Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
File: b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa (raw, json)
Hash identifier: 9WFqQ8k/ZRG6R5iffdQmG/5+72kYSva7li2IgukTw6A=
Subject key identifier: 88:E5:D4:13:40:1A:C1:84:01:31:8E:C4:CE:69:38:E8:DC:EC:67:6B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 20397AFE90CCA1B3B3D4D854151493370483D181
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
Signing time: Fri 26 Sep 2025 20:39:24 +0000
ROA not before: Fri 26 Sep 2025 20:39:24 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.85.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:39:7a:fe:90:cc:a1:b3:b3:d4:d8:54:15:14:93:37:04:83:d1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 26 20:39:24 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=c7e8031176d66d10e7807b5969093a34b6e9388a68b26db01b783797c987d1bb, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:53:e4:4a:25:1b:cb:36:30:57:2a:80:ac:
05:6d:96:17:ee:5a:43:3f:50:c2:42:7a:1e:dc:4b:
0c:65:6f:1c:6c:f8:48:9d:4b:1a:44:cf:9a:38:57:
67:7f:5a:45:c4:be:d2:66:4c:7f:6c:c6:b3:cb:ef:
2c:bb:9e:b2:bd:0b:8c:12:f6:7e:c7:65:aa:cc:13:
f0:71:22:82:f8:83:e2:98:d8:c4:96:ab:12:31:eb:
ac:96:3e:04:f0:44:80:99:1b:d5:63:12:86:4d:bc:
ff:ff:9e:b4:26:f1:81:2d:c9:a1:c6:c9:27:96:24:
35:0e:dc:6f:c9:1b:e6:ea:22:6c:da:98:27:0b:9e:
51:6a:28:6f:9f:8a:74:fd:32:cb:11:a7:b5:0c:12:
8f:9d:fc:5a:32:39:14:f6:b3:2a:6e:25:32:f6:9b:
a3:f5:2d:9c:5f:d1:0b:03:80:e5:59:bd:e0:9e:38:
ca:e9:27:ad:51:ab:bb:49:d3:be:46:d9:ea:c1:74:
3e:04:34:3a:a2:68:37:83:24:a5:86:dc:51:f7:79:
b0:6b:2c:e2:8f:94:89:6c:cd:87:88:d8:22:48:c9:
9f:fd:08:2a:c5:8b:0e:12:58:13:7e:59:19:78:03:
8b:2c:d5:60:03:98:50:43:87:7e:8d:53:60:67:36:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E5:D4:13:40:1A:C1:84:01:31:8E:C4:CE:69:38:E8:DC:EC:67:6B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:0c:5e:d2:16:6d:8f:19:c0:06:64:c4:43:37:16:13:92:56:
ae:1e:2c:f3:a1:d0:cc:da:a8:bd:ed:23:3e:cf:f3:f8:2f:ad:
c2:78:80:20:13:72:d5:c8:af:76:ed:85:d6:29:74:bf:cb:91:
03:0b:81:15:74:e6:a6:f0:36:96:52:8b:bb:e1:05:c1:6b:39:
e8:04:10:81:ef:92:71:5c:16:45:94:cc:39:e8:40:01:0f:1c:
ce:05:c1:2c:1a:39:dc:be:bf:ec:77:ad:8f:ec:08:e4:7f:b6:
48:69:db:d9:3a:28:99:ea:63:9d:75:ab:c5:45:c3:eb:0c:6a:
d2:5f:03:fe:e1:53:77:89:09:53:cb:c7:6a:a7:14:c2:f3:38:
d4:91:a0:17:eb:b8:3f:fc:05:f6:f3:6b:75:de:79:6d:1b:1b:
6e:ed:cc:04:20:0c:bf:43:d1:89:a8:72:38:9f:47:95:e8:23:
94:14:2e:d2:70:fe:99:4e:4e:e9:35:3d:78:54:35:3e:73:c0:
90:5a:56:e8:33:ee:c8:91:40:fb:29:5f:0a:5e:76:7f:92:fc:
53:1c:25:08:60:e3:15:d1:ea:3f:97:17:7d:f4:82:07:ca:10:
0c:36:f1:9f:45:63:73:1a:f1:98:82:6a:22:1c:cd:67:5f:1b:
ec:3a:dc:b4
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUIDl6/pDMobOz1NhUFRSTNwSD0YEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA5MjYyMDM5MjRaFw0yNTEwMzEyMzU5NTlaMHoxSTBHBgNV
BAUTQGM3ZTgwMzExNzZkNjZkMTBlNzgwN2I1OTY5MDkzYTM0YjZlOTM4OGE2OGIy
NmRiMDFiNzgzNzk3Yzk4N2QxYmIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMzmU+RKJRvLNjBXKoCsBW2WF+5aQz9QwkJ6HtxLDGVvHGz4SJ1LGkTPmjhX
Z39aRcS+0mZMf2zGs8vvLLuesr0LjBL2fsdlqswT8HEigviD4pjYxJarEjHrrJY+
BPBEgJkb1WMShk28//+etCbxgS3JocbJJ5YkNQ7cb8kb5uoibNqYJwueUWoob5+K
dP0yyxGntQwSj538WjI5FPazKm4lMvabo/UtnF/RCwOA5Vm94J44yuknrVGru0nT
vkbZ6sF0PgQ0OqJoN4MkpYbcUfd5sGss4o+UiWzNh4jYIkjJn/0IKsWLDhJYE35Z
GXgDiyzVYAOYUEOHfo1TYGc2VRkCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSI5dQT
QBrBhAExjsTOaTjo3OxnazAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
Yjk0YzAxYWItNzhjOS00ZGVhLTg2MDUtMjA2ZWRmNGY0YWMzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADlVMA0G
CSqGSIb3DQEBCwUAA4IBAQCaDF7SFm2PGcAGZMRDNxYTklauHizzodDM2qi97SM+
z/P4L63CeIAgE3LVyK927YXWKXS/y5EDC4EVdOam8DaWUou74QXBaznoBBCB75Jx
XBZFlMw56EABDxzOBcEsGjncvr/sd62P7Ajkf7ZIadvZOiiZ6mOddavFRcPrDGrS
XwP+4VN3iQlTy8dqpxTC8zjUkaAX67g//AX282t13nltGxtu7cwEIAy/Q9GJqHI4
n0eV6COUFC7ScP6ZTk7pNT14VDU+c8CQWlboM+7IkUD7KV8KXnZ/kvxTHCUIYOMV
0eo/lxd99IIHyhAMNvGfRWNzGvGYgmoiHM1nXxvsOty0
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:04:28 2025 by rpki-client