7a:25:96:68:6f:b1:f3:c2:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:09:2D:9B:43:F2:93:B7:A4:45:29:73:41:3F:48:6D:9A:9D:C7:2B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/575d6f80-6d4b-4183-8b86-cc4106bedd78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.119.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:38:d4:e3:dd:64:6f:59:d2:cb:19:1a:c6:54:9b:7a:0c:92:
61:a7:91:08:22:fe:2a:bf:7a:56:57:94:6f:68:3b:af:bf:e9:
24:e9:8d:e4:c3:31:3b:5d:00:6b:51:94:87:f4:54:f8:b2:af:
a2:87:26:52:62:d3:2b:e1:11:c7:ef:5f:32:79:1b:4b:ba:7f:
03:c8:19:ea:62:db:11:d1:f3:49:95:41:29:0d:76:b1:32:d3:
e7:ff:42:b0:ec:2b:94:3b:84:c3:a8:ef:53:db:22:21:9d:12:
09:16:11:bb:23:b8:09:77:16:fb:6f:cf:f4:0c:70:21:db:81:
a7:58:72:3b:4a:51:21:fa:ac:f7:2d:b3:74:0b:6b:5b:90:b7:
09:ef:d9:26:0b:9a:b4:4b:42:77:65:15:f3:41:ae:2f:87:4e:
a7:e0:6f:35:cb:86:6a:ba:97:0a:af:42:d3:25:4d:5c:f3:db:
e5:6e:53:93:27:b6:63:df:2f:1c:6c:ba:ad:0c:1b:c3:13:2d:
38:42:97:4e:fc:3e:5e:b0:95:78:30:2a:ed:d3:7b:8f:37:5c:
f1:4e:aa:d3:ed:53:59:c0:3b:33:ff:20:43:94:4c:cc:4e:b3:
19:70:60:06:f7:dc:9d:27:58:a8:ef:cf:5c:c7:23:69:a7:16:
d5:99:a1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:50:18 2026 by rpki-client