Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f244d46-87ad-4224-b593-bd81b505345a.roa
File: 7f244d46-87ad-4224-b593-bd81b505345a.roa (raw, json)
Hash identifier: m+XoPflhHA2/WdtfWad5gf1LK3VrtRAhc6MHAh8Qn5Q=
Subject key identifier: F5:7C:6F:38:25:2C:EE:60:C5:89:CC:4C:DD:BD:EF:DB:D6:6B:4A:FB
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6B89FC611196F6AB8BB58A37C7B18E6DEC5F8992
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f244d46-87ad-4224-b593-bd81b505345a.roa
Signing time: Thu 16 Jul 2026 00:40:09 +0000
ROA not before: Thu 16 Jul 2026 00:40:09 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:89:fc:61:11:96:f6:ab:8b:b5:8a:37:c7:b1:8e:6d:ec:5f:89:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:09 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=9bb5e88d4187664d5a7fdde5fe49a46101e91781a32c5d6368fe60b4a0c73ad0, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:b6:da:5e:0c:f9:75:c2:7e:8f:31:1d:c8:
d1:23:e9:06:00:49:b0:9d:38:b5:b0:69:9e:36:8e:
24:8a:cc:f9:b1:5a:7e:24:be:73:fb:c8:98:5c:87:
90:b7:a6:5b:19:70:fe:9a:da:70:8d:40:a6:e7:5d:
f0:d1:66:4d:64:26:06:ea:fe:93:10:8e:d5:cb:be:
94:f6:5e:f7:84:14:35:73:35:2b:fd:42:ff:67:1f:
b2:78:0e:4b:78:38:3e:29:cc:c4:b8:68:34:a8:49:
90:cc:e8:07:1d:02:30:0f:76:d4:bc:c6:9c:6e:a7:
0b:01:2d:cd:42:6b:1b:33:60:a3:18:cf:66:3a:64:
9c:c7:5b:3b:f5:28:39:e2:dd:a4:c1:05:f0:09:b7:
63:20:04:81:5a:8a:5e:b3:14:83:5f:4d:0c:f0:d0:
0d:0b:0b:1c:a7:84:9b:14:fa:2e:c1:d8:25:55:40:
ee:15:4d:90:86:19:6d:ce:b0:a8:d2:94:68:a6:9b:
7d:57:36:18:70:8c:33:b4:b0:1f:49:97:c0:77:89:
76:80:ee:3a:3b:50:b5:69:d7:90:45:e6:42:aa:80:
e5:a5:e6:73:dd:76:20:f4:dc:3a:12:4b:9b:3f:f6:
53:9b:6b:b8:d0:15:7a:99:d7:16:76:0f:81:bf:09:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7C:6F:38:25:2C:EE:60:C5:89:CC:4C:DD:BD:EF:DB:D6:6B:4A:FB
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f244d46-87ad-4224-b593-bd81b505345a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.64.0/18
Signature Algorithm: sha256WithRSAEncryption
84:95:08:fd:9e:ec:fa:2e:4c:a8:e5:fe:07:10:86:66:8c:c7:
41:cd:62:e6:9e:d5:9c:77:ca:fd:4c:96:7d:bf:e2:49:eb:0d:
1b:5a:f0:55:3a:68:fa:8d:d1:73:d3:67:ed:f3:97:98:fc:07:
80:ad:3c:1a:8b:b3:8f:0f:54:40:20:4e:52:dd:bc:13:d8:6b:
52:c7:38:7c:74:11:f8:b6:0f:54:19:62:09:ed:fd:8a:ee:3d:
d2:d2:86:56:04:58:a1:78:79:21:eb:9a:f2:12:73:e0:d7:61:
72:0e:25:ca:65:a7:95:9c:78:0e:91:f5:14:dd:00:15:b6:34:
0b:c1:c5:95:80:b6:d4:65:09:02:5c:d8:53:7d:d7:77:28:c6:
db:17:f8:32:e1:1e:78:24:6c:98:43:ac:49:75:26:ce:32:6c:
01:11:3a:8a:81:c4:8b:2f:5c:7d:36:2b:b0:3c:ab:e6:3b:5e:
05:fe:56:ee:c4:9d:e4:2e:bc:aa:4f:38:9d:6a:58:7f:53:77:
92:7b:8f:28:78:b6:6a:a8:54:6b:95:62:77:b2:af:12:17:d4:
33:b1:db:48:6e:51:39:c2:d4:d5:33:4d:b6:cb:4c:de:f4:e8:
e1:1d:f9:f7:97:56:6c:f6:d8:dd:2d:94:b6:38:16:78:e7:27:
a6:7b:1b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:41:00 2026 by rpki-client