Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b5ec0568-ce5c-41f8-ae3e-0c14783e4068.roa
File: b5ec0568-ce5c-41f8-ae3e-0c14783e4068.roa (raw, json)
Hash identifier: hRRQ5RM4ViLMBOQE+yPn9F4fnoqLUyOXirKWxcOY2xk=
Subject key identifier: CA:D3:C8:A3:74:76:F2:15:F4:60:CC:26:23:E0:28:4B:15:E5:A3:1A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4C51DA72ADBED5B663DBEC763BE0E9A61B97077B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b5ec0568-ce5c-41f8-ae3e-0c14783e4068.roa
Signing time: Mon 26 Oct 2026 05:50:08 +0000
ROA not before: Mon 26 Oct 2026 05:50:08 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 194.198.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:51:da:72:ad:be:d5:b6:63:db:ec:76:3b:e0:e9:a6:1b:97:07:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:08 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=43df9df42368d664fde64f7f37b7b6b5aa11511e73de17aaab2d8462da48982a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bc:58:ab:a5:32:2c:e0:0a:9e:3c:db:74:66:
a6:bc:02:d3:da:fe:d4:af:12:99:30:11:8c:c8:12:
95:55:8e:79:61:a5:c4:f5:95:af:53:5b:bc:f4:89:
d9:4f:bd:5c:36:dd:6c:46:b2:03:94:a8:f7:9a:6e:
5b:1e:c0:85:fc:2e:b2:e2:17:0d:cb:dc:5b:18:83:
58:f9:5b:bd:5a:47:11:e5:0e:47:69:e9:12:8e:96:
19:1f:ee:93:27:8e:41:68:6f:66:f0:a5:59:09:f9:
1b:4a:1c:58:d5:e1:af:88:c9:6a:e7:44:30:bd:30:
fb:90:30:c2:81:07:d5:94:9e:2c:aa:a8:f8:bf:9e:
3c:32:6c:c7:b9:32:a8:1f:40:5d:bd:89:6f:1b:b6:
d0:0f:74:47:35:69:7d:1b:c7:90:3e:4a:0d:6c:05:
16:2f:c2:46:8c:8b:db:33:4e:54:02:e8:0b:06:15:
e0:6b:1d:b1:49:6e:e6:60:03:5c:b7:ef:ff:ca:f9:
87:38:c9:a8:3b:2b:54:ce:a6:b5:62:41:44:be:72:
4d:ed:1a:96:83:a4:c9:21:4e:a6:97:d2:d6:37:9f:
2a:2c:50:f9:3c:e7:f1:ee:c1:0a:2c:8f:e5:18:5c:
ba:c7:45:2e:c2:76:11:d5:f6:32:5b:4c:66:67:66:
3e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D3:C8:A3:74:76:F2:15:F4:60:CC:26:23:E0:28:4B:15:E5:A3:1A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b5ec0568-ce5c-41f8-ae3e-0c14783e4068.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:ae:df:64:82:35:9e:70:1e:68:ed:52:6c:93:a2:ca:7f:c0:
47:2f:5c:92:48:c6:6f:b3:2b:2f:b8:22:46:0c:2a:8e:84:fb:
6c:e3:33:68:cd:22:07:28:a3:17:5d:06:ca:86:2c:5d:81:85:
d8:62:ab:43:cc:3f:14:98:48:89:1d:82:6d:ea:46:3f:cf:92:
e1:02:8c:02:6f:4e:3b:c8:e8:50:c7:d4:fd:9c:62:4e:1c:57:
10:58:af:9a:10:1a:2f:e5:3d:3e:4f:02:6c:47:d9:8c:c2:1d:
e9:db:ab:db:63:94:dd:fb:2a:99:1b:78:b5:16:1d:ec:80:fe:
e2:1f:cc:a7:45:1e:5d:96:3d:c9:f1:48:3f:23:d3:8c:57:57:
14:8c:b7:b7:15:ee:24:9c:11:aa:31:46:9d:7a:af:94:7b:ef:
cb:bc:d9:82:13:ea:35:5d:2e:6a:37:56:e7:1c:7d:98:9b:bf:
d8:9f:79:b1:48:75:2a:53:f1:57:4a:5f:a6:88:17:aa:bc:98:
ce:fe:b1:c5:ed:30:38:de:da:ce:74:ec:e5:1a:35:d2:10:a8:
46:6a:06:ff:7b:a9:f9:00:93:c5:e1:21:df:33:77:16:a9:ad:
40:26:ec:ba:97:82:f6:90:2d:eb:fe:b3:de:74:19:01:76:5a:
f4:6e:06:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:08:54 2026 by rpki-client