Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e3a37277-f023-468b-8a43-2519fccedc3e.roa
File: e3a37277-f023-468b-8a43-2519fccedc3e.roa (raw, json)
Hash identifier: mkWvtqWGCXA1gFPdZSVNTrdBBPnhWwphBggwjgHErJw=
Subject key identifier: E9:A1:49:DC:D6:BD:AC:00:E5:6C:19:23:C3:1E:77:32:AD:55:51:90
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 51526A66E842BD5D8C37D2E8709154A3ABD87053
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e3a37277-f023-468b-8a43-2519fccedc3e.roa
Signing time: Thu 23 Jul 2026 15:30:15 +0000
ROA not before: Thu 23 Jul 2026 15:30:15 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 85.213.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:52:6a:66:e8:42:bd:5d:8c:37:d2:e8:70:91:54:a3:ab:d8:70:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:15 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=a48f55cec905fb07849f5f3882a51a3c977fed0032b3ab7accc03f2aea01d8db, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:64:e2:94:9a:90:23:62:fc:ad:27:5a:16:f1:
64:6e:d0:93:5f:f4:f3:b4:eb:5f:9f:6d:45:71:df:
9b:63:69:52:a3:38:57:bc:70:a3:12:4e:6b:3f:65:
64:f1:6a:96:fe:16:a1:4b:0a:7a:33:7d:74:f9:90:
d9:f4:d5:c4:78:d9:85:b3:f7:30:ed:f9:53:96:d4:
59:40:08:9e:0e:ec:64:4f:d7:67:26:6a:a3:6a:32:
4a:2e:57:0e:c7:4d:bb:b7:7f:71:9e:29:0b:70:e0:
05:ab:64:b2:1d:46:89:55:d4:62:d9:4c:42:85:af:
46:32:21:6f:62:bf:c9:71:3c:b5:8b:00:a1:43:72:
1b:df:78:1f:5e:0d:db:5e:45:46:90:d6:1c:84:ba:
27:bf:d4:59:39:7e:22:4c:44:8d:9d:42:0f:4e:aa:
d5:55:a6:db:01:e6:52:d1:8b:9a:4d:04:f2:20:12:
8a:6f:44:9d:d0:b8:0e:21:d4:90:51:5e:ad:e8:1b:
27:af:1e:e3:d1:dc:23:82:02:f7:66:dc:b9:52:fa:
fb:b1:00:f0:aa:ef:55:a4:6b:7f:f0:83:81:b3:6c:
f2:cc:ce:b9:d2:27:f0:87:93:f9:7d:55:50:df:96:
92:82:33:ab:c8:08:f6:fa:de:e4:ce:77:86:6b:bf:
4e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A1:49:DC:D6:BD:AC:00:E5:6C:19:23:C3:1E:77:32:AD:55:51:90
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e3a37277-f023-468b-8a43-2519fccedc3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.213.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:cc:e8:1c:8f:c4:00:ef:10:b0:0e:ce:8f:89:01:1b:71:e5:
73:e5:24:3c:e8:4a:58:69:b2:15:51:af:7e:31:35:36:b7:d8:
26:a3:f8:80:b8:0c:c3:03:a8:c6:4d:97:e7:8c:de:03:05:8e:
d2:ce:ce:65:36:bb:76:a8:a5:a9:38:f0:40:e7:f7:24:cd:a1:
14:68:56:a3:9c:ea:1b:e2:59:4e:b4:85:29:47:7c:c3:60:3d:
f7:7a:77:ce:ef:84:41:45:2e:18:8d:c6:d5:2c:0c:53:a9:60:
1e:30:f2:de:0e:29:cb:0f:e1:15:4d:3b:00:ef:33:ee:a0:21:
48:96:30:44:73:20:1d:f9:19:25:f5:c6:b6:59:99:bb:d8:9b:
11:9a:86:58:2e:53:8e:b4:c0:2c:2c:f4:70:0a:d1:d3:75:af:
65:ce:68:db:09:35:8d:72:d2:72:40:cc:54:28:8f:29:1d:d8:
c1:b6:66:0e:4c:28:8b:3c:f2:16:79:19:a9:9f:44:d0:3c:c6:
ae:47:23:4f:a8:62:62:b6:d4:37:7e:6b:c9:69:5b:29:78:f2:
bb:4d:81:72:71:19:b1:79:0c:96:2d:c6:e9:5b:05:70:ba:21:
bb:fa:db:1e:52:9f:28:da:7c:b7:b4:85:10:8e:16:35:a5:be:
0d:2c:d5:c9
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUUVJqZuhCvV2MN9LocJFUo6vYcFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA3MjMxNTMwMTVaFw0yNjEwMjEyMzU5NTlaMHoxSTBHBgNV
BAUTQGE0OGY1NWNlYzkwNWZiMDc4NDlmNWYzODgyYTUxYTNjOTc3ZmVkMDAzMmIz
YWI3YWNjYzAzZjJhZWEwMWQ4ZGIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANtk4pSakCNi/K0nWhbxZG7Qk1/087TrX59tRXHfm2NpUqM4V7xwoxJOaz9l
ZPFqlv4WoUsKejN9dPmQ2fTVxHjZhbP3MO35U5bUWUAIng7sZE/XZyZqo2oySi5X
DsdNu7d/cZ4pC3DgBatksh1GiVXUYtlMQoWvRjIhb2K/yXE8tYsAoUNyG994H14N
215FRpDWHIS6J7/UWTl+IkxEjZ1CD06q1VWm2wHmUtGLmk0E8iASim9EndC4DiHU
kFFeregbJ68e49HcI4IC92bcuVL6+7EA8KrvVaRrf/CDgbNs8szOudIn8IeT+X1V
UN+WkoIzq8gI9vre5M53hmu/Tl0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTpoUnc
1r2sAOVsGSPDHncyrVVRkDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZTNhMzcyNzctZjAyMy00NjhiLThhNDMtMjUxOWZjY2VkYzNlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAFXVMA0G
CSqGSIb3DQEBCwUAA4IBAQAFzOgcj8QA7xCwDs6PiQEbceVz5SQ86EpYabIVUa9+
MTU2t9gmo/iAuAzDA6jGTZfnjN4DBY7Szs5lNrt2qKWpOPBA5/ckzaEUaFajnOob
4llOtIUpR3zDYD33enfO74RBRS4YjcbVLAxTqWAeMPLeDinLD+EVTTsA7zPuoCFI
ljBEcyAd+Rkl9ca2WZm72JsRmoZYLlOOtMAsLPRwCtHTda9lzmjbCTWNctJyQMxU
KI8pHdjBtmYOTCiLPPIWeRmpn0TQPMauRyNPqGJittQ3fmvJaVspePK7TYFycRmx
eQyWLcbpWwVwuiG7+tseUp8o2ny3tIUQjhY1pb4NLNXJ
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:03 2026 by rpki-client