Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/971d110a-753d-40c9-8ca6-28f0090c8f7e.roa
File: 971d110a-753d-40c9-8ca6-28f0090c8f7e.roa (raw, json)
Hash identifier: zN1bR0tCsgno1+8DVMNANJWblJAgPB5jJP5i9kjOjUA=
Subject key identifier: D8:DF:F1:53:62:40:B5:67:A2:2A:AC:A9:9B:33:ED:20:91:B0:E5:C2
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: D87375DCC9468DF393EE0ABAA382E8F0D08CE3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/971d110a-753d-40c9-8ca6-28f0090c8f7e.roa
Signing time: Mon 29 Jun 2026 00:00:07 +0000
ROA not before: Mon 29 Jun 2026 00:00:07 +0000
ROA not after: Sun 27 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 57.87.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d8:73:75:dc:c9:46:8d:f3:93:ee:0a:ba:a3:82:e8:f0:d0:8c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 29 00:00:07 2026 GMT
Not After : Sep 27 23:59:59 2026 GMT
Subject: serialNumber=116610324387d8b6ae227a317169092799c53be5fbed5170cea72bb22c8bb6b1, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:1a:c3:85:26:5a:0f:29:bd:62:a0:c8:bc:
0c:e7:59:f0:10:d1:51:8e:e8:0d:7c:f9:0a:64:4d:
7d:2a:bf:e2:5d:ff:e5:75:04:1d:18:f3:d0:5d:17:
74:10:38:ed:b2:3f:f9:8d:a4:a6:a7:30:e4:8b:e4:
54:20:e7:4d:ce:9f:0e:26:30:0b:a7:8b:58:bd:c2:
6f:43:94:9b:a7:c8:2c:63:f4:d0:00:e4:4d:0c:ba:
bb:ec:5e:6a:6d:8b:dc:a0:5e:96:9f:5f:ab:6c:3c:
76:68:3a:83:8f:7a:e5:a7:07:d7:f6:3c:bc:ee:74:
cf:95:80:81:6a:be:fa:9c:89:68:32:80:19:22:30:
87:91:f3:73:98:ae:99:3b:cd:b4:4d:15:b4:e5:fa:
70:bf:19:62:92:2a:dc:30:28:31:86:fc:9f:d1:66:
9d:8b:cc:4c:37:e1:f2:9f:cb:c4:33:52:2e:91:66:
44:9b:bc:46:25:76:89:ea:87:5e:06:2a:c9:c3:d8:
f1:d2:c9:7d:57:59:83:54:91:f3:21:31:e6:d8:ab:
ed:66:94:cf:e0:a1:9e:22:f9:c7:7d:9f:a4:c5:2d:
6c:79:07:89:d0:29:1d:b3:de:95:bd:ac:97:82:c0:
b6:90:f5:2b:35:63:5b:f4:cc:de:0a:d4:a6:33:71:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DF:F1:53:62:40:B5:67:A2:2A:AC:A9:9B:33:ED:20:91:B0:E5:C2
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/971d110a-753d-40c9-8ca6-28f0090c8f7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.87.0.0/16
Signature Algorithm: sha256WithRSAEncryption
be:14:30:fd:15:7a:67:ca:2d:e9:24:24:b3:a1:10:06:71:61:
d8:94:12:ea:48:92:cb:f7:29:9f:56:6a:d1:86:2e:f5:c4:1a:
95:39:37:30:30:5f:e4:58:92:fc:ed:7f:2d:13:3a:03:fc:8d:
aa:d3:05:92:69:55:65:ec:1a:39:f9:56:49:12:f4:c5:c8:5c:
bd:d7:50:a7:ab:a8:6d:9b:b8:56:7d:3f:ff:36:b1:69:82:a2:
28:b2:bb:5f:b4:f4:07:d2:3a:3d:ff:f0:5b:b9:10:e8:0e:bd:
59:17:26:b7:d9:a0:95:ef:64:67:cd:6a:ff:8e:b9:85:57:fa:
05:a4:13:1b:ac:d3:f7:3b:1b:18:b9:e0:0f:4e:e0:02:1f:11:
2e:1a:c6:e7:9e:bb:82:e6:13:c0:31:84:a1:11:26:07:77:84:
b2:dd:e5:3e:4a:cf:84:f7:16:cd:d4:2b:89:02:61:ca:43:c7:
dd:2f:4a:27:99:6c:e2:cc:af:b3:96:c7:2f:a1:f4:83:31:79:
5c:ee:6f:01:cf:34:e8:1e:d8:7b:3b:39:d8:c8:26:14:b8:c0:
cc:20:76:9e:e3:31:42:2a:85:e7:29:6f:31:29:de:6c:bf:d0:
f6:27:2e:15:96:db:0c:a3:a9:41:04:7c:be:18:d6:5e:c1:e4:
82:fe:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:31:57 2026 by rpki-client