Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cfc52a-1f15-43b9-93f9-9828d60fbe69.roa
File: b2cfc52a-1f15-43b9-93f9-9828d60fbe69.roa (raw, json)
Hash identifier: fsr/YbIlxkkDAL98zqx4W8GUrUFDp7t9jR/LvNepAKY=
Subject key identifier: D8:F1:70:39:2B:D8:48:6A:0C:18:65:E7:97:1A:B3:12:B2:10:0A:69
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 67844FCD103F7968E039BC86C9A126DE934D46D5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cfc52a-1f15-43b9-93f9-9828d60fbe69.roa
Signing time: Mon 26 Oct 2026 05:40:36 +0000
ROA not before: Mon 26 Oct 2026 05:40:36 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 193.218.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:84:4f:cd:10:3f:79:68:e0:39:bc:86:c9:a1:26:de:93:4d:46:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:36 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=8a1cc0d42039cba07d5e04d95aed6a6155c21c9870de7a5f0787f1b486d57521, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:06:58:cc:3c:4e:23:b7:36:66:0d:c8:5f:
83:da:eb:df:2c:5a:4b:b1:bd:8a:e5:7e:00:97:a1:
d8:bd:68:56:b1:c5:6b:bb:d8:22:61:cb:1e:46:a3:
a2:95:d4:d8:bf:35:26:07:1d:ff:43:97:65:86:27:
f3:fe:4e:83:37:66:2d:a8:a1:4a:26:95:b5:e3:f2:
b7:88:2f:fb:9c:09:50:97:f5:bd:f6:da:c9:e6:6d:
78:e1:26:b8:ad:b7:92:29:1b:58:da:0f:05:69:3a:
ab:18:bb:98:b6:b4:8e:9e:a9:c5:83:e1:d8:b6:82:
1b:88:32:9e:94:03:7a:ce:91:7b:d8:53:88:92:91:
33:c4:d4:4d:19:f4:76:69:2c:e3:a4:5f:14:b3:ac:
5f:c7:e1:fc:8e:b6:3a:f0:2c:f0:e3:bf:38:48:84:
37:ad:7b:f9:d9:29:a2:b2:4c:66:33:93:74:cc:ad:
31:f8:f2:85:ea:e6:22:01:76:14:25:20:14:0f:a2:
1e:a2:b3:88:68:ef:cf:56:cc:ca:00:64:ee:52:39:
73:f9:e9:fa:a5:57:b8:ac:8f:81:b1:9c:b8:ad:ef:
80:fd:e9:92:ee:bf:0f:a8:9c:e6:0b:c6:26:eb:bf:
c9:2e:ef:4a:40:cf:40:d6:ae:9c:2a:a1:a1:ff:5c:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F1:70:39:2B:D8:48:6A:0C:18:65:E7:97:1A:B3:12:B2:10:0A:69
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cfc52a-1f15-43b9-93f9-9828d60fbe69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.122.0/24
Signature Algorithm: sha256WithRSAEncryption
61:9e:16:05:65:18:c4:53:2c:48:8d:10:bd:87:10:af:b9:fc:
e9:d0:af:f6:af:a5:9b:af:a7:ee:61:33:d8:0e:a2:05:51:fe:
ea:60:32:00:47:0f:76:36:a0:ce:66:b6:37:76:b4:45:17:6e:
df:da:39:a4:bf:32:68:5b:4a:4c:f8:29:c0:80:67:e6:10:cb:
de:f4:20:01:d9:71:89:ed:18:a3:63:ce:67:95:90:3b:17:35:
b8:86:e0:98:68:d0:09:76:78:a9:b8:57:c7:dc:b8:9b:b3:f2:
83:6f:55:27:e7:24:e8:75:8a:9d:8e:a4:e9:ed:38:db:11:17:
2f:e3:53:87:24:a2:7a:e8:92:2a:43:f5:2a:de:75:d9:c1:5c:
6f:cf:ed:ab:8b:f6:f1:ed:b8:9c:ac:8f:5c:8a:cf:6e:bb:f9:
4f:c8:01:f4:f0:5b:85:55:3e:53:a5:0f:a3:66:7b:5e:0d:4f:
1d:38:6d:7a:53:f4:e1:27:4f:dd:9b:40:a8:a3:2f:dd:92:22:
dc:52:0e:8e:94:68:6e:16:06:4e:1d:bb:71:bd:4c:b9:29:0e:
c6:f8:7b:99:0a:52:29:ab:51:63:1c:94:2f:1d:79:4a:c7:bc:
25:4c:a1:a0:fa:ff:9c:f6:4e:f0:8c:68:97:b1:41:ef:b0:2d:
9f:eb:df:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:08:14 2026 by rpki-client