Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7e4eba0d-9f48-42a3-b449-56ce7143e040.roa
File: 7e4eba0d-9f48-42a3-b449-56ce7143e040.roa (raw, json)
Hash identifier: azyNizWcu9b7ZDkgKONpfthSdihIvJZRWRM6LvhFX5k=
Subject key identifier: 1B:77:CE:FC:62:15:35:97:45:CD:DD:9E:86:AA:51:49:D5:EC:1D:F9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 579BCD442782BCFB3B6599A8F03178963341C3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7e4eba0d-9f48-42a3-b449-56ce7143e040.roa
Signing time: Thu 23 Jul 2026 15:30:39 +0000
ROA not before: Thu 23 Jul 2026 15:30:39 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 185.72.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:9b:cd:44:27:82:bc:fb:3b:65:99:a8:f0:31:78:96:33:41:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:39 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=4cde4fad6224cf2515adb5aa34d55d932ec6527fa0467460b8f7848a3e9a6d0b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:01:cb:93:69:e8:da:e6:c5:18:a6:52:cf:
6b:cb:bd:d9:59:09:6d:df:dd:7b:17:ee:5f:96:e3:
13:b2:2e:0b:cd:95:1c:22:c7:ea:38:12:d4:1e:9b:
49:40:04:57:86:d1:d2:e0:98:c5:66:50:97:12:e2:
a5:c0:f1:bd:01:4e:8b:7a:12:6b:35:09:39:fc:9d:
22:09:7b:77:05:e0:d7:3e:5c:88:4b:2b:a4:cb:e4:
cb:c0:90:c8:dc:77:35:bc:aa:2a:91:22:1c:b7:b6:
da:f5:cd:ff:bf:78:03:4e:b2:ad:b0:a8:d9:3d:d3:
9e:e4:a3:a1:3e:d7:8d:ae:e4:a7:7c:e9:7a:f1:d8:
75:dc:86:98:84:08:1d:0d:20:39:06:a8:c1:9c:e5:
39:fd:f4:c3:87:13:d7:e2:ec:c5:63:37:56:14:1a:
cf:35:34:85:ec:3f:5d:c8:ed:d8:9e:d7:bd:82:4b:
23:d4:af:b2:14:4d:2d:54:ce:42:ae:1a:5d:a2:be:
2a:d1:fd:d0:eb:b4:cd:41:24:5f:21:a5:f4:9a:b0:
dc:35:4d:35:8f:2b:4b:89:20:d7:bb:9e:81:73:46:
f9:c3:e0:0f:3d:81:08:f0:76:34:b4:76:7f:11:27:
40:32:02:b7:aa:6f:60:8c:2b:30:80:77:fb:66:97:
d4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:77:CE:FC:62:15:35:97:45:CD:DD:9E:86:AA:51:49:D5:EC:1D:F9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7e4eba0d-9f48-42a3-b449-56ce7143e040.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.192.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:b1:b5:8e:00:40:06:22:90:08:3f:07:7c:6c:6f:03:5a:47:
7c:0b:83:77:04:e7:a0:df:87:5f:7f:98:f4:c0:8f:45:90:73:
f1:43:78:0f:06:42:b6:22:1f:e2:98:31:55:41:dd:0c:4f:aa:
3b:d9:37:4d:e5:70:ea:43:1b:19:ec:19:43:cc:a2:ce:7e:97:
d3:8b:7a:fe:58:a2:06:81:22:e4:49:f8:03:ec:22:23:45:25:
55:4e:8c:55:50:76:95:20:87:2b:4b:24:0b:33:b3:96:fe:d3:
df:a5:07:54:ad:03:e0:34:3c:f6:51:54:57:85:42:70:84:57:
61:e7:82:4f:12:a2:a3:69:4c:a0:72:bc:62:97:03:ce:69:79:
4d:2a:3f:ae:57:cc:20:e5:d2:b1:73:8d:12:3c:96:dc:35:e1:
52:73:08:a9:d9:73:41:7f:5d:15:7f:0e:fa:31:f3:10:3b:7f:
3e:af:3f:d6:6e:54:27:be:27:83:ef:a4:51:3c:f7:a0:b5:77:
5d:42:db:90:04:9c:f3:c1:75:47:f0:27:3e:b4:c0:de:2b:a8:
d4:df:29:29:e3:6a:5c:7b:d1:79:45:69:16:b8:b8:db:f5:be:
d0:08:56:61:0f:e6:22:a6:d6:59:5e:89:47:c0:ed:e4:9e:a1:
81:63:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:04 2026 by rpki-client