Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
File: e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa (raw, json)
Hash identifier: ANs+1vSPp1ackcLQItojbvoPS1OpvPmyI6h9bWeFIvo=
Subject key identifier: D4:72:9A:D2:AA:2F:48:BB:C9:FE:A5:0B:44:BC:74:01:AD:A0:C8:30
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5D042C41BBC6528F72F101856A9F268CBA2717B6
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
Signing time: Mon 26 Oct 2026 05:50:28 +0000
ROA not before: Mon 26 Oct 2026 05:50:28 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 57.101.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:04:2c:41:bb:c6:52:8f:72:f1:01:85:6a:9f:26:8c:ba:27:17:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:28 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=d8cb77e443fd76cb84323832f5df3a7ed28bfb718982ba020b9407db69d0ed43, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:71:e5:c7:92:7c:42:c9:97:13:0b:16:7c:7c:
91:e6:be:18:7d:de:52:51:c1:ef:8e:d7:77:b1:e8:
ed:d2:06:08:0f:fd:e3:67:91:07:02:b2:6d:ce:56:
18:d0:27:dd:58:d9:6d:bc:d6:1d:b9:06:c6:34:7d:
7e:cf:f2:5d:57:41:1f:1f:cb:fa:03:1c:93:88:8d:
49:2e:00:f1:7c:2b:98:e9:77:a6:09:40:d6:c7:7c:
40:d1:9a:7e:d8:81:70:f8:ce:30:5a:b7:58:8b:53:
4e:11:14:12:75:1f:85:f3:a8:89:88:00:36:6c:7d:
89:92:47:56:49:d4:d1:da:8d:40:12:e9:ae:4f:68:
d0:71:77:e5:1b:d1:b1:0d:1e:96:b3:3f:f0:dd:f8:
cb:df:09:35:f6:62:0a:4d:97:59:fc:0a:3b:82:d0:
56:1c:8b:5e:8e:29:41:26:a4:5f:5b:e4:7b:4a:9d:
14:af:54:cd:0c:30:34:51:68:6a:1d:12:ae:8c:f8:
f8:31:b7:9a:7b:1d:11:cc:c5:4e:6b:c3:ae:6b:4d:
8a:f9:00:2b:9f:9e:2a:e8:a8:e0:8d:d2:5c:64:2e:
29:eb:03:1a:26:03:85:57:bb:c9:51:c0:2f:54:e5:
4c:72:f0:4a:17:4e:f5:04:38:4d:40:21:e8:08:80:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:72:9A:D2:AA:2F:48:BB:C9:FE:A5:0B:44:BC:74:01:AD:A0:C8:30
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.101.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:2b:5c:d8:a2:d5:49:82:98:49:15:2a:44:a7:fd:54:2b:2e:
b1:6d:42:81:6b:6b:35:ff:07:42:29:87:e6:55:ef:46:58:23:
89:4d:95:86:d7:a4:a2:c7:f1:e4:ed:7b:f2:44:83:f4:70:cc:
ca:8a:cf:73:a0:a1:4a:26:ba:34:2d:e7:57:73:46:7e:12:cf:
9a:a0:f7:69:e0:97:f7:02:30:e8:32:aa:a9:d8:ee:46:f0:e3:
0b:a4:98:58:fc:1b:00:a7:5b:fd:c7:62:7c:95:68:85:9b:d4:
95:f1:2d:0c:72:b9:94:c8:ae:d5:70:4e:a5:78:b7:67:f1:ed:
55:14:05:e9:f5:ab:10:4a:97:e7:4f:b8:da:dc:ce:cd:f3:fb:
4c:e7:4c:9e:1d:e5:63:60:cf:fa:d8:28:ef:b9:49:f3:31:8e:
ac:3a:26:04:cb:ff:37:4c:b8:eb:3e:07:45:2d:78:48:8a:50:
ac:4d:0f:39:71:3a:8a:c2:ad:50:69:0c:b9:d0:fd:53:59:31:
cd:6f:ab:26:25:40:26:9f:d1:e0:6c:87:aa:7c:e5:65:8f:12:
11:f8:9c:03:d5:37:f0:6e:20:a2:d2:c4:59:10:2f:88:21:95:
04:11:2d:d5:3a:14:90:a7:23:f4:73:c5:46:8b:bf:5b:a4:f8:
b3:14:cc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:06:29 2026 by rpki-client