Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5f332a53-b8fa-4d61-9e5a-9ca4e586588d.roa
File: 5f332a53-b8fa-4d61-9e5a-9ca4e586588d.roa (raw, json)
Hash identifier: bCLlvN7HOS4x53ntc8XM1Z2KBilpPBmjfDCImQZ6HC8=
Subject key identifier: 1A:7A:EE:74:26:05:92:E7:45:57:7A:F3:1A:B6:AC:48:B9:6A:44:54
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 16D5FDF25D1B908A0D71AD506440D52208FE4FA9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5f332a53-b8fa-4d61-9e5a-9ca4e586588d.roa
Signing time: Thu 23 Jul 2026 15:30:18 +0000
ROA not before: Thu 23 Jul 2026 15:30:18 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 83.129.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d5:fd:f2:5d:1b:90:8a:0d:71:ad:50:64:40:d5:22:08:fe:4f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:18 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=a7078fc13321ade42a638d3cc0ebfb2a929c5a75c4d78e504f385a477b107389, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:b0:d7:60:85:10:aa:7d:0b:8d:b8:ed:cf:
d6:a9:3b:e3:89:af:f3:e5:7f:e9:c0:cc:45:8f:7f:
db:1f:af:bc:bc:8e:54:eb:38:1b:f7:8f:db:fc:6b:
ee:48:e5:81:42:4c:53:74:35:da:5e:31:18:3f:65:
6c:e5:13:0f:7c:f7:35:31:59:f2:83:bc:69:12:16:
c8:ef:0c:24:a9:69:d1:60:a5:c8:56:e2:6e:25:cf:
49:aa:26:a6:08:ed:db:33:ea:26:e6:60:37:8c:57:
f7:10:87:8e:fd:5e:21:1f:fc:ab:3a:b5:23:3a:5f:
4b:f3:32:a0:cc:9b:35:0b:4a:15:17:2e:ce:21:50:
2a:03:f0:00:1c:4d:6c:81:17:06:5b:c2:da:7c:7c:
2e:0a:a2:78:86:2e:6e:ec:93:35:6f:b6:70:44:76:
72:ea:1f:6a:9b:66:12:4f:10:26:4d:d7:93:c9:0b:
ed:b5:3c:f7:5d:5e:13:f2:f8:f4:93:c1:30:ef:c5:
89:ac:e0:10:4d:fa:12:b8:08:78:01:04:81:cb:f1:
7a:a3:dc:fc:23:98:91:d5:e9:1f:ed:6d:ee:02:1a:
98:ad:47:14:b0:8d:a7:72:38:c3:c7:a2:32:cb:ac:
88:61:6c:ed:e1:7a:fd:a1:06:43:61:3f:82:83:80:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:EE:74:26:05:92:E7:45:57:7A:F3:1A:B6:AC:48:B9:6A:44:54
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5f332a53-b8fa-4d61-9e5a-9ca4e586588d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b7:88:f5:02:fe:b3:74:92:3e:ff:97:08:42:0e:cb:cb:dc:dc:
e2:fb:d8:9c:00:e4:91:0a:4d:61:1d:ae:d1:c8:b5:ff:74:0c:
5c:d9:72:74:88:01:7a:99:6e:b9:fc:86:d2:da:3f:bb:16:74:
b7:e4:f2:e2:08:2c:48:db:fc:0b:a0:0a:a4:0d:77:9f:bf:40:
9a:16:9a:18:b8:95:75:24:e5:72:48:80:91:11:96:7a:02:43:
49:d8:02:70:8c:b2:4c:ff:64:ba:d6:5b:bf:d3:30:2b:37:28:
ce:39:91:62:25:41:a2:96:82:71:e9:69:38:2c:99:43:b7:92:
44:17:14:4a:a1:dd:7e:16:90:d9:50:9e:ff:4a:e5:4d:6c:e1:
b3:65:c9:5c:33:90:2e:e9:cc:c3:ee:9d:a5:db:bf:3b:8d:94:
1c:59:db:bf:f4:50:b3:1e:21:dd:35:e0:64:75:f0:fc:f4:90:
ba:70:92:f1:4e:26:ff:f5:71:65:94:a7:9d:e2:2b:f4:4e:7f:
d7:98:f2:0f:ca:cb:ea:85:03:6e:d2:d4:ed:e8:aa:9f:ad:6e:
b4:74:0e:33:bd:2d:21:99:00:74:01:67:be:cb:d6:1e:c5:66:
83:c9:99:81:72:ca:96:27:2d:1c:bf:b2:f1:f4:3d:b5:48:83:
7c:25:a0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:19 2026 by rpki-client