Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e1d9282c-1734-4426-ab04-111f2637372c.roa
File: e1d9282c-1734-4426-ab04-111f2637372c.roa (raw, json)
Hash identifier: QX2i1zLH5W8VBwcR+mVQKGOD7qabQ47SrLu6K19RZz4=
Subject key identifier: 41:72:FC:BD:EE:0A:29:09:EF:F9:16:63:9A:5C:84:68:27:92:F3:A9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 757181E6ABD8810B103719900B120B35DDBA69A8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e1d9282c-1734-4426-ab04-111f2637372c.roa
Signing time: Tue 27 Oct 2026 01:02:14 +0000
ROA not before: Tue 27 Oct 2026 01:02:14 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 212.173.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:71:81:e6:ab:d8:81:0b:10:37:19:90:0b:12:0b:35:dd:ba:69:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 27 01:02:14 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=4d7a00d6f69bfb04dc885199f54ab6ae35101d62ca6af0015dd7b8b7cde2244c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:bb:35:1a:10:73:c9:94:29:eb:52:ac:ba:
b3:3d:de:2a:d8:b1:8d:e7:7d:f8:c3:a8:fe:2d:a0:
20:e8:36:3d:b0:f9:0b:b9:8f:44:c8:14:2d:f6:2f:
d6:8e:00:af:6c:a5:1b:40:08:ca:b8:37:18:84:87:
4f:bf:46:0c:2f:58:4b:b1:e1:49:f0:e2:66:13:51:
af:6a:b2:25:9f:4f:ce:5d:7b:0d:7e:92:e9:5b:a4:
ca:26:8a:6b:b8:90:86:f3:0c:71:32:8a:7b:6a:06:
95:12:30:29:c4:dd:de:98:26:df:1f:e5:bd:d2:cb:
c0:bc:21:fc:43:2c:06:de:09:b9:35:ca:c0:3d:12:
49:62:62:11:44:ee:13:c9:c8:83:51:0e:61:35:1f:
41:74:a9:0e:d6:64:c7:9c:d0:a0:01:0e:4f:33:e7:
30:52:ea:c3:73:d7:b1:20:71:68:46:a0:01:b4:2e:
87:8c:ed:45:30:68:0d:28:05:1f:63:54:e8:7e:57:
14:c4:17:b7:b1:5e:2f:8d:6c:6f:a6:f2:1c:23:fe:
fb:66:81:08:92:ef:6e:5a:e4:21:f2:ed:d0:d8:e5:
7c:33:b6:7a:54:2d:ed:69:07:8c:9a:8c:c0:0f:eb:
20:89:c9:45:49:92:15:2a:c1:85:62:81:73:45:ff:
2f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:72:FC:BD:EE:0A:29:09:EF:F9:16:63:9A:5C:84:68:27:92:F3:A9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e1d9282c-1734-4426-ab04-111f2637372c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.173.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1a:32:27:99:ad:66:c6:88:f0:4a:f3:57:f6:71:d2:db:d3:91:
a6:ba:ce:05:08:33:17:19:b1:dd:35:7d:d1:78:f9:42:26:dd:
25:c6:ca:e6:da:36:fb:07:4c:bc:c7:07:51:79:31:0a:27:3f:
36:fa:79:ad:d5:10:a6:b3:f3:0a:ed:b6:e2:19:c1:2a:3e:70:
2c:e2:69:b0:e0:25:25:e2:40:91:35:ae:d0:06:ab:6a:44:df:
30:b7:03:94:bc:06:93:5f:de:5b:7a:22:d3:95:23:58:d8:92:
ab:51:e3:0b:e8:6a:7c:b1:46:db:8a:79:2b:4e:c8:50:14:79:
b8:37:a6:c4:42:f5:1f:18:49:cd:69:7c:c7:6f:0a:e3:83:cc:
c0:19:11:b3:ae:22:f1:f7:97:65:96:8a:08:08:db:e6:c0:07:
d2:7d:7b:c7:0c:88:c5:8b:d6:d9:c3:67:dd:6f:89:a3:02:21:
b1:dc:bc:5a:b8:c5:1b:d4:b0:f9:3a:8f:53:ab:c9:ad:93:d3:
ec:41:31:f9:b7:c5:0f:72:2c:88:04:ef:76:71:d7:06:72:0e:
32:b4:1a:57:3e:2c:ff:7c:2d:1a:65:0f:e7:3a:5d:08:3b:61:
96:d9:29:f1:55:22:f9:46:fa:0c:7a:97:df:20:81:6b:a4:66:
af:0c:0d:e9
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUdXGB5qvYgQsQNxmQCxILNd26aagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjcwMTAyMTRaFw0yNzAxMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDRkN2EwMGQ2ZjY5YmZiMDRkYzg4NTE5OWY1NGFiNmFlMzUxMDFkNjJjYTZh
ZjAwMTVkZDdiOGI3Y2RlMjI0NGMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKNQuzUaEHPJlCnrUqy6sz3eKtixjed9+MOo/i2gIOg2PbD5C7mPRMgULfYv
1o4Ar2ylG0AIyrg3GISHT79GDC9YS7HhSfDiZhNRr2qyJZ9Pzl17DX6S6VukyiaK
a7iQhvMMcTKKe2oGlRIwKcTd3pgm3x/lvdLLwLwh/EMsBt4JuTXKwD0SSWJiEUTu
E8nIg1EOYTUfQXSpDtZkx5zQoAEOTzPnMFLqw3PXsSBxaEagAbQuh4ztRTBoDSgF
H2NU6H5XFMQXt7FeL41sb6byHCP++2aBCJLvblrkIfLt0NjlfDO2elQt7WkHjJqM
wA/rIInJRUmSFSrBhWKBc0X/L6ECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRBcvy9
7gopCe/5FmOaXIRoJ5LzqTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZTFkOTI4MmMtMTczNC00NDI2LWFiMDQtMTExZjI2MzczNzJjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9StgDAN
BgkqhkiG9w0BAQsFAAOCAQEAGjInma1mxojwSvNX9nHS29ORprrOBQgzFxmx3TV9
0Xj5QibdJcbK5to2+wdMvMcHUXkxCic/Nvp5rdUQprPzCu224hnBKj5wLOJpsOAl
JeJAkTWu0AarakTfMLcDlLwGk1/eW3oi05UjWNiSq1HjC+hqfLFG24p5K07IUBR5
uDemxEL1HxhJzWl8x28K44PMwBkRs64i8feXZZaKCAjb5sAH0n17xwyIxYvW2cNn
3W+JowIhsdy8WrjFG9Sw+TqPU6vJrZPT7EEx+bfFD3IsiATvdnHXBnIOMrQaVz4s
/3wtGmUP5zpdCDthltkp8VUi+Ub6DHqX3yCBa6RmrwwN6Q==
-----END CERTIFICATE-----
Generated at Thu Nov 12 20:33:32 2026 by rpki-client