Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6df8accc-a525-49ec-ad13-7401de62f775.roa
File: 6df8accc-a525-49ec-ad13-7401de62f775.roa (raw, json)
Hash identifier: oO/H0V6OIlv72ZlaCEc0UVNvuN8FTeJUPuHS5u9mg5E=
Subject key identifier: F5:EA:86:04:84:0C:02:81:AE:2F:65:F6:FC:64:BE:C5:5F:6F:7B:13
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 537F06141A4A818E335D4B3FD9FE670329C0A7A2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6df8accc-a525-49ec-ad13-7401de62f775.roa
Signing time: Mon 26 Oct 2026 05:40:35 +0000
ROA not before: Mon 26 Oct 2026 05:40:35 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 159.109.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:7f:06:14:1a:4a:81:8e:33:5d:4b:3f:d9:fe:67:03:29:c0:a7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:35 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=7b7a7f34e3409cda735d534e0347b06892f125b8ad30c8d1263afb1c2c80222f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:a2:f1:5d:11:5f:79:38:4d:84:bc:16:24:
93:a0:4a:c8:6f:98:da:78:8d:18:22:02:96:43:bc:
c2:e7:be:3d:23:54:00:d8:1e:92:8e:90:8b:3b:37:
41:15:5a:81:a1:16:7d:dc:e7:3b:d9:c4:85:f7:7d:
27:7c:3b:a6:10:99:0b:5e:9b:71:02:a0:3a:77:05:
50:04:55:47:40:1a:80:85:25:1d:5f:37:85:c7:61:
79:ba:20:69:73:70:57:89:9a:b5:f0:ad:0b:3b:8c:
65:f0:b2:0b:b0:c8:b3:2c:91:47:8d:d1:70:d1:16:
f7:cf:5a:24:4d:b0:d0:9f:fc:8e:4e:aa:af:b3:48:
7c:9b:a3:a1:43:81:5f:0b:3d:ef:21:8f:b0:58:ce:
e6:f4:6b:4f:3f:d7:df:9c:6f:0d:22:84:db:50:38:
bd:36:06:66:b2:cf:a9:b8:00:2c:2d:51:ba:53:60:
94:8a:3a:8b:e4:a3:00:45:4d:8e:d6:58:a9:88:8a:
71:cf:bb:91:86:1c:30:af:cd:fb:d9:9b:2e:7f:2b:
ca:72:3e:cf:81:3f:e8:ee:78:a3:70:c0:88:81:4a:
c3:9b:12:8c:54:18:c8:7f:5e:79:cf:a6:cb:f7:a2:
7d:9d:3c:4f:1f:a4:31:62:9e:23:5d:84:8f:7d:20:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EA:86:04:84:0C:02:81:AE:2F:65:F6:FC:64:BE:C5:5F:6F:7B:13
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/6df8accc-a525-49ec-ad13-7401de62f775.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:1c:38:b8:37:17:64:74:17:34:86:28:89:ef:25:6e:13:f3:
a3:47:f8:ce:d8:b8:78:0c:89:4e:bd:bc:e2:2c:43:b3:c9:03:
13:ae:fc:d6:dc:01:a7:e7:ab:c7:9a:7d:33:ba:3d:ff:f3:da:
47:45:56:5f:24:30:a0:d8:2d:8a:97:02:cc:71:f9:e9:ce:4c:
69:b6:46:a5:ab:0b:bc:56:56:b0:1e:be:ba:33:fc:00:7c:bb:
78:ed:43:6b:e4:be:27:d9:29:d2:2e:07:c3:cf:eb:59:87:1c:
93:2c:f2:35:c5:65:88:52:57:2b:f7:f6:6a:cf:84:74:f0:d9:
46:88:70:bd:20:89:30:bb:98:ae:d4:3e:dc:c8:b3:43:29:4c:
5f:5d:f7:36:11:66:67:b0:53:43:ac:a4:ca:ef:3d:33:1d:fd:
d3:27:9b:0f:3f:ae:c2:07:57:b0:df:08:91:43:13:87:d5:1d:
cd:7f:d0:4d:52:9a:e2:28:be:e8:fc:d9:1b:83:49:49:f4:19:
b3:cd:7b:fc:50:6a:4a:0d:b8:ba:a4:71:d0:d3:32:c2:64:1c:
c7:bc:a6:78:a4:f1:47:c3:e9:2e:b9:a4:78:ae:8e:6e:ea:da:
87:16:c3:89:19:1d:72:ff:3b:16:f3:7f:48:0c:3b:2e:d7:e1:
b8:4f:7a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 17:23:06 2026 by rpki-client