Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c806309a-9e3e-4b0e-aad2-1356d070a437.roa
File: c806309a-9e3e-4b0e-aad2-1356d070a437.roa (raw, json)
Hash identifier: cUEM+JCbkUtS0F6lEpzBm2h4wEkZcMC9N+COJoOfP+o=
Subject key identifier: 8A:69:88:35:60:D4:73:90:BF:AC:ED:63:20:1F:98:6F:6B:C1:B1:9F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 507D9AC2DF64F26E8CEE789F2FFCD100235F909B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c806309a-9e3e-4b0e-aad2-1356d070a437.roa
Signing time: Thu 23 Jul 2026 15:30:38 +0000
ROA not before: Thu 23 Jul 2026 15:30:38 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a01:578:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:7d:9a:c2:df:64:f2:6e:8c:ee:78:9f:2f:fc:d1:00:23:5f:90:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:38 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=edbb9bfea2bc94dee0e2a37030324fdbb58c22c4aba1b462e32edcc2fcb6c1c7, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:45:eb:07:aa:88:e8:81:52:c9:3f:57:64:
fc:ad:bb:35:04:6b:fa:ec:8a:45:1b:aa:9f:36:79:
5e:33:c8:08:82:c0:2d:ab:e2:27:b2:48:9f:5c:7f:
d8:bc:1b:94:30:2e:e6:df:3d:7b:a6:54:52:5f:39:
c2:05:90:4f:52:be:18:75:81:0f:20:cd:4c:40:a0:
d1:90:94:12:6f:ad:91:7e:08:f9:9b:7c:77:b1:36:
4f:27:53:ea:dc:c5:65:4f:39:7f:f2:e4:99:16:0a:
9c:f2:a4:74:de:e9:61:5d:6f:25:5b:98:db:91:b2:
0a:9c:5a:77:f1:e2:15:5e:2b:81:30:d4:6e:32:e8:
2b:07:84:a7:f2:24:eb:f3:8d:ca:9f:9c:52:d1:de:
69:97:70:33:af:51:03:40:78:d3:2e:ed:c6:ec:fc:
99:b6:7c:39:52:48:f6:ce:f9:50:e6:4a:62:ee:c6:
76:a8:39:f6:d6:47:56:23:6a:63:f6:8f:29:66:f3:
6e:0b:78:bb:ae:0e:d3:76:fe:18:f7:9f:a2:70:28:
f5:e0:c4:77:56:f7:ee:d8:a6:b7:31:6a:5e:9d:cf:
07:65:06:e3:ac:b5:70:cc:d2:21:75:cc:0f:e9:24:
5b:06:ea:fc:b6:f6:92:f8:84:c7:73:8f:e9:ad:1f:
fb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:69:88:35:60:D4:73:90:BF:AC:ED:63:20:1F:98:6F:6B:C1:B1:9F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c806309a-9e3e-4b0e-aad2-1356d070a437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:578:13::/48
Signature Algorithm: sha256WithRSAEncryption
c5:5a:5d:4a:5e:3a:8d:e2:0d:e7:fb:bd:8e:c5:9e:e2:8b:10:
79:99:83:f5:a8:21:1f:79:b8:68:15:23:8c:b5:e5:61:ba:f3:
5b:df:19:62:d2:0a:dc:1c:94:b8:ef:8b:4a:8d:50:ba:e9:79:
e2:9a:fc:b3:1d:e7:38:8f:28:60:60:a1:f1:3e:ca:01:a1:17:
99:be:f3:aa:48:e5:a6:4a:f7:16:47:dc:3c:c0:c2:ee:75:18:
d2:e9:76:71:dd:2b:a2:15:f6:6a:48:d8:76:c1:ac:65:7b:21:
24:10:58:44:a3:c4:ee:17:64:2e:19:85:18:60:09:c6:b9:c6:
10:2c:ea:03:fb:09:2a:c8:ec:1b:90:84:77:66:51:02:f0:b8:
54:2b:54:ae:53:4a:89:bd:2f:82:54:33:ba:d1:f1:f7:3c:ed:
df:4b:8f:c6:f3:88:f2:07:3a:3d:86:7b:b3:f6:1e:4a:84:bf:
29:12:14:cd:9b:36:5a:bf:07:84:27:af:8e:ab:0d:35:e6:64:
e9:70:20:87:7d:72:b6:84:32:fb:e3:a1:8d:53:14:93:d0:8a:
c6:93:c5:80:4e:8a:26:6f:b1:03:8d:dd:f2:e5:50:64:a0:45:
8c:a6:83:a4:c0:92:87:3a:f9:ae:2c:9f:4c:89:f7:b2:84:10:
1a:49:ae:3a
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUUH2awt9k8m6M7nifL/zRACNfkJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA3MjMxNTMwMzhaFw0yNjEwMjEyMzU5NTlaMHoxSTBHBgNV
BAUTQGVkYmI5YmZlYTJiYzk0ZGVlMGUyYTM3MDMwMzI0ZmRiYjU4YzIyYzRhYmEx
YjQ2MmUzMmVkY2MyZmNiNmMxYzcxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMGTResHqojogVLJP1dk/K27NQRr+uyKRRuqnzZ5XjPICILALaviJ7JIn1x/
2LwblDAu5t89e6ZUUl85wgWQT1K+GHWBDyDNTECg0ZCUEm+tkX4I+Zt8d7E2TydT
6tzFZU85f/LkmRYKnPKkdN7pYV1vJVuY25GyCpxad/HiFV4rgTDUbjLoKweEp/Ik
6/ONyp+cUtHeaZdwM69RA0B40y7txuz8mbZ8OVJI9s75UOZKYu7Gdqg59tZHViNq
Y/aPKWbzbgt4u64O03b+GPefonAo9eDEd1b37timtzFqXp3PB2UG46y1cMzSIXXM
D+kkWwbq/Lb2kviEx3OP6a0f+y0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSKaYg1
YNRzkL+s7WMgH5hva8GxnzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
YzgwNjMwOWEtOWUzZS00YjBlLWFhZDItMTM1NmQwNzBhNDM3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoBBXgA
EzANBgkqhkiG9w0BAQsFAAOCAQEAxVpdSl46jeIN5/u9jsWe4osQeZmD9aghH3m4
aBUjjLXlYbrzW98ZYtIK3ByUuO+LSo1Quul54pr8sx3nOI8oYGCh8T7KAaEXmb7z
qkjlpkr3FkfcPMDC7nUY0ul2cd0rohX2akjYdsGsZXshJBBYRKPE7hdkLhmFGGAJ
xrnGECzqA/sJKsjsG5CEd2ZRAvC4VCtUrlNKib0vglQzutHx9zzt30uPxvOI8gc6
PYZ7s/YeSoS/KRIUzZs2Wr8HhCevjqsNNeZk6XAgh31ytoQy++OhjVMUk9CKxpPF
gE6KJm+xA43d8uVQZKBFjKaDpMCShzr5riyfTIn3soQQGkmuOg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:26:17 2026 by rpki-client