Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c806309a-9e3e-4b0e-aad2-1356d070a437.roa
File: c806309a-9e3e-4b0e-aad2-1356d070a437.roa (raw, json)
Hash identifier: KJCkKEd+EAcCAVacRcmZQDbKuK+R+ARa+AE5lmryAgQ=
Subject key identifier: AD:97:F5:51:6E:84:D0:78:B9:97:EF:9C:6D:B8:67:0B:1D:12:0F:E6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3EAB1825FFF54E642E93DB7C2FF30E812406D167
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c806309a-9e3e-4b0e-aad2-1356d070a437.roa
Signing time: Sun 11 Oct 2026 15:20:20 +0000
ROA not before: Sun 11 Oct 2026 15:20:20 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a01:578:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:ab:18:25:ff:f5:4e:64:2e:93:db:7c:2f:f3:0e:81:24:06:d1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 11 15:20:20 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=f708754d6bb6273e791c0090f5d59eca8b3fe2632fc805f10882293a5ed2dfb5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:6c:90:51:93:77:17:77:99:09:99:d9:52:
51:e3:e8:a0:ab:0b:9b:d8:76:29:18:fa:5c:ad:6d:
ea:c5:a7:b3:eb:5f:72:7c:87:45:11:37:e9:22:ce:
09:bc:8c:cf:9c:c7:e1:c9:49:97:f9:b8:33:8d:a8:
16:4c:b2:c2:c9:bd:0f:83:ad:91:fe:4c:d2:eb:27:
29:23:73:e5:eb:3f:4a:a5:65:9a:f3:e7:64:b1:41:
f5:6c:af:1b:0f:2c:7c:f2:66:2e:57:56:2e:fe:18:
31:96:85:04:31:75:5c:22:92:9e:7c:26:f1:a5:fe:
7b:18:e4:63:0d:d8:34:f6:69:2e:9d:84:9e:4c:95:
b2:cc:3c:45:5e:63:1a:e0:44:21:6e:aa:e2:81:12:
65:49:91:61:39:8b:93:d6:4d:a4:8f:73:ad:4d:10:
0a:44:41:a9:b2:1a:24:03:7f:37:9f:dc:cb:fd:83:
36:51:bf:a7:02:bf:64:7b:28:68:05:0a:45:f4:28:
7f:77:cb:b1:3c:18:42:0c:db:a5:9f:43:88:77:da:
80:af:a4:d8:69:4b:7e:be:19:07:6f:56:31:66:29:
76:30:f5:f3:b6:89:73:aa:26:c7:a3:cb:cf:8c:bf:
d9:bc:ad:9f:11:40:51:e9:73:cb:aa:e8:09:71:aa:
e3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:97:F5:51:6E:84:D0:78:B9:97:EF:9C:6D:B8:67:0B:1D:12:0F:E6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c806309a-9e3e-4b0e-aad2-1356d070a437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:13::/48
Signature Algorithm: sha256WithRSAEncryption
c0:13:1f:26:33:35:c3:b1:7f:d5:79:a4:bc:77:84:eb:a2:9c:
43:a6:37:44:b0:47:e9:44:91:60:91:ad:54:3e:e1:47:6f:c4:
69:18:b2:1e:3a:b7:16:6c:3d:d3:0b:25:d6:45:df:ae:0e:c4:
ba:e8:a1:be:e7:51:10:d1:de:32:63:6b:b2:fd:25:93:d2:8c:
2b:88:62:49:90:42:7f:5a:a0:95:47:df:7d:96:2b:f6:36:81:
f4:c7:2b:f6:e5:c4:0b:70:27:36:a9:89:3c:dd:ac:31:a8:88:
4b:14:a1:2c:1c:0f:30:8c:04:ce:84:01:16:82:10:90:49:3d:
db:9a:31:ec:34:03:29:0e:36:f2:59:f4:6c:94:89:15:2a:78:
e3:8b:9a:f5:b2:ca:f5:f8:8a:36:e6:a2:83:b5:8b:5f:50:8c:
f5:06:d2:25:04:79:fb:0b:b5:a5:41:fa:1a:d2:9f:fc:63:ba:
96:a8:1e:43:e0:b9:b4:f4:32:cc:09:04:3f:e7:48:43:ed:9d:
96:5b:f1:ff:80:9c:03:96:51:15:c4:2c:b3:71:68:c0:f4:0b:
2e:d4:04:6a:42:c1:1c:25:da:31:d0:df:ed:28:47:fc:e2:c8:
da:a4:c6:d5:0b:cf:0d:a4:3f:2a:07:f5:8b:7f:b7:c5:70:8d:
67:be:58:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 16:52:51 2026 by rpki-client