Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7a9d4970-8e9c-4d11-a1c6-772a571334fd.roa
File: 7a9d4970-8e9c-4d11-a1c6-772a571334fd.roa (raw, json)
Hash identifier: u6zPpmMM8uygf9llrfuyx4xfjumWYpja5HmWLu+7trg=
Subject key identifier: E2:56:4C:FB:CB:51:0C:DE:DA:30:BF:FD:91:EB:FD:31:2D:89:A6:BD
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 35EEC52A138C3A5E865103C614DEAE1204AB7158
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7a9d4970-8e9c-4d11-a1c6-772a571334fd.roa
Signing time: Thu 23 Jul 2026 15:30:12 +0000
ROA not before: Thu 23 Jul 2026 15:30:12 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 185.143.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ee:c5:2a:13:8c:3a:5e:86:51:03:c6:14:de:ae:12:04:ab:71:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:12 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=11f7fe55e68ef7cc84851b5b871c11dec86b9bd351a7af1af333cfa7b3d16337, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:3c:59:2c:d8:18:71:eb:af:5f:0a:fa:53:
1a:e9:98:d9:0f:47:7b:c2:2e:65:31:22:cd:a2:2f:
21:3d:b5:88:f5:51:45:c9:ea:3c:2b:ca:e2:1e:40:
ea:b5:5b:21:74:e9:dc:fb:25:aa:a2:4a:fc:a0:d3:
20:8e:c4:ec:c2:c8:25:d7:7d:c0:1b:a3:34:61:9c:
96:98:b1:06:59:89:01:f1:b2:b0:aa:29:11:3f:24:
e6:fe:14:f5:1d:d9:96:7b:b1:0f:73:f5:2a:66:90:
b8:0c:d1:97:bc:4d:da:6d:88:8e:98:50:5f:f6:e4:
c6:40:a7:b6:6b:48:24:69:5e:95:6d:c5:e1:34:90:
5e:ae:6d:d7:2a:0f:48:3f:c4:e9:18:ef:b4:9b:37:
4d:72:51:cb:92:34:6b:11:c5:c3:9c:94:3d:35:f0:
f5:b7:8f:67:13:6b:4e:20:dd:74:91:5e:e0:fd:a0:
f1:c8:34:a6:ac:01:56:9c:bf:d3:da:c6:e6:22:0a:
e7:67:8f:28:61:f9:ca:47:23:e3:fb:42:8d:e3:1f:
4a:e7:f9:23:f8:a5:09:d0:e2:b7:17:2c:d3:53:2b:
c6:ab:df:1c:5a:68:15:87:5f:f8:44:e2:2e:c2:ec:
c0:ec:b0:70:46:ed:3e:bb:ea:79:f0:59:91:a0:1e:
25:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:56:4C:FB:CB:51:0C:DE:DA:30:BF:FD:91:EB:FD:31:2D:89:A6:BD
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7a9d4970-8e9c-4d11-a1c6-772a571334fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.16.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:5f:bc:3f:e6:4b:2f:ad:9a:18:ff:91:3c:91:5a:45:55:5f:
a6:62:c6:a2:7a:af:09:c1:21:96:b4:31:6b:8e:bb:88:cf:cb:
7f:81:3d:fd:8b:d4:48:f3:24:76:25:3b:a8:16:90:f5:a3:81:
71:b5:9b:6f:7a:af:e6:09:91:e8:de:10:ae:53:6b:fb:4e:e4:
27:06:a4:72:7d:88:d8:f8:e1:8b:a0:f6:55:15:f7:b7:49:24:
48:73:c1:a4:6b:5a:55:17:0d:d3:1e:31:f2:d3:98:56:cc:fc:
d2:d7:dd:90:15:14:fe:07:e9:e4:1e:79:20:32:fa:72:d0:49:
5b:3a:25:e6:7f:fe:0f:ae:71:3d:47:70:3a:52:ab:31:d0:2c:
f2:45:ff:48:47:e0:e8:0a:b2:89:e4:17:e9:96:b7:79:62:91:
26:74:ac:0c:5f:13:a4:db:63:af:eb:b7:9a:21:f5:81:40:58:
2c:66:1c:4c:1a:8c:13:99:88:47:87:3c:1e:0d:7e:29:df:9f:
d3:6b:f5:f9:00:fe:56:a2:ec:6a:7f:c7:ca:57:78:48:5a:64:
f7:82:1f:e5:35:2a:fa:31:77:7a:3c:17:13:d6:04:38:59:fd:
90:f8:08:aa:76:6c:8c:97:e8:81:51:38:94:a5:b4:60:98:4e:
37:86:d4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:41:08 2026 by rpki-client