Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e91c1f40-9f81-4796-b5cc-2c1fe9202cdf.roa
File: e91c1f40-9f81-4796-b5cc-2c1fe9202cdf.roa (raw, json)
Hash identifier: XqfbYG4a47wBBbm5NeBSH+VUdrSZcqxx6o8Be0el2QE=
Subject key identifier: B0:80:86:5E:66:3E:0D:78:82:4C:5A:81:C8:46:D6:FB:37:66:23:38
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3AEF46543E3791923CE03381FEE3DDDAADF54398
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e91c1f40-9f81-4796-b5cc-2c1fe9202cdf.roa
Signing time: Thu 23 Jul 2026 15:30:38 +0000
ROA not before: Thu 23 Jul 2026 15:30:38 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 62.230.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ef:46:54:3e:37:91:92:3c:e0:33:81:fe:e3:dd:da:ad:f5:43:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:38 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=7e03ebc71e25b25e84b2436c144d19814528bb82da3cdccba43196fd7f65d132, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:89:9f:cd:36:c6:04:a8:b4:30:03:65:46:
79:fe:09:4b:3c:c1:9e:b8:e7:1a:19:c2:fa:6a:41:
d6:30:57:4c:b0:bb:17:3b:60:c9:c6:fa:3b:12:d3:
25:7b:f2:b7:33:ce:35:c7:dd:2a:7b:25:51:03:78:
6d:da:6a:ba:40:c4:af:c7:12:a1:cd:ff:b5:37:fe:
2a:43:4a:72:55:56:ee:be:d8:29:53:f3:70:bc:35:
51:03:85:61:f1:87:d1:d2:ff:0e:2f:1f:16:53:bf:
3a:64:49:5a:d7:c4:8b:1a:03:91:26:aa:c3:f8:f6:
82:fc:65:c3:05:f0:59:50:c5:ae:c6:4a:37:f9:db:
67:c8:38:b7:30:7a:f8:3c:aa:30:fb:e3:80:5b:c1:
69:5d:14:ab:63:b6:bb:11:43:d8:ac:ae:8c:dc:74:
2a:8a:8a:b4:05:b9:2e:4a:52:4b:35:77:97:84:2d:
45:6e:86:8d:62:95:3d:cb:fb:8f:ba:1c:94:5e:36:
92:9a:09:11:c4:c4:f1:f5:12:41:46:d2:d0:44:ca:
3d:93:73:59:23:24:9f:d3:0a:f3:72:da:fb:7e:4c:
61:56:a0:e3:93:2d:a4:53:f2:f1:03:6e:72:b9:d6:
29:66:5f:fd:96:12:70:c1:84:f3:85:31:92:69:40:
12:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:80:86:5E:66:3E:0D:78:82:4C:5A:81:C8:46:D6:FB:37:66:23:38
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e91c1f40-9f81-4796-b5cc-2c1fe9202cdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.230.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:c5:42:0e:8f:d2:7c:83:05:8b:36:be:9e:5b:f7:62:e6:ee:
27:0c:ba:ea:7f:31:f9:9f:07:06:5e:67:db:1a:e7:ee:28:32:
63:50:96:9e:45:e0:bb:3d:c8:6e:13:72:76:f8:fc:f5:22:e1:
fa:e2:e2:33:3e:cd:df:b6:11:43:15:cb:40:43:b8:52:70:08:
69:34:25:90:60:b6:5d:01:56:b8:b2:0d:a9:23:28:fb:9e:0f:
ca:65:be:1f:08:de:da:eb:72:a7:44:9a:8e:9e:42:e8:e2:36:
10:a2:e2:da:ea:da:ba:12:bb:e6:f4:58:f3:df:88:cd:79:1c:
bc:c0:2a:26:a0:61:ed:40:3f:e6:06:42:09:11:d2:ae:ea:2c:
89:62:9a:f0:2d:51:3f:72:26:5f:85:a6:43:d4:87:0b:af:4e:
30:61:6b:e4:a2:f1:6c:9e:cf:aa:51:4e:44:ad:29:88:f4:52:
ed:cb:dd:92:48:2a:75:8a:c5:53:9b:c1:69:8d:6e:5f:3f:3e:
59:58:87:76:00:58:92:ee:ff:69:2a:5f:a3:83:91:9c:3b:31:
cc:1c:be:25:51:57:2f:ad:5c:d5:01:79:7b:74:a2:6c:a5:4d:
18:3a:ed:67:ab:70:f6:f4:f8:82:39:bb:ce:dc:dd:22:95:67:
4a:99:9c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:17 2026 by rpki-client