Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a312972d-ee00-4cd1-acf7-849f7c26ed7b.roa
File: a312972d-ee00-4cd1-acf7-849f7c26ed7b.roa (raw, json)
Hash identifier: +tK6i6eDlJM9yFkpBCpAEkQZxhppKeRFzNwQopvI0Tk=
Subject key identifier: 9F:3E:20:33:30:D7:D9:24:C8:D0:9E:37:4B:7E:75:7C:44:DC:F3:14
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4921E719720D636322ABE9462B2A963D05F42B99
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a312972d-ee00-4cd1-acf7-849f7c26ed7b.roa
Signing time: Mon 29 Jun 2026 00:00:06 +0000
ROA not before: Mon 29 Jun 2026 00:00:06 +0000
ROA not after: Sun 27 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 57.80.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:21:e7:19:72:0d:63:63:22:ab:e9:46:2b:2a:96:3d:05:f4:2b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 29 00:00:06 2026 GMT
Not After : Sep 27 23:59:59 2026 GMT
Subject: serialNumber=7280009bb5171bda9e5b994ba0659eb8bea9b342562cc87e5dc0796fd345e43b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:15:f8:74:2e:27:ba:a3:90:60:ff:48:b9:ad:
ad:37:76:f0:a7:17:e4:be:76:3b:56:13:dd:52:5c:
ba:04:28:47:30:1a:99:6d:2f:d9:75:b3:ac:9c:aa:
48:4a:9c:33:0d:ce:60:3d:22:e4:b8:e8:e9:d8:66:
26:bb:d0:be:bf:55:cb:80:9a:9d:9e:90:4b:92:ab:
77:38:8e:bd:86:84:8b:94:bf:d8:88:42:ac:2a:55:
ec:9d:12:bb:80:98:7a:24:8a:b3:ea:31:79:14:34:
0d:99:0c:fa:d0:96:6d:97:55:16:17:ce:db:2e:1c:
a2:0a:eb:5f:a6:ed:b4:48:32:e9:b3:c5:c2:ff:85:
bb:65:9b:45:61:ee:eb:40:16:90:eb:1b:1b:08:24:
b0:55:1d:c3:b6:6f:c0:c7:12:51:23:a2:93:f3:2e:
17:50:c6:c9:41:63:84:a2:4c:73:02:30:7d:0b:a6:
bd:77:f9:e6:76:07:3f:2a:2e:8c:33:fa:d7:56:96:
ce:03:39:6e:56:90:bd:c0:45:df:88:8d:39:ac:98:
7c:18:0d:ea:57:6f:be:58:0d:cf:46:1e:84:50:c2:
3b:3d:86:cd:1f:db:40:ce:15:bd:c7:a4:81:86:2c:
23:78:78:72:78:7b:ae:6a:92:ee:ba:b7:f9:bd:f2:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3E:20:33:30:D7:D9:24:C8:D0:9E:37:4B:7E:75:7C:44:DC:F3:14
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a312972d-ee00-4cd1-acf7-849f7c26ed7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:84:57:72:c0:0a:6e:b4:04:16:91:f5:96:78:cd:0c:d3:71:
06:1b:8e:04:b9:af:d2:4f:27:cb:af:ca:84:f2:95:85:e7:13:
f2:b8:14:19:df:dd:ad:1f:8c:30:d9:0e:ab:0d:56:1e:42:b1:
e1:45:e2:d9:84:fe:57:59:72:60:54:a3:58:ea:4b:da:ae:17:
e0:62:f7:b7:50:64:99:d7:b3:d4:a2:10:a9:42:de:6c:03:df:
a5:0f:bf:b1:03:a7:70:25:bb:45:79:8d:57:4d:a1:cb:7e:13:
d8:38:33:ff:44:42:c7:64:43:ee:b0:c0:eb:45:41:f1:8e:e3:
90:46:ba:1b:f2:af:35:1a:a1:0c:7e:78:a6:54:a8:cb:30:67:
f2:d5:b1:67:b0:62:72:44:e9:67:d3:67:a1:74:69:f0:3b:92:
a1:5d:14:43:2d:06:cb:31:9e:13:23:4e:5c:3c:b0:ee:eb:42:
36:23:ac:e1:70:04:a5:46:46:4b:e5:7a:98:f1:14:c5:20:04:
6a:bf:98:81:bd:a4:87:35:d2:bf:72:b8:e5:ba:c1:2e:ea:73:
28:6e:47:32:69:78:1d:5e:de:b8:a6:5d:c8:cb:d8:20:66:2f:
19:d7:5d:b8:b2:44:07:25:c5:eb:3f:3f:b5:f0:fe:89:b2:3f:
0c:2c:cf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:05 2026 by rpki-client