Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac4a6d71-8f2c-4a51-b73d-23abcb81a3b4.roa
File: ac4a6d71-8f2c-4a51-b73d-23abcb81a3b4.roa (raw, json)
Hash identifier: nXSDfnSqp8K6K9Ky5+sSSnyQWE3vauJzbqgRFPYPd/k=
Subject key identifier: 60:84:D3:90:34:72:B1:61:90:61:94:84:22:BD:1C:C7:5C:4E:70:26
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 24CA6153BFFDDBECDCFD3C91BFF8F9AC44C253A7
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac4a6d71-8f2c-4a51-b73d-23abcb81a3b4.roa
Signing time: Thu 23 Jul 2026 15:30:40 +0000
ROA not before: Thu 23 Jul 2026 15:30:40 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 83.116.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ca:61:53:bf:fd:db:ec:dc:fd:3c:91:bf:f8:f9:ac:44:c2:53:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:40 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=567bfe01f131294c40068f950fe8e1df4e8080f1fea1456527e442a7a543bccb, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:8a:88:2b:dd:4e:72:2a:25:81:52:13:0a:
76:92:d7:62:5b:64:ff:48:30:d9:f9:70:3e:7a:e0:
c8:a0:9d:82:9c:4b:90:60:c8:76:fe:3d:41:a5:46:
28:a8:16:2f:52:ca:0e:ee:bb:c3:85:16:26:3b:3d:
d2:35:3f:ca:9e:1c:7d:0e:1b:b7:78:b3:48:b8:6c:
b6:d6:19:b4:5e:56:91:cf:e8:45:97:72:f7:50:de:
9f:74:4a:49:1d:92:00:1e:0e:55:71:2b:ad:7f:b4:
54:f6:cc:66:9b:bc:dc:a9:a3:9a:c6:66:3a:3c:9b:
54:63:aa:a0:e6:cc:1f:1f:03:e2:31:6a:04:cc:ab:
d4:78:11:39:fc:44:98:4e:f0:5d:83:c0:ed:e1:57:
ed:ec:c1:ad:49:49:51:a5:07:e0:88:0f:b5:ed:fb:
8e:85:1b:85:8e:28:8c:a9:d6:f6:77:4e:23:08:a1:
7d:c6:c8:ef:b5:f0:4b:74:d6:6e:b2:77:13:f5:57:
63:f1:f3:04:94:29:d2:43:3d:f0:6f:4b:1e:26:20:
c3:43:26:9f:46:2f:72:91:64:11:7e:6c:f9:16:fd:
b8:7f:88:ab:1a:e1:0a:c0:c4:0d:b0:14:d6:38:19:
04:18:fd:35:5a:37:e3:a5:21:69:68:5e:b6:d4:44:
82:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:84:D3:90:34:72:B1:61:90:61:94:84:22:BD:1C:C7:5C:4E:70:26
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac4a6d71-8f2c-4a51-b73d-23abcb81a3b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.116.0.0/15
Signature Algorithm: sha256WithRSAEncryption
83:fc:7f:60:47:f4:be:19:9c:c1:e1:8f:83:78:b5:a8:c5:aa:
14:36:88:a4:44:74:bb:8d:75:1f:c0:2c:b6:b0:56:7f:95:53:
10:b1:6b:43:40:e2:8f:67:8e:83:0d:b0:b0:d3:50:29:41:83:
c6:1a:3d:5a:ad:94:c9:2f:e3:d6:8a:ec:f0:8e:ab:42:0b:45:
a3:c1:30:d4:fc:a4:e0:67:16:92:cc:22:72:9c:11:dd:31:96:
f9:40:29:92:10:d8:fa:fe:53:a5:46:6f:7a:64:a6:85:d2:02:
a7:3c:e5:bb:24:3f:73:4b:1b:a0:22:f2:98:0d:12:f3:2b:6c:
4b:eb:db:05:e9:c1:c0:f9:85:73:61:d2:f4:5a:4d:26:5e:1c:
30:40:ae:93:ea:fa:1a:10:1f:66:ab:06:36:e2:4c:28:2a:fd:
de:a9:02:d6:13:e2:d0:07:ac:1b:a6:44:03:e0:7b:6b:d0:e6:
c6:a8:41:8f:81:4d:a7:ba:3f:a5:01:59:45:3a:ec:2d:81:8b:
32:ad:bc:a7:76:27:c4:72:b0:5b:eb:b6:06:57:fc:8b:14:22:
88:8e:3d:92:5b:20:6f:88:c2:ce:4c:27:a5:d1:d0:4a:c9:04:
4f:6e:87:a9:72:99:2a:60:0e:2e:c1:a6:b3:4f:c0:8a:d7:8b:
6a:64:cd:7d
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUJMphU7/92+zc/TyRv/j5rETCU6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA3MjMxNTMwNDBaFw0yNjEwMjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDU2N2JmZTAxZjEzMTI5NGM0MDA2OGY5NTBmZThlMWRmNGU4MDgwZjFmZWEx
NDU2NTI3ZTQ0MmE3YTU0M2JjY2IxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL7Liogr3U5yKiWBUhMKdpLXYltk/0gw2flwPnrgyKCdgpxLkGDIdv49QaVG
KKgWL1LKDu67w4UWJjs90jU/yp4cfQ4bt3izSLhsttYZtF5Wkc/oRZdy91Den3RK
SR2SAB4OVXErrX+0VPbMZpu83KmjmsZmOjybVGOqoObMHx8D4jFqBMyr1HgROfxE
mE7wXYPA7eFX7ezBrUlJUaUH4IgPte37joUbhY4ojKnW9ndOIwihfcbI77XwS3TW
brJ3E/VXY/HzBJQp0kM98G9LHiYgw0Mmn0YvcpFkEX5s+Rb9uH+IqxrhCsDEDbAU
1jgZBBj9NVo346UhaWhettREgpECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRghNOQ
NHKxYZBhlIQivRzHXE5wJjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YWM0YTZkNzEtOGYyYy00YTUxLWI3M2QtMjNhYmNiODFhM2I0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAVN0MA0G
CSqGSIb3DQEBCwUAA4IBAQCD/H9gR/S+GZzB4Y+DeLWoxaoUNoikRHS7jXUfwCy2
sFZ/lVMQsWtDQOKPZ46DDbCw01ApQYPGGj1arZTJL+PWiuzwjqtCC0WjwTDU/KTg
ZxaSzCJynBHdMZb5QCmSENj6/lOlRm96ZKaF0gKnPOW7JD9zSxugIvKYDRLzK2xL
69sF6cHA+YVzYdL0Wk0mXhwwQK6T6voaEB9mqwY24kwoKv3eqQLWE+LQB6wbpkQD
4Htr0ObGqEGPgU2nuj+lAVlFOuwtgYsyrbyndifEcrBb67YGV/yLFCKIjj2SWyBv
iMLOTCel0dBKyQRPboepcpkqYA4uwaazT8CK14tqZM19
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:31:48 2026 by rpki-client