Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a08b99a-284f-4e69-83b1-fbfba94e7f22.roa
File: 9a08b99a-284f-4e69-83b1-fbfba94e7f22.roa (raw, json)
Hash identifier: 4i2ISWWDixx2tXt2rg8V4pZic9MBtG0M66Hf0AOyWdQ=
Subject key identifier: 93:66:CF:46:1B:9E:20:ED:40:F3:F6:56:62:EA:45:6E:BA:A7:85:4C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 03F856477930E8A573F2EB8783403F88019FCDC2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a08b99a-284f-4e69-83b1-fbfba94e7f22.roa
Signing time: Mon 26 Oct 2026 05:50:44 +0000
ROA not before: Mon 26 Oct 2026 05:50:44 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 145.55.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f8:56:47:79:30:e8:a5:73:f2:eb:87:83:40:3f:88:01:9f:cd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:44 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=c3b84bf89f86c0bfcdc1c211710dd7609697bbda5625d1b68a6aa7f5c468aa39, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:37:89:eb:72:5c:44:35:54:6c:e9:b9:07:
a5:95:b8:7e:8f:c1:72:6e:bb:b8:cb:7e:06:c9:54:
a5:db:df:25:98:c1:3d:df:33:1e:6b:5d:7b:ad:5e:
7f:be:0c:1e:af:db:2d:71:ad:b6:38:d7:c5:43:98:
a7:77:27:86:b3:19:6a:14:76:56:96:37:d5:22:05:
1b:de:6d:5f:c4:b2:8b:4b:f2:43:d5:97:44:04:cf:
cc:97:82:09:f8:8e:60:09:f0:fb:6d:0d:f8:5e:df:
29:75:87:61:d8:8c:e7:c6:24:f8:60:83:3a:3e:64:
69:0f:68:06:67:0d:e3:61:f2:4a:3c:37:e5:33:3c:
ae:e1:30:5c:8c:ee:74:94:7d:cd:9e:c4:a4:6d:e8:
9b:d5:ff:a2:eb:cc:fa:9f:cc:c0:4f:c4:51:ec:86:
38:c8:93:c1:a8:68:eb:50:2f:2d:dd:aa:d4:dd:f8:
9b:f0:e3:bc:c3:9f:59:65:b8:db:db:c2:ff:e0:40:
7b:8f:7f:9a:7a:2f:f0:e4:d4:f9:3a:62:d0:dd:8e:
be:d7:ac:77:1b:2c:2c:70:1a:c9:6c:77:4a:7d:64:
35:89:d7:17:fa:d6:5d:d2:29:28:f4:ea:73:70:68:
98:0f:98:5f:0e:9d:18:60:0f:b9:1e:3d:b6:8d:71:
8c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:66:CF:46:1B:9E:20:ED:40:F3:F6:56:62:EA:45:6E:BA:A7:85:4C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9a08b99a-284f-4e69-83b1-fbfba94e7f22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.55.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:ec:79:20:ce:6a:69:17:39:06:d6:35:6c:98:59:b9:6e:e4:
b6:6d:34:4a:f2:05:e0:69:e8:45:e8:bb:f2:ab:9d:f3:a7:9c:
cb:19:69:01:aa:93:ad:e0:58:d0:28:c4:c9:4a:64:07:20:fc:
ce:66:e4:da:81:49:32:16:27:2f:55:92:7d:38:c1:bc:27:69:
81:53:f2:fe:7d:c8:af:e4:a1:4b:ea:14:19:13:f2:db:b2:f8:
38:1c:c7:fb:57:c9:9f:5e:e6:4b:d8:f4:2e:b2:57:48:aa:3a:
87:a3:5d:37:02:b6:ab:66:ca:cd:56:c0:7b:e3:05:26:66:d5:
90:54:69:6c:15:4a:db:b4:96:27:60:d9:32:6d:7c:39:64:64:
9f:99:d0:ea:20:d6:90:97:24:de:2b:44:f8:7b:d9:93:28:a8:
57:bf:15:c4:e8:b3:43:44:49:e1:0d:dd:b1:f5:af:ec:77:32:
70:23:c3:80:0e:a3:a9:e8:da:44:69:8c:a1:01:77:d9:97:1e:
65:4e:00:61:f8:52:71:ff:04:f3:79:7f:5f:1a:57:71:ba:93:
90:73:73:97:5a:f0:d6:0b:81:f2:ef:b2:53:f7:5c:37:a4:25:
1d:29:4e:d3:6a:83:2b:b4:a4:c1:b4:cf:2e:ca:23:fa:df:73:
c1:af:ff:42
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUA/hWR3kw6KVz8uuHg0A/iAGfzcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTUwNDRaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGMzYjg0YmY4OWY4NmMwYmZjZGMxYzIxMTcxMGRkNzYwOTY5N2JiZGE1NjI1
ZDFiNjhhNmFhN2Y1YzQ2OGFhMzkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALQ1N4nrclxENVRs6bkHpZW4fo/Bcm67uMt+BslUpdvfJZjBPd8zHmtde61e
f74MHq/bLXGttjjXxUOYp3cnhrMZahR2VpY31SIFG95tX8Syi0vyQ9WXRATPzJeC
CfiOYAnw+20N+F7fKXWHYdiM58Yk+GCDOj5kaQ9oBmcN42HySjw35TM8ruEwXIzu
dJR9zZ7EpG3om9X/ouvM+p/MwE/EUeyGOMiTwaho61AvLd2q1N34m/DjvMOfWWW4
29vC/+BAe49/mnov8OTU+Tpi0N2OvtesdxssLHAayWx3Sn1kNYnXF/rWXdIpKPTq
c3BomA+YXw6dGGAPuR49to1xjN0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSTZs9G
G54g7UDz9lZi6kVuuqeFTDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
OWEwOGI5OWEtMjg0Zi00ZTY5LTgzYjEtZmJmYmE5NGU3ZjIyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAJE3MA0G
CSqGSIb3DQEBCwUAA4IBAQA67HkgzmppFzkG1jVsmFm5buS2bTRK8gXgaehF6Lvy
q53zp5zLGWkBqpOt4FjQKMTJSmQHIPzOZuTagUkyFicvVZJ9OMG8J2mBU/L+fciv
5KFL6hQZE/Lbsvg4HMf7V8mfXuZL2PQusldIqjqHo103ArarZsrNVsB74wUmZtWQ
VGlsFUrbtJYnYNkybXw5ZGSfmdDqINaQlyTeK0T4e9mTKKhXvxXE6LNDREnhDd2x
9a/sdzJwI8OADqOp6NpEaYyhAXfZlx5lTgBh+FJx/wTzeX9fGldxupOQc3OXWvDW
C4Hy77JT91w3pCUdKU7TaoMrtKTBtM8uyiP633PBr/9C
-----END CERTIFICATE-----
Generated at Thu Nov 12 15:38:48 2026 by rpki-client