Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8462af63-807c-4934-9e2f-0d749c431bcd.roa
File: 8462af63-807c-4934-9e2f-0d749c431bcd.roa (raw, json)
Hash identifier: 7LhIjtZD2qOAemg6zcZAK2KoscwO7BR8WO7AvUt8XIE=
Subject key identifier: 3F:52:7D:10:E5:62:16:5D:97:87:10:DB:92:18:FE:61:0B:78:26:17
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 70F087C9812AEDA91C1997DBA74F3E4F14CBCA98
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8462af63-807c-4934-9e2f-0d749c431bcd.roa
Signing time: Mon 26 Oct 2026 05:50:45 +0000
ROA not before: Mon 26 Oct 2026 05:50:45 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 193.186.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:f0:87:c9:81:2a:ed:a9:1c:19:97:db:a7:4f:3e:4f:14:cb:ca:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:45 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=f9d8a530a48444221aa0ca3b08da14b982e5d8bff2b58e0ebd52bcc1c0ca4a0c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:56:58:b4:3c:f6:37:1f:08:7b:c7:ee:84:
41:f9:7d:2b:e1:44:55:17:4a:8c:ca:8e:71:aa:f9:
e6:4a:53:7d:ac:1e:ad:12:7d:55:6c:9a:79:87:b8:
5b:b2:0e:eb:f3:b0:69:fc:2a:26:c0:ad:a2:d8:34:
62:a3:27:19:9d:a6:8c:17:7e:3b:80:65:49:c0:4d:
c0:b2:cb:37:f2:ab:c7:1d:20:2b:c5:18:dd:d7:f9:
c3:7c:c6:06:41:25:f2:f1:7e:36:43:8c:e8:97:3f:
84:5e:e1:a9:5c:21:78:2a:15:f9:ae:a6:b7:a8:3b:
fa:1b:5a:f1:d5:c8:5d:66:6e:e5:e7:51:7b:72:b0:
3c:ac:e3:2c:48:6b:5f:49:8e:61:24:78:b0:a7:cc:
01:a3:29:2d:9c:cb:56:b3:c9:c7:05:e5:56:84:da:
76:75:b7:b4:8f:9b:f7:61:b9:ca:af:4b:16:57:b9:
fa:ac:ce:91:df:76:68:13:2c:81:54:02:c2:a7:89:
9d:9a:74:7d:35:d6:72:93:ce:3d:7c:6a:71:9f:2c:
3b:75:01:5a:8f:62:7e:50:19:31:d3:0b:85:4c:65:
91:ae:2e:d5:74:36:73:77:6e:69:52:85:73:2b:c6:
b4:6c:0f:69:1a:72:2f:83:2f:aa:6c:01:77:db:25:
52:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:52:7D:10:E5:62:16:5D:97:87:10:DB:92:18:FE:61:0B:78:26:17
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8462af63-807c-4934-9e2f-0d749c431bcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:1e:1b:3e:a0:5b:03:71:a6:9b:25:e4:d0:af:48:ac:19:fd:
be:14:c7:95:38:bf:8f:ed:bd:68:12:da:91:9e:a5:6d:c7:d5:
0a:d2:e6:0a:10:29:b2:28:c8:2f:5c:ff:de:fd:21:df:8a:75:
54:b4:a4:ef:0b:ca:3e:d2:ab:45:62:f3:44:e8:2b:41:9d:01:
b9:fc:74:01:39:62:fc:fc:bd:fd:49:53:fa:2a:2a:e6:c0:a7:
78:9d:4b:ef:48:df:30:7b:8b:55:7f:63:fa:2f:6c:51:b9:d4:
07:68:79:21:af:fe:f8:e6:63:71:fb:57:80:55:02:30:ee:97:
19:90:4c:93:b8:9f:7f:5d:cd:af:e4:0f:1e:07:dc:d3:74:88:
c7:16:27:3c:9a:f2:0b:ad:4b:ab:05:9c:df:f5:fd:06:a0:b3:
9c:1c:66:c6:ab:40:70:5b:2d:4e:3b:7f:78:20:69:c0:49:5b:
ca:a6:82:a8:f4:e0:fa:8e:02:e4:d3:34:fa:79:9b:52:f2:50:
9b:9c:6b:b7:a1:57:cc:9c:ef:dd:00:7e:d7:b2:43:5c:de:1e:
65:bc:df:ec:68:47:6f:ca:1d:3f:bf:b5:e7:f9:d9:38:1d:27:
34:15:16:c9:5a:c3:07:47:4a:88:30:12:03:4a:c1:51:bd:06:
26:2d:dd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:42:11 2026 by rpki-client