Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/81bd2649-ad60-4c6a-bdf9-7b775e3d060e.roa
File: 81bd2649-ad60-4c6a-bdf9-7b775e3d060e.roa (raw, json)
Hash identifier: RcBfQN9JiWyqcyFrYLMDcxavvrSI5jK2ZTI3LtPbDiA=
Subject key identifier: 59:D0:93:C9:4C:BC:43:A7:D2:59:D8:A1:5E:AA:68:FC:7D:E1:9F:20
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 26772BDE6ED6F1DFD52206827A2D47E66732BF3B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/81bd2649-ad60-4c6a-bdf9-7b775e3d060e.roa
Signing time: Sun 11 Oct 2026 15:20:22 +0000
ROA not before: Sun 11 Oct 2026 15:20:22 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a01:578::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:77:2b:de:6e:d6:f1:df:d5:22:06:82:7a:2d:47:e6:67:32:bf:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 11 15:20:22 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=9a2d8b59644b7aee53aa4ec68954a694ffdd047dbe89b4ff8bba207729b4b7ad, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:dd:ee:5e:03:f9:ac:57:9d:e6:e9:5b:d6:
a6:4a:c0:0b:c8:a9:34:28:66:86:6e:c5:23:3f:9e:
67:cf:8f:61:b2:ba:5c:f0:12:3e:58:ff:c6:e7:7e:
75:a4:6c:87:6f:e1:8e:54:20:c4:8a:e0:7b:78:b5:
52:28:99:b4:ae:20:3b:34:fc:a5:42:3a:dc:15:a4:
f0:69:3a:2c:8c:cc:ec:10:32:00:a4:ff:d4:b6:9a:
d8:64:9f:12:9e:e6:ff:99:68:37:50:0d:27:3f:04:
0b:f5:45:75:4f:2e:92:a5:77:46:ff:d2:5a:75:4d:
91:f5:29:54:f9:df:e2:3e:c2:d2:1c:7b:30:b2:ee:
6b:ac:37:d0:00:b5:7a:53:39:bb:69:b0:7e:d4:25:
9c:18:3a:89:48:45:8f:80:b6:6b:e8:5d:08:0c:31:
71:32:09:b7:8b:df:6b:38:1c:7c:7e:54:11:a5:df:
6d:50:94:76:a3:87:ba:f3:40:c6:75:02:e4:08:9b:
cd:93:3e:f3:d3:06:aa:9b:23:d7:cb:1f:ac:ea:d5:
60:15:4f:fb:35:c2:4b:ed:ab:84:b0:8d:1c:76:47:
1c:83:cc:d3:b0:bc:b5:0e:92:d4:d8:1a:c5:d9:aa:
5a:a1:bd:0b:11:e0:84:3e:30:6c:23:c3:02:43:47:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D0:93:C9:4C:BC:43:A7:D2:59:D8:A1:5E:AA:68:FC:7D:E1:9F:20
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/81bd2649-ad60-4c6a-bdf9-7b775e3d060e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578::/32
Signature Algorithm: sha256WithRSAEncryption
17:e1:d2:53:a3:8a:f8:88:af:df:6a:35:db:74:20:f7:65:e3:
ff:7a:44:6c:5f:b8:5f:18:28:b2:f8:af:c5:f7:f5:ee:c7:b9:
3b:f3:8b:76:a8:f2:fe:b6:b3:e0:1e:69:5f:65:0e:9f:0d:61:
aa:25:f1:84:04:d7:05:71:27:db:d3:af:1d:6b:cc:55:41:46:
d4:6a:e7:0e:28:1a:6c:5d:f8:e6:67:8d:86:64:9c:11:11:13:
ea:38:45:08:08:a2:4f:8f:e9:13:5d:08:1a:af:89:32:2e:25:
58:1b:64:5b:45:b9:0a:98:a3:99:2d:14:14:8f:e3:2e:df:2d:
fb:e3:ce:65:71:b4:b8:b1:c7:6a:38:c5:d1:5d:2c:35:68:e9:
0d:d9:4b:ed:b3:56:ef:25:37:08:ed:d1:9d:8f:40:a5:47:e2:
89:00:af:e1:5f:ee:a3:1d:58:23:09:41:f7:34:69:e9:88:82:
cd:c8:68:67:ce:cc:97:fe:1d:f6:79:21:62:74:ba:26:9e:05:
34:e9:d9:60:d7:26:80:fd:ca:30:99:41:60:ae:58:22:aa:80:
aa:b3:2e:58:ec:43:ca:2c:4e:01:10:b7:ca:fd:ea:9d:bd:49:
a8:57:52:e2:f2:ad:f0:bd:6f:3f:7f:fc:4f:b8:cc:d1:5b:f5:
29:0e:40:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:34:27 2026 by rpki-client