Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cfc52a-1f15-43b9-93f9-9828d60fbe69.roa
File: b2cfc52a-1f15-43b9-93f9-9828d60fbe69.roa (raw, json)
Hash identifier: iW8QpEiA+aXT4266SSZjO20jdpMItXOivBk6NbmIz9o=
Subject key identifier: F6:D8:73:36:9C:64:C6:66:62:97:89:C0:A8:29:58:E3:36:02:BD:3B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2029BEEF0E62C14F083AA5BE92D3893D3639154E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cfc52a-1f15-43b9-93f9-9828d60fbe69.roa
Signing time: Fri 26 Sep 2025 20:10:14 +0000
ROA not before: Fri 26 Sep 2025 20:10:14 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 193.218.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:29:be:ef:0e:62:c1:4f:08:3a:a5:be:92:d3:89:3d:36:39:15:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 26 20:10:14 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=efd2c6044664930ef1427ef1416ac40b164de2a1398b96d78b2ba33103038050, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c9:c5:73:d9:45:89:60:04:7b:64:6d:b0:7f:
96:d9:ae:22:cd:02:f2:90:5a:03:77:68:ef:f4:3b:
77:7b:d9:a0:bd:f0:fd:ed:84:4b:8e:b8:77:ed:91:
d2:f4:2c:fd:24:16:78:0a:59:52:a6:8d:c7:77:ca:
8e:eb:af:f0:85:83:02:4e:f8:73:bc:ab:11:68:7f:
d8:d0:30:cc:a5:7c:f2:0f:63:44:82:17:65:7c:80:
18:1b:02:e8:f4:21:b3:a8:93:2d:26:44:94:10:02:
6d:1d:16:2b:9d:0b:34:f5:60:c3:0f:5c:97:39:bc:
eb:5c:02:b4:e2:9b:11:39:81:cd:b8:4d:8f:05:64:
3f:95:bc:2b:0e:36:bc:81:c7:15:cd:0a:21:1f:7b:
9e:e4:f8:31:ba:29:0f:88:de:03:ca:a5:c8:4a:6e:
b7:63:53:e2:80:83:91:de:81:ca:31:20:d3:5d:5f:
88:b7:81:c9:d2:d8:29:34:1a:11:df:fd:29:d7:13:
55:4c:f1:f9:03:85:3f:28:14:51:62:d3:9c:0f:6b:
fc:1c:2b:c1:cf:ee:85:84:d8:d9:f2:75:f3:44:35:
1a:04:e2:b9:a0:b1:4d:69:cf:05:ab:a3:31:42:f1:
dd:74:f5:58:91:77:bd:05:5e:0e:b8:ec:1a:e7:b0:
3d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D8:73:36:9C:64:C6:66:62:97:89:C0:A8:29:58:E3:36:02:BD:3B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cfc52a-1f15-43b9-93f9-9828d60fbe69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.122.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d9:3d:f5:33:67:59:53:ad:0c:e6:37:aa:c9:d1:18:bc:2c:
33:87:c9:35:38:5a:24:57:95:84:72:a7:30:37:46:54:83:b6:
48:3d:50:d9:24:8b:68:0b:75:2b:15:64:6c:2d:bc:73:8e:68:
ad:5c:bb:f0:51:3e:93:93:a8:da:1d:fa:0e:42:db:7f:4f:4a:
79:99:50:5a:7c:2a:40:53:18:04:d8:99:b2:07:a3:f0:22:1a:
9c:7e:7d:e7:39:74:59:be:60:43:ca:42:8b:91:5b:cc:5c:d1:
66:6c:0d:70:49:5f:8d:54:32:80:db:0a:a2:68:b7:40:04:8f:
2b:d5:51:30:88:2f:e1:63:54:33:e1:fd:e4:32:f0:07:c6:d7:
ab:bd:50:df:b0:f2:ff:b6:92:7c:77:9d:a7:86:cf:b3:3a:67:
38:c4:96:1c:22:7a:5a:2e:f4:b2:60:fa:4b:1f:47:e1:25:bd:
c0:df:d0:d3:9b:17:4f:aa:55:03:5d:b6:a6:c4:d1:76:a7:ec:
f8:58:16:70:fe:0a:b8:98:f0:e9:8a:48:07:00:ff:57:0e:7b:
f4:b0:22:ec:c1:89:04:32:6f:47:a2:1f:02:95:22:b6:eb:a3:
22:a6:4f:77:68:d9:ce:24:f1:2e:ed:5b:51:62:da:9d:e9:a2:
f7:6d:84:48
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUICm+7w5iwU8IOqW+ktOJPTY5FU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA5MjYyMDEwMTRaFw0yNTEwMzEyMzU5NTlaMHoxSTBHBgNV
BAUTQGVmZDJjNjA0NDY2NDkzMGVmMTQyN2VmMTQxNmFjNDBiMTY0ZGUyYTEzOThi
OTZkNzhiMmJhMzMxMDMwMzgwNTAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOfJxXPZRYlgBHtkbbB/ltmuIs0C8pBaA3do7/Q7d3vZoL3w/e2ES464d+2R
0vQs/SQWeApZUqaNx3fKjuuv8IWDAk74c7yrEWh/2NAwzKV88g9jRIIXZXyAGBsC
6PQhs6iTLSZElBACbR0WK50LNPVgww9clzm861wCtOKbETmBzbhNjwVkP5W8Kw42
vIHHFc0KIR97nuT4MbopD4jeA8qlyEput2NT4oCDkd6ByjEg011fiLeBydLYKTQa
Ed/9KdcTVUzx+QOFPygUUWLTnA9r/Bwrwc/uhYTY2fJ180Q1GgTiuaCxTWnPBauj
MULx3XT1WJF3vQVeDrjsGuewPdkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBT22HM2
nGTGZmKXicCoKVjjNgK9OzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YjJjZmM1MmEtMWYxNS00M2I5LTkzZjktOTgyOGQ2MGZiZTY5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHaejAN
BgkqhkiG9w0BAQsFAAOCAQEAitk99TNnWVOtDOY3qsnRGLwsM4fJNThaJFeVhHKn
MDdGVIO2SD1Q2SSLaAt1KxVkbC28c45orVy78FE+k5Oo2h36DkLbf09KeZlQWnwq
QFMYBNiZsgej8CIanH595zl0Wb5gQ8pCi5FbzFzRZmwNcElfjVQygNsKomi3QASP
K9VRMIgv4WNUM+H95DLwB8bXq71Q37Dy/7aSfHedp4bPszpnOMSWHCJ6Wi70smD6
Sx9H4SW9wN/Q05sXT6pVA122psTRdqfs+FgWcP4KuJjw6YpIBwD/Vw579LAi7MGJ
BDJvR6IfApUituujIqZPd2jZziTxLu1bUWLanemi922ESA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:34 2025 by rpki-client