Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7dc90e26-05aa-40c8-bbd0-967e095d6485.roa
File: 7dc90e26-05aa-40c8-bbd0-967e095d6485.roa (raw, json)
Hash identifier: 3RrYwW5ZPWwNZI2q7QQ92kWtLUbDc72kY42Sog649vE=
Subject key identifier: E1:A9:DD:9D:2D:A4:C1:AC:68:E4:18:A0:11:FB:6E:C3:DE:CC:DC:E5
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4ADA304D1142E310E09D7C93CBA50392756C531E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7dc90e26-05aa-40c8-bbd0-967e095d6485.roa
Signing time: Mon 26 Oct 2026 05:50:07 +0000
ROA not before: Mon 26 Oct 2026 05:50:07 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 143.65.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:da:30:4d:11:42:e3:10:e0:9d:7c:93:cb:a5:03:92:75:6c:53:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:07 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=0c4319191007cea074bbb1c67d8962253fbf80660ee81307024547252a2f1fc3, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:df:fa:93:4e:32:d7:01:fa:af:ce:57:1b:
1d:17:a3:ad:19:cc:09:44:68:cf:04:90:33:62:50:
3c:02:89:04:44:16:56:45:54:ce:43:0d:68:e2:5f:
92:55:62:3c:53:08:2c:5e:b4:9b:f1:1d:fc:1d:5f:
d6:f9:1e:44:bc:bb:9e:27:a6:d0:42:b2:e4:db:e8:
a6:c9:5b:62:55:0f:82:68:8b:49:60:3f:85:3b:3c:
fc:d9:64:b2:42:f2:0e:d1:9a:d3:f8:69:f8:95:ac:
53:d4:36:09:81:cd:88:96:4b:37:ae:44:5c:95:c9:
b9:54:df:ca:59:bb:0b:34:55:e8:26:7d:49:89:73:
40:6a:25:07:a8:76:3f:1c:d2:86:cd:67:cb:8e:4e:
04:3f:30:a3:a6:2f:a4:a1:4f:7a:d6:ec:18:2c:d8:
2a:33:11:f5:ff:50:da:95:a4:6b:0f:44:24:ae:30:
8c:0d:d6:17:f1:33:e6:e7:c6:f0:d6:8a:ea:fe:24:
bc:96:79:65:a3:2a:f9:78:45:c0:87:22:29:25:f0:
f0:0d:6f:b9:fb:ce:18:ee:2e:02:da:a7:36:83:4f:
c2:d4:90:41:23:d5:bb:fa:27:c4:f5:53:3a:cb:80:
13:89:fe:08:0b:b5:ae:6c:94:38:4e:c6:0b:0c:19:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A9:DD:9D:2D:A4:C1:AC:68:E4:18:A0:11:FB:6E:C3:DE:CC:DC:E5
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7dc90e26-05aa-40c8-bbd0-967e095d6485.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.65.0.0/17
Signature Algorithm: sha256WithRSAEncryption
d3:d6:eb:0a:db:0c:de:fe:ee:a8:45:7e:5f:e2:1c:61:f7:ab:
4f:8e:a7:b3:a8:84:a9:ed:df:a7:99:37:ed:04:db:f0:46:76:
4e:f0:ed:1f:f4:ab:4a:63:7e:f2:4d:67:83:5a:21:61:aa:29:
3e:30:37:c8:3f:6b:21:01:9e:64:6b:28:1b:d7:74:b2:ca:44:
06:02:4f:1b:00:a1:6b:54:e1:f2:34:15:55:27:d7:9c:54:b4:
bd:3e:8e:b1:41:f3:95:94:e8:6f:f3:af:a6:c2:79:5f:c0:92:
3f:26:cd:fe:7e:5f:b7:6b:b8:4c:25:e6:40:15:93:ea:91:4a:
68:64:29:5c:c5:62:cd:a5:55:d4:5f:b9:1a:cf:4d:73:56:70:
87:26:d3:e4:05:19:c1:f3:01:f5:ba:8a:12:1b:5f:c4:6f:3a:
be:7f:92:79:e3:fc:49:88:62:7d:92:f2:7e:b0:1b:94:5b:f3:
41:bd:a4:17:40:06:33:74:57:d2:26:91:e8:6d:0e:9d:8b:93:
29:8b:ec:06:b7:50:ed:f2:35:21:03:b2:04:42:cb:50:44:7a:
3c:2e:77:d6:d5:05:0e:64:bf:e3:e2:7e:17:55:50:b7:34:be:
cd:ab:19:1d:19:2b:aa:15:6b:59:f8:1d:c0:76:e7:b7:c5:c1:
7a:6c:2e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:48:07 2026 by rpki-client