Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d371c773-1aa2-4d5b-9804-ea5d64fadc0a.roa
File: d371c773-1aa2-4d5b-9804-ea5d64fadc0a.roa (raw, json)
Hash identifier: d5I1eTXwbgOKXNwCAWoQjmcHQEWjDcftZDK7D8ONgvk=
Subject key identifier: C8:0D:FB:DD:AB:CF:9C:D8:0C:8A:02:85:88:03:8F:F6:40:7B:81:37
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 55D7BD6139ED7D267226F81BCD0BDC1668AF9660
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d371c773-1aa2-4d5b-9804-ea5d64fadc0a.roa
Signing time: Mon 26 Oct 2026 05:50:44 +0000
ROA not before: Mon 26 Oct 2026 05:50:44 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 143.65.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d7:bd:61:39:ed:7d:26:72:26:f8:1b:cd:0b:dc:16:68:af:96:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:44 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=21a2f76a8184478c65b338678c08552eb73aacc7b0af35f5733ab72b67538eeb, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:56:24:df:38:ed:e3:7e:74:c0:20:c3:99:
ed:fc:73:df:e0:07:49:4a:d7:f7:ed:5a:f2:49:c2:
23:7c:01:2f:4c:bc:f2:e7:2d:86:56:54:f7:d5:d0:
78:2e:7c:e6:30:37:8d:fe:1a:6a:5a:bd:cf:53:70:
12:ea:2b:db:fb:4a:7c:af:45:a9:63:75:e8:49:41:
67:9d:68:a8:7c:80:32:ec:0b:f2:75:64:4f:63:21:
a0:bd:2c:6e:0e:66:87:fa:8b:be:b8:01:44:67:4e:
5e:ca:dd:9d:1f:dd:fc:e2:fd:61:ca:15:d0:ba:07:
b6:c7:7e:20:69:34:94:15:bb:8f:9e:c2:30:c4:29:
dc:36:5d:49:01:82:26:63:a0:cc:d9:eb:a0:c9:12:
20:13:08:9d:7a:4b:35:b6:db:34:6a:aa:e3:fe:65:
25:93:0e:2f:1b:ee:a7:0e:28:58:eb:88:0b:ac:17:
e7:d6:b9:70:16:9f:9f:5b:c1:7a:85:3a:fb:79:fc:
f9:0d:39:62:31:ba:79:b9:43:0b:b8:9e:70:02:25:
78:6b:dc:31:90:18:b6:5e:56:1d:0a:f6:a3:a2:fe:
06:9f:50:9c:82:58:53:1d:94:7d:ba:31:de:6b:c8:
f3:18:1b:94:7e:60:bd:79:a4:6b:eb:55:5a:75:79:
49:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0D:FB:DD:AB:CF:9C:D8:0C:8A:02:85:88:03:8F:F6:40:7B:81:37
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/d371c773-1aa2-4d5b-9804-ea5d64fadc0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.65.224.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:be:4a:6b:74:2f:89:26:e0:37:7c:1b:fb:a0:96:f2:71:b2:
29:0c:98:f3:30:97:88:1f:c7:28:a2:3e:00:33:10:ed:e8:c6:
14:48:85:af:2e:cb:24:7f:4c:96:1c:cc:98:4b:d7:8b:88:e8:
66:71:98:7e:a2:0f:b8:2c:da:b8:fd:ff:72:81:be:69:27:29:
1d:f2:9e:39:c3:fe:5e:97:ee:6e:0f:3e:41:74:9c:43:fb:62:
ec:62:27:c7:9e:08:e5:fb:cb:ff:73:88:b0:c0:a9:04:1a:e8:
71:a1:6b:97:a2:40:0d:d7:5f:06:c9:a0:96:08:d1:ce:36:88:
19:be:88:ba:46:07:cb:7f:41:98:6b:4f:ef:17:8e:85:a2:10:
d7:a1:10:c3:16:cc:9f:de:a3:9d:9e:c6:ec:72:87:80:99:c6:
e9:c4:83:b6:f9:87:80:df:41:69:06:5b:0c:6f:0c:6c:a1:7f:
7f:7e:63:eb:b3:88:28:0c:e7:38:ca:ea:ef:48:5d:d1:a9:90:
4e:76:5b:57:82:4d:75:14:85:22:9b:e9:15:ee:e8:08:53:8b:
3f:95:fb:17:48:94:2d:c8:12:a8:fb:bc:46:6f:56:75:93:34:
8d:8b:55:3b:e8:62:15:29:a8:01:34:a0:2e:e7:6a:6c:50:78:
45:d7:53:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:47:59 2026 by rpki-client