Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecd45447-b567-4c62-b588-28bb50cce889.roa
File: ecd45447-b567-4c62-b588-28bb50cce889.roa (raw, json)
Hash identifier: U43D3DdwPhiOyjidZXI8cTfc7LC+5muzYFJh5+RWfs0=
Subject key identifier: A4:B3:94:6D:6D:72:3C:D3:CE:10:02:14:56:15:0C:E7:23:E0:39:64
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 22E4D9DF6FDBADFAA670DED4990CB55145733C92
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecd45447-b567-4c62-b588-28bb50cce889.roa
Signing time: Mon 26 Oct 2026 05:40:34 +0000
ROA not before: Mon 26 Oct 2026 05:40:34 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 195.17.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e4:d9:df:6f:db:ad:fa:a6:70:de:d4:99:0c:b5:51:45:73:3c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:34 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=eae938d88edee32fc4ffe8212dc299f26bd9992b943fb9153e2152c285cd63aa, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:6f:e3:86:d7:71:ac:99:e7:48:01:7f:25:
51:f6:2f:fb:80:5d:9b:43:03:73:bb:2b:86:a2:f1:
5a:f3:56:4d:95:4a:3f:0a:68:8b:15:17:03:9f:aa:
c8:25:00:f3:35:4d:0e:94:58:45:8d:c9:f2:fa:57:
02:db:20:d9:45:c0:a8:d8:e2:ec:ba:3c:23:9b:0a:
74:c4:5b:83:df:0e:14:55:a8:31:58:b2:55:78:63:
29:00:71:33:4c:33:be:de:d1:f1:4b:e9:df:8c:40:
aa:56:1c:27:56:71:5a:1a:f8:0d:c7:25:1d:41:72:
51:85:6f:02:35:dc:b8:ae:6f:a8:f8:72:46:ef:ef:
e5:92:3d:7f:ca:5f:f7:31:ae:a8:02:65:d4:e4:56:
58:e4:98:35:3e:8d:a4:a9:fa:0d:63:fa:b2:f3:83:
e7:23:2e:37:46:72:e0:79:b4:f9:c9:95:76:96:57:
4d:74:ae:94:22:d6:4e:e5:11:b7:e4:8c:9c:2f:73:
ab:3c:a9:e9:17:5d:0a:d3:3e:2c:d7:19:4b:ab:73:
e6:be:26:f5:57:ba:1c:da:f0:10:77:bd:83:5d:a1:
41:af:40:a7:e3:38:ea:f5:33:e6:cd:b5:42:b2:f5:
63:76:a9:9d:2d:41:94:1a:f8:da:e2:16:f1:72:e8:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B3:94:6D:6D:72:3C:D3:CE:10:02:14:56:15:0C:E7:23:E0:39:64
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ecd45447-b567-4c62-b588-28bb50cce889.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:fc:56:fb:90:bb:75:54:58:75:bc:66:68:4e:3f:f1:2e:63:
f1:2e:6f:b6:4d:d3:3a:39:c1:27:ba:eb:29:ca:70:b7:15:36:
93:27:11:6b:11:7a:9e:92:80:3a:7b:76:54:fa:a6:aa:a5:50:
39:be:e7:5e:09:81:e3:12:44:de:f7:ca:80:c6:d3:a9:e5:0e:
ee:b8:32:0f:11:ed:47:07:4e:28:a1:67:2f:01:7b:7d:fb:db:
aa:84:ee:ee:f4:f0:0a:df:0f:9d:62:80:39:eb:17:25:40:73:
c4:be:a8:d2:90:22:c8:4a:02:2a:4a:fb:d7:da:d4:03:34:5f:
e9:1c:98:d5:0d:28:2f:d8:db:b0:bf:f2:38:c7:37:d9:fd:fe:
00:b2:24:24:d7:e7:5f:1b:09:fd:97:ca:93:6d:e6:a4:7c:bb:
69:b6:3a:9f:a1:88:14:bc:89:d3:d2:27:ef:08:db:b0:ae:3a:
5e:ba:40:14:73:11:49:ce:fb:b2:1f:46:bc:c1:24:17:f2:2d:
72:b2:f8:9f:cb:41:42:ff:fe:5d:73:5d:35:fb:7e:b4:ae:8a:
ff:91:6c:b0:fb:a7:6f:fd:ce:0b:e8:9c:75:2a:c6:b1:8b:4d:
79:80:d7:23:e6:4f:cf:3e:2b:c9:40:b5:71:33:2e:77:e6:8b:
3e:f9:67:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:22:30 2026 by rpki-client