Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e6379fd6-eaa8-4348-8280-afb9b8552668.roa
File: e6379fd6-eaa8-4348-8280-afb9b8552668.roa (raw, json)
Hash identifier: PUS/OOenhbCXqkITcJPYE9Tt/yfPMapedWtmkdX2FnI=
Subject key identifier: 90:FC:E6:FF:76:3E:A0:3A:B9:2E:25:B8:DC:5E:7E:19:94:A8:A2:BC
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7A289BA5841DA4CD3F4C85966C917E9024A7AEA6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e6379fd6-eaa8-4348-8280-afb9b8552668.roa
Signing time: Thu 16 Jul 2026 00:40:33 +0000
ROA not before: Thu 16 Jul 2026 00:40:33 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 7224
IP address blocks: 83.118.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:28:9b:a5:84:1d:a4:cd:3f:4c:85:96:6c:91:7e:90:24:a7:ae:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 16 00:40:33 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=7d6c34ea6cc2205a53609550f1ec5083d92f9a19d3bdd5824803d5a197eafe3a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:c4:96:e1:d4:3f:6a:29:87:60:08:dc:c8:
02:35:b3:3d:fa:28:f1:bf:6c:04:3b:37:13:9f:06:
3c:2f:49:bc:cf:91:24:cc:bd:0e:b0:03:e2:22:c8:
b1:c7:48:14:71:ee:fc:e1:0b:a6:58:ab:0f:c0:00:
6a:a4:84:14:bd:cc:85:0c:18:df:b6:91:4a:18:3d:
10:53:13:3e:61:fe:98:06:c2:f5:be:a9:b1:a1:06:
55:34:f0:1b:bc:f4:b0:9e:94:89:b1:6d:5d:9b:fa:
7a:b9:e5:f1:5c:d4:20:b8:9f:c7:fd:1d:b4:9d:1b:
18:80:ed:fe:6b:ec:c5:28:b2:67:4e:da:23:53:b1:
71:d1:4e:a7:b1:04:2b:07:e7:69:41:b0:3d:8a:a8:
33:4f:6d:3e:41:84:09:5c:f4:8c:63:4f:e3:02:29:
15:6e:20:56:1d:3f:3b:6b:b7:d1:e9:68:8f:33:d9:
08:13:c2:7a:94:cb:ac:7c:13:6b:f2:8d:be:41:8e:
7b:98:4a:a0:90:98:7e:d6:95:4d:29:16:c6:be:53:
ec:e4:70:08:de:68:80:ca:0f:36:ab:bb:d7:a3:fb:
cc:0a:ff:6b:95:78:30:9d:3e:d5:dd:0a:cf:b4:f0:
a7:f6:3e:8f:bd:09:dc:a1:7f:20:ba:54:af:f4:55:
5b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FC:E6:FF:76:3E:A0:3A:B9:2E:25:B8:DC:5E:7E:19:94:A8:A2:BC
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e6379fd6-eaa8-4348-8280-afb9b8552668.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.228.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:4c:20:56:c5:eb:ae:7b:f4:80:40:07:38:58:93:df:16:36:
c6:e1:ce:96:80:33:da:4e:f4:6f:5f:35:a9:df:bc:e4:95:38:
02:f5:01:a0:13:41:4e:20:0d:1a:3a:7f:cc:3a:bf:b1:17:e0:
b6:b8:c5:4b:bf:d1:a9:8c:1a:c8:3d:50:ba:c6:b4:fa:7f:97:
06:c1:fd:92:1f:5e:a7:1a:56:e9:cc:cb:51:80:02:6e:63:f5:
d4:19:5f:46:2e:84:c8:ab:1f:61:3b:50:a7:79:4b:ca:88:0e:
29:a7:38:58:13:42:08:f9:8c:20:b5:30:e8:d1:d8:ef:c2:d2:
56:65:bf:9e:a6:98:26:74:45:de:f4:42:c2:d3:b5:0b:8c:4c:
d7:6c:9d:ee:41:8d:3b:e1:7c:cf:dd:e8:55:09:a7:50:2a:ba:
86:5f:0d:fb:63:71:78:b7:3d:ec:36:d1:9e:12:81:0a:59:60:
76:b8:83:7e:17:5f:56:d8:ce:40:76:d6:cb:9c:39:3b:26:f3:
2f:31:71:21:6e:3f:40:a1:5d:de:6a:4b:f6:ad:f9:84:9d:db:
1d:bb:fb:04:7f:90:3a:98:61:7d:bc:12:33:fb:ef:b5:5b:5b:
2e:19:2b:b6:5f:30:1a:a8:53:64:aa:51:07:37:cf:c7:c7:bb:
2a:c3:06:1d
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUeiibpYQdpM0/TIWWbJF+kCSnrqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA3MTYwMDQwMzNaFw0yNjEwMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQDdkNmMzNGVhNmNjMjIwNWE1MzYwOTU1MGYxZWM1MDgzZDkyZjlhMTlkM2Jk
ZDU4MjQ4MDNkNWExOTdlYWZlM2ExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMerxJbh1D9qKYdgCNzIAjWzPfoo8b9sBDs3E58GPC9JvM+RJMy9DrAD4iLI
scdIFHHu/OELplirD8AAaqSEFL3MhQwY37aRShg9EFMTPmH+mAbC9b6psaEGVTTw
G7z0sJ6UibFtXZv6ernl8VzUILifx/0dtJ0bGIDt/mvsxSiyZ07aI1OxcdFOp7EE
KwfnaUGwPYqoM09tPkGECVz0jGNP4wIpFW4gVh0/O2u30elojzPZCBPCepTLrHwT
a/KNvkGOe5hKoJCYftaVTSkWxr5T7ORwCN5ogMoPNqu716P7zAr/a5V4MJ0+1d0K
z7Twp/Y+j70J3KF/ILpUr/RVW+MCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSQ/Ob/
dj6gOrkuJbjcXn4ZlKiivDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZTYzNzlmZDYtZWFhOC00MzQ4LTgyODAtYWZiOWI4NTUyNjY4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlN25DAN
BgkqhkiG9w0BAQsFAAOCAQEAj0wgVsXrrnv0gEAHOFiT3xY2xuHOloAz2k70b181
qd+85JU4AvUBoBNBTiANGjp/zDq/sRfgtrjFS7/RqYwayD1Qusa0+n+XBsH9kh9e
pxpW6czLUYACbmP11BlfRi6EyKsfYTtQp3lLyogOKac4WBNCCPmMILUw6NHY78LS
VmW/nqaYJnRF3vRCwtO1C4xM12yd7kGNO+F8z93oVQmnUCq6hl8N+2NxeLc97DbR
nhKBCllgdriDfhdfVtjOQHbWy5w5OybzLzFxIW4/QKFd3mpL9q35hJ3bHbv7BH+Q
OphhfbwSM/vvtVtbLhkrtl8wGqhTZKpRBzfPx8e7KsMGHQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:09:06 2026 by rpki-client