Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/99e8f5be-1b23-4286-ba1e-6761d2b97b44.roa
File: 99e8f5be-1b23-4286-ba1e-6761d2b97b44.roa (raw, json)
Hash identifier: 3uws/ooe0w3IKURvB2c1xt6ZWimy2rnbmT2IoGZF+7w=
Subject key identifier: EC:A9:FE:6F:E3:C8:45:1E:5F:AE:77:D3:60:65:0E:0B:E6:12:78:B3
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1AC609C97AE62137DD0D4DFACB34A119DD0F7E7F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/99e8f5be-1b23-4286-ba1e-6761d2b97b44.roa
Signing time: Thu 15 Oct 2026 00:20:08 +0000
ROA not before: Thu 15 Oct 2026 00:20:08 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c6:09:c9:7a:e6:21:37:dd:0d:4d:fa:cb:34:a1:19:dd:0f:7e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 15 00:20:08 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=207962dcd94dfd807dffa47158cad4882883b65fd32cb7494d401359cdecb481, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:9a:5a:6f:ab:ab:08:8a:ea:26:d4:54:c5:
21:67:61:ce:10:72:0a:65:36:a5:7b:4a:8a:16:61:
1f:2f:36:1e:70:d8:27:7f:f8:0f:df:67:8d:31:ee:
24:91:fb:01:1a:c1:9b:df:f1:ef:d1:26:76:27:d0:
dc:6c:bf:40:36:3e:d0:d9:a2:b4:20:8d:e1:c6:24:
c0:29:31:b9:d5:b4:cc:be:49:80:46:48:21:0d:1c:
a6:8a:12:1b:88:bc:67:05:16:66:98:77:86:17:c5:
2f:59:a1:c0:20:70:4c:e3:e0:5b:56:61:e7:1c:b3:
0c:12:46:22:2f:01:dc:2e:f5:b7:aa:ba:a3:02:e9:
7a:6a:84:8c:8b:df:5b:1d:84:cb:34:55:69:c9:34:
01:77:21:c3:e0:7a:68:42:36:e0:92:52:21:68:2c:
bd:ba:a5:51:ea:ad:1e:e6:19:75:17:a0:a8:ba:05:
a5:eb:8c:73:18:ad:e8:ef:b0:f5:e9:3e:82:93:15:
d9:e1:bd:07:df:a2:16:1f:c9:9f:10:b2:68:da:64:
17:5c:4e:62:d5:36:fa:27:02:f6:b9:62:7e:91:ff:
1b:33:80:54:fe:2b:6c:01:f5:e5:5e:ee:95:e2:87:
f5:fd:c9:46:c8:8c:53:fc:8e:89:b1:33:1b:e8:f7:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A9:FE:6F:E3:C8:45:1E:5F:AE:77:D3:60:65:0E:0B:E6:12:78:B3
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/99e8f5be-1b23-4286-ba1e-6761d2b97b44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ac:bf:9f:8e:a1:31:18:29:80:40:4b:cf:c5:4d:7e:e2:71:77:
a9:7b:c3:51:04:e1:3a:60:35:0d:d5:49:66:ff:98:a7:af:b7:
1a:e5:6b:ba:aa:b8:ca:92:12:c3:31:92:36:c3:bd:e1:58:4b:
4c:31:e6:ea:6b:c5:00:e2:e8:7c:cb:d4:bb:47:53:e8:5f:d7:
b6:7c:31:04:e1:f5:66:ed:78:cc:70:e2:b4:39:f3:16:a4:82:
65:fb:76:a4:56:b2:30:06:a7:e0:3e:45:b5:55:38:f7:2c:9c:
da:d3:d4:03:87:84:3c:84:46:19:cc:9f:09:40:68:e7:30:3e:
5a:cb:c1:bc:c4:f4:c0:f6:35:6f:28:2e:35:77:01:13:00:12:
d9:ee:34:83:cd:1c:38:a1:28:15:95:0e:36:e0:d8:93:11:80:
6d:06:c8:38:20:83:33:e4:df:23:bf:b3:2c:4c:04:91:83:32:
8f:9c:9e:6e:ff:d9:ae:5a:6a:b5:30:6e:bd:58:d6:54:89:06:
66:95:36:42:2d:bb:b8:f6:1b:1c:51:7f:63:7d:82:85:34:42:
13:8b:8f:80:59:11:cc:8c:15:0e:fe:69:68:89:4a:b2:39:b2:
ec:b3:4f:9b:39:a0:d5:7e:d2:f8:0b:08:17:7d:f6:93:85:67:
b6:2f:71:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:15:41 2026 by rpki-client