Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac4a6d71-8f2c-4a51-b73d-23abcb81a3b4.roa
File: ac4a6d71-8f2c-4a51-b73d-23abcb81a3b4.roa (raw, json)
Hash identifier: xxp8kI3wgAQbefBP0DtfJBg9shwST92WIkFm89JT8OU=
Subject key identifier: 33:7C:F2:6F:B9:24:BF:52:4A:C2:C7:55:A9:93:58:23:7D:3B:BB:C7
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4FBD9F7119720AF912AEF649C85121CBFD395C6A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac4a6d71-8f2c-4a51-b73d-23abcb81a3b4.roa
Signing time: Mon 04 May 2026 15:30:09 +0000
ROA not before: Mon 04 May 2026 15:30:09 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 83.116.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:bd:9f:71:19:72:0a:f9:12:ae:f6:49:c8:51:21:cb:fd:39:5c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 4 15:30:09 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=e026216e73f4a86db9409bd077e5b1151f3fd0ccfe4afd57354205680eaca195, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:ed:b0:6d:05:a6:80:64:b7:25:ac:f7:e0:
88:f4:6b:b3:4a:1b:f3:ce:59:6b:69:d3:8c:9e:87:
e8:3c:8e:c9:b1:4c:22:97:ee:85:ff:59:dd:ca:2f:
4a:0e:5a:05:fa:95:1d:a8:ed:ab:06:3e:d9:38:3c:
b0:a8:6d:fb:42:7d:cc:bb:89:f7:ba:60:42:e8:d8:
d0:40:e2:29:4e:97:4c:71:2b:28:ae:70:d8:c3:7c:
36:60:28:08:a0:0c:17:bc:30:d3:36:d4:5c:1c:10:
3e:a0:2f:de:30:c8:19:04:f0:70:3c:00:d9:4e:c7:
05:d1:17:0c:4e:79:52:56:6a:69:60:f2:f4:78:05:
97:8e:6a:1e:76:30:e6:16:66:8f:fa:6e:48:76:62:
53:06:0c:95:e2:ae:32:83:7f:61:72:14:81:d6:ac:
20:9d:ba:c8:67:f5:4a:8c:07:25:f6:b4:10:ca:7d:
64:9f:c8:1f:54:0d:6c:50:2b:1a:86:f0:84:0f:2c:
b9:ec:d6:86:1c:d5:90:93:68:d0:3f:98:c8:b3:07:
28:b7:1e:0f:02:9a:cd:ea:e5:a5:95:5c:ea:0a:c6:
6b:3b:d3:bc:bd:57:3f:f2:b9:09:03:f5:5a:a8:d3:
bb:83:8b:a7:b3:e3:2e:67:aa:7f:69:e6:73:cf:ea:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7C:F2:6F:B9:24:BF:52:4A:C2:C7:55:A9:93:58:23:7D:3B:BB:C7
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac4a6d71-8f2c-4a51-b73d-23abcb81a3b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.116.0.0/15
Signature Algorithm: sha256WithRSAEncryption
38:69:33:b3:d5:a1:e6:d8:46:f5:e4:a8:d0:b2:2a:fd:8f:f4:
4e:ab:01:b9:4c:e0:46:ed:36:38:b7:d6:1f:03:c2:d1:ba:67:
00:10:f2:57:a3:e2:81:cf:58:74:b2:de:25:00:88:b8:62:81:
86:6a:9d:70:1a:aa:6a:02:ff:f6:18:57:3b:58:78:02:6f:52:
8c:66:2d:41:1b:83:b3:f6:8b:24:52:0d:f4:8a:b2:15:53:20:
72:7d:5c:1b:86:61:a5:6b:de:51:bf:5e:e7:95:50:9b:32:83:
ed:fc:be:a4:d4:db:76:50:f8:97:bc:b7:b5:d7:c7:ed:b7:54:
d4:15:7a:48:55:b2:24:ff:c3:1a:f8:61:fb:3d:40:ae:87:af:
07:e5:25:0d:7c:c1:df:90:e2:0d:6c:51:1f:c6:28:07:2e:26:
2e:e9:30:69:b5:9d:08:53:58:eb:b2:7c:f6:1d:44:cc:4a:a4:
b3:10:e3:66:0e:23:0e:47:74:bc:68:19:7f:85:18:af:d6:6d:
34:2a:72:25:10:b5:e1:7c:78:5a:04:1c:29:e9:ca:3e:01:99:
4f:63:f2:61:af:2c:4b:3e:dd:c2:2d:ac:12:45:f8:e3:47:71:
37:3b:93:89:a2:0b:43:93:53:0b:eb:4e:f4:80:22:78:06:7a:
02:1e:4f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:38:51 2026 by rpki-client