Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dc5d2309-ce0f-4816-b8d0-260ce079f694.roa
File: dc5d2309-ce0f-4816-b8d0-260ce079f694.roa (raw, json)
Hash identifier: 8sENtB/ljx+1FFFexqn7Fsbkmxafg3N7Rcbbsg8Xpao=
Subject key identifier: 57:98:75:70:61:D5:13:AD:43:83:A7:47:7B:28:CA:4F:E0:30:EF:A6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 22129D4F8AFB36B6ACE429AEDEA0CA6A517E3763
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dc5d2309-ce0f-4816-b8d0-260ce079f694.roa
Signing time: Mon 26 Oct 2026 05:40:24 +0000
ROA not before: Mon 26 Oct 2026 05:40:24 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 212.255.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:12:9d:4f:8a:fb:36:b6:ac:e4:29:ae:de:a0:ca:6a:51:7e:37:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:24 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=007f9eccacf79ca0066c1dbe24f68b44c1ea30a650be9df00457e749dfd4a220, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a4:f6:50:2b:a4:09:ee:f2:7f:3c:13:c1:30:
ff:6a:ee:b2:42:12:ef:34:14:da:a8:51:69:ac:23:
20:b9:67:9a:d0:1e:d2:5b:fa:c9:c4:f9:4f:50:b8:
c0:57:26:1c:66:a3:76:35:df:25:71:a8:36:22:7f:
72:d5:92:b9:55:e7:34:07:73:69:30:19:a6:02:43:
6e:55:5a:16:b0:6b:fe:1f:87:ca:14:70:86:1f:b2:
00:e6:41:87:27:43:30:0f:6c:37:e7:e2:72:2a:ba:
5d:56:cd:0b:c5:c4:0d:6d:8b:14:df:8f:1c:cd:e8:
17:81:60:3f:60:04:22:2f:28:14:de:51:60:ff:be:
3a:c5:1f:9f:80:8a:b4:78:eb:44:82:3b:52:ba:3d:
5f:85:aa:55:87:79:38:b1:f3:33:e2:af:c4:60:7d:
51:8a:9a:d9:dd:a8:c0:23:ed:5c:0b:1f:05:4e:dc:
04:13:f8:eb:d0:b7:a9:39:dd:52:ba:38:e1:f7:6d:
ed:26:17:2d:56:4f:3f:d5:28:e8:46:64:9d:04:fb:
cd:bf:47:db:d3:08:58:31:7a:fd:da:80:6c:3e:12:
00:f0:b5:94:79:14:e1:2c:0c:6d:25:ca:e5:2f:13:
98:35:d7:01:dc:b5:a2:cb:ad:30:60:fe:3c:8b:73:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:98:75:70:61:D5:13:AD:43:83:A7:47:7B:28:CA:4F:E0:30:EF:A6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dc5d2309-ce0f-4816-b8d0-260ce079f694.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.255.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:21:8e:d2:42:4c:99:d1:96:61:8e:9e:5c:26:6f:b4:73:69:
6f:46:98:f7:0d:55:6a:d9:fe:49:90:96:7f:1c:e7:58:c4:0b:
65:99:29:d1:5c:8f:c7:d4:9e:eb:05:fe:8f:cf:76:34:9d:6e:
b1:e4:fc:43:93:4d:59:c1:da:40:c0:30:a9:f3:52:4d:b6:38:
9b:98:b8:8d:31:aa:21:14:38:e9:4d:5f:67:94:cc:c9:88:8a:
9a:7d:38:d1:d1:2d:d4:96:6d:78:17:dd:58:b3:94:15:6d:95:
99:dd:43:a3:16:4f:94:42:86:5a:c9:05:3d:cd:a8:a7:52:0b:
f6:b7:95:e7:f6:bc:4e:40:bb:05:6f:c5:dd:98:70:f1:55:5b:
29:8b:d6:0b:0e:cd:05:f7:9c:1b:97:c0:74:c0:d0:30:e6:b4:
74:2d:e1:5a:d1:03:87:0c:5e:e0:5e:c6:a4:5c:01:f2:f6:55:
99:73:f7:70:1c:5d:a4:2b:33:4f:d2:c2:3b:39:3f:be:6c:ef:
86:8d:37:66:1c:90:c7:ed:b9:4a:69:32:ba:85:16:4c:64:a4:
e1:f9:2d:b4:f3:c0:0e:31:cf:94:73:29:2a:6b:b5:a6:b4:c2:
d2:c2:e3:74:41:09:2b:95:51:af:36:b0:6e:7d:b0:e7:03:c6:
eb:22:cf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:09:29 2026 by rpki-client