Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa
File: bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa (raw, json)
Hash identifier: Xqi0bEvSpihUNv0jeTE1LSPwxc4C4KABARPRCwLy+kY=
Subject key identifier: F2:50:C3:4F:1E:4B:06:7B:5F:89:D9:AC:DA:B4:D3:69:59:7E:4A:40
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4434493487B896D621D307649B2AC2A2F175265D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa
Signing time: Thu 23 Jul 2026 15:30:14 +0000
ROA not before: Thu 23 Jul 2026 15:30:14 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 83.118.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:34:49:34:87:b8:96:d6:21:d3:07:64:9b:2a:c2:a2:f1:75:26:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:14 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=dcdead505e020e9ef3dfe6228183d6c02b308975b8c3a11e3fb12dea3d18fb43, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:3d:ee:4f:a3:dd:3c:2e:2b:fc:67:52:8d:
0f:0c:9d:57:19:2a:7b:ba:25:4e:81:49:22:3a:3b:
50:2d:29:c2:9c:01:0a:36:23:ee:2d:a7:1d:90:ec:
6c:c6:8c:b0:a1:c7:26:39:be:dd:45:2e:1b:e4:73:
d4:c8:df:23:a7:1b:22:c0:a6:63:b6:bc:7a:34:68:
76:74:e9:e8:cf:14:db:70:56:63:1d:13:5f:12:bb:
6e:cc:2b:4e:6f:35:2e:8d:8c:12:54:d9:cf:38:2c:
87:14:c8:39:a3:66:51:99:d3:d5:84:64:cd:42:95:
8d:f3:0c:5b:c5:47:6f:e6:34:b3:bf:5b:e6:8a:85:
03:6f:3b:88:62:64:ee:5a:17:20:05:56:ff:47:86:
17:ed:a6:2c:7d:5f:e0:88:b4:72:be:81:85:f1:08:
e2:46:dd:ce:8f:6b:e0:13:ce:01:7d:eb:9e:00:03:
a1:a2:04:8b:7c:55:37:19:bb:30:9c:21:66:9a:1c:
e0:6f:15:f4:58:47:02:be:0d:f2:28:25:92:3a:1f:
0e:9e:c8:76:d2:bd:38:fc:1f:d4:c8:84:18:9d:77:
f3:21:67:65:28:c4:ea:d1:d5:2b:a9:0c:23:86:74:
28:69:1e:05:70:08:55:1c:38:af:3c:b7:91:25:8b:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:50:C3:4F:1E:4B:06:7B:5F:89:D9:AC:DA:B4:D3:69:59:7E:4A:40
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.234.0/23
Signature Algorithm: sha256WithRSAEncryption
48:38:8c:a7:e1:9f:f0:d1:8c:68:71:3f:86:bc:f4:71:fd:09:
96:20:4d:76:0f:a7:f4:83:46:29:82:42:c5:f1:23:1f:f3:d3:
58:57:5d:e6:01:3f:53:c3:71:23:99:c5:29:e9:47:e3:a4:d9:
11:81:83:e9:07:6f:2f:29:5f:39:f6:da:1f:a4:99:7b:bc:a1:
d0:50:0d:af:ed:86:c2:83:b1:11:62:e0:0c:02:ac:40:2a:ee:
53:e8:05:f6:6d:df:26:b3:fd:e7:b0:90:2d:7b:5a:64:5a:15:
07:c4:08:49:9c:b6:50:d1:04:66:83:97:4a:60:45:aa:3d:06:
ff:c5:3a:9b:0f:a1:4f:76:63:70:77:fb:21:ba:86:5f:f1:b0:
9a:52:b6:34:15:38:a1:e2:da:93:ef:fa:80:b6:69:8b:7e:a3:
88:38:e5:56:ef:5e:38:09:d7:d3:4d:96:cc:f5:1c:5e:1f:90:
e3:d1:0d:4d:b3:75:ec:9d:90:75:44:7d:59:75:32:ab:49:63:
ee:24:cc:e5:d2:b7:fe:72:f8:2c:d1:63:18:12:e8:78:fe:cc:
1d:46:40:31:cb:25:0e:0d:12:59:81:b8:92:b1:8e:97:40:67:
84:f8:3c:ce:1a:c0:d2:1e:5b:c4:10:26:f1:5b:8d:13:ab:36:
61:31:20:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:42:04 2026 by rpki-client