Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5b8eca1c-0001-4580-9357-36838b685542.roa
File: 5b8eca1c-0001-4580-9357-36838b685542.roa (raw, json)
Hash identifier: CdRVOylpJSnEuyZjhwUcMrFd95sCjiOf7BJYQX0G9Yo=
Subject key identifier: EC:32:35:46:25:F8:DA:D5:CE:8C:07:3D:21:29:C0:B9:A0:91:75:3D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 252503ADB95A2CF92056175FA517979AA77BEDBC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5b8eca1c-0001-4580-9357-36838b685542.roa
Signing time: Thu 23 Jul 2026 15:30:37 +0000
ROA not before: Thu 23 Jul 2026 15:30:37 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 159.239.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:25:03:ad:b9:5a:2c:f9:20:56:17:5f:a5:17:97:9a:a7:7b:ed:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:37 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=779b367392d34aeaaf316b220db5593a8528d75bd308a83449539b611961bf20, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:bf:d1:8f:77:ac:e6:a3:4c:70:f4:8c:41:
1c:af:f5:5a:01:0b:83:23:f5:ec:5c:8c:d0:8c:9b:
96:e1:62:cf:f8:e0:65:69:31:79:36:a6:1c:39:aa:
2e:62:54:59:29:91:86:54:14:d0:10:c0:fc:9a:7f:
67:c8:ee:f0:08:b2:27:c7:5f:d5:51:5e:2a:63:ce:
29:ec:24:2a:df:85:27:48:e1:30:fe:59:b4:99:2e:
87:e5:61:f2:8d:a4:81:97:3c:07:50:e2:83:af:5c:
9a:18:7c:25:a4:36:34:9b:68:d2:1c:c7:ac:87:56:
c2:64:36:e9:b3:b6:2e:15:69:fa:34:12:57:20:82:
73:a1:4a:08:4e:d6:a6:1f:2c:88:37:17:5e:7d:53:
73:cc:08:48:3e:05:3f:cb:a4:62:6e:59:74:9e:62:
0f:3b:fe:da:0f:e4:58:4a:c2:55:b7:75:c7:41:ce:
31:7e:e5:8d:8e:36:06:9f:59:6c:95:cd:0b:ce:dd:
d9:b4:f9:d7:40:6c:4b:cd:b1:63:93:3d:d2:6e:79:
76:d1:0d:cc:c2:a5:8e:ac:97:6f:bb:b3:59:17:03:
50:99:54:7e:6f:82:22:99:60:25:71:f8:a7:9d:19:
cc:a7:66:81:3a:1d:e5:da:90:75:54:a1:32:09:7b:
1a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:32:35:46:25:F8:DA:D5:CE:8C:07:3D:21:29:C0:B9:A0:91:75:3D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5b8eca1c-0001-4580-9357-36838b685542.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.239.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b9:47:0a:45:74:a7:8c:7a:15:a5:4f:70:d8:0e:85:00:5f:e5:
66:ee:b5:d2:7d:6f:8a:9e:7d:d2:27:f4:73:77:9f:c2:2d:93:
ef:36:43:8d:b2:a5:af:fc:0c:cf:5f:e6:d6:14:e8:d7:d1:4f:
b4:be:4a:94:bf:39:ee:35:95:0e:b1:01:1b:d0:dc:84:93:b8:
df:7c:21:43:32:0e:41:8c:31:77:5c:c1:cf:26:20:89:8b:36:
3e:3a:c4:c9:2c:8c:d8:b4:53:43:e4:d4:1b:08:ce:33:1e:a2:
6b:46:10:6f:57:d7:4e:e7:09:11:59:ed:88:1f:1b:7e:a5:33:
1a:10:e9:52:ad:97:56:d3:5a:1e:20:95:99:7b:53:a7:01:28:
ec:4b:8e:f4:84:87:63:87:96:d6:95:25:f2:47:3e:f7:11:fc:
b0:14:c2:10:31:2f:21:05:47:d2:d3:4b:07:11:d6:ad:a1:7c:
de:84:53:72:6c:b7:e5:c8:5a:2a:c0:7d:ff:09:c8:31:a7:32:
47:43:70:10:d6:ec:2f:07:94:44:6b:74:33:e8:0f:47:a5:c8:
2c:44:6a:bb:84:e7:81:00:70:fd:51:c4:0c:40:9c:15:50:00:
83:c7:cc:48:ea:71:65:30:0b:38:6c:71:8e:44:c2:a2:60:ac:
5d:4e:1f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:31:56 2026 by rpki-client