Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa
File: 7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa (raw, json)
Hash identifier: iWrhqBz7kxJhlfdYkmZBzJ1It4N8KXSxf/WhJvKcnZw=
Subject key identifier: 41:52:42:E7:C8:58:12:47:70:AB:C5:99:73:B9:6E:57:A3:3A:A6:CB
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 41AB63F2EFB9171904DB6AE55DF93194649479EE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa
Signing time: Mon 26 Oct 2026 05:50:41 +0000
ROA not before: Mon 26 Oct 2026 05:50:41 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 57.65.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ab:63:f2:ef:b9:17:19:04:db:6a:e5:5d:f9:31:94:64:94:79:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:41 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=63b9c371be57c99b8636168fb9dd01d645e58e0158814c04b40716051acfb697, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:94:24:fe:f4:dc:d2:da:1b:24:8e:e6:67:6d:
d3:39:9b:bd:21:d6:b6:f3:53:ab:9e:6f:6e:5e:1d:
74:85:7e:e5:85:e8:47:1e:92:0c:55:ff:97:f5:2b:
83:41:57:94:9c:be:72:80:df:6c:2d:4c:20:5f:4e:
f6:db:fa:3b:67:91:08:7b:46:ec:bd:23:5f:1a:e3:
8f:6e:43:c1:b8:89:0d:da:c9:87:08:f3:24:ed:e7:
49:a5:7a:d3:f1:61:ed:9e:4f:dc:ae:73:c7:8f:bc:
f4:41:32:46:f0:9b:3e:0e:8b:be:7c:3f:03:1d:ad:
46:df:f0:cc:00:5b:44:22:e0:16:26:2f:a5:42:37:
39:1a:e1:67:51:0b:b1:eb:17:8f:d4:d4:14:72:33:
4d:51:ff:54:de:ae:bf:0d:af:81:7f:fb:00:49:ca:
b2:fe:de:9c:c5:56:d4:5a:0f:65:d8:bd:2e:41:6d:
e6:25:f3:2b:b8:44:c0:37:df:7d:e7:1f:53:07:8d:
cd:9e:45:14:9c:7b:45:73:6c:bf:97:8a:f8:0a:66:
b4:75:05:a9:21:86:27:38:e7:0c:16:ad:b2:a9:d9:
17:07:8f:a6:79:f1:53:9a:e4:be:3c:2e:ba:ff:b7:
bc:99:cb:97:58:51:18:66:75:4b:a4:45:1e:fc:1d:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:52:42:E7:C8:58:12:47:70:AB:C5:99:73:B9:6E:57:A3:3A:A6:CB
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.65.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:77:b2:9b:fe:12:b1:89:62:4a:6d:74:80:8e:03:ff:28:da:
c1:89:df:ce:90:58:42:1d:ee:e7:fe:88:82:cb:98:11:fb:16:
75:00:6d:a2:76:32:73:a4:f6:46:3f:d8:e2:fa:67:b3:5a:97:
88:30:f6:6a:cc:f5:e7:56:d9:88:4e:07:23:e9:9a:3a:d2:5b:
02:1c:ad:6c:00:f4:bc:36:3f:eb:93:18:cf:c7:96:32:f5:2e:
b7:d2:32:91:7a:e8:85:0a:47:39:90:8b:95:d5:73:56:cd:34:
b4:9d:54:85:90:f7:02:7b:e3:fe:a0:0a:80:01:3e:09:63:06:
3f:13:d5:d5:71:e6:47:f2:b2:29:43:f3:f9:a9:2d:5d:ab:e7:
49:d9:7a:74:de:3c:a2:c3:f5:57:0e:bf:28:68:5d:ca:94:9a:
57:39:ac:36:a6:00:88:33:76:19:67:b0:e9:64:e4:cc:32:e8:
d5:f8:96:b8:17:ae:f9:1c:f1:14:99:f2:1a:c7:6e:c1:e1:bc:
4b:cd:3f:f5:8d:70:f8:fb:7d:18:34:31:91:8f:22:58:c8:df:
ca:b6:3b:45:f3:74:e4:9c:d8:19:b4:bd:81:95:93:aa:ab:40:
eb:c1:28:a2:88:76:7b:74:1b:77:72:f5:69:ad:32:39:64:80:
47:47:c3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:01:34 2026 by rpki-client