Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
File: f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa (raw, json)
Hash identifier: vPEci4sY1sEFgUsVrHO5GhEXhh92QI99LaN1ba2VKc8=
Subject key identifier: 9C:AA:8A:7B:E7:94:EF:28:F8:80:48:2D:31:6F:39:91:1C:7A:C3:91
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 50D25B354BBB289C48215254DA7E32A90428989A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
Signing time: Fri 26 Sep 2025 20:10:14 +0000
ROA not before: Fri 26 Sep 2025 20:10:14 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 193.26.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d2:5b:35:4b:bb:28:9c:48:21:52:54:da:7e:32:a9:04:28:98:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 26 20:10:14 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=90d0e4d1c83bfeef75cd5c5f595561d20ffab3bb47da3fd50831799d731d5c5f, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:bf:d8:18:3a:b2:8f:2c:5f:38:47:d7:09:
17:90:44:f7:91:31:f8:32:ff:fb:39:86:63:4e:c3:
fd:a2:0e:15:15:88:fe:2f:1a:39:f0:84:9e:f3:ce:
0d:02:f2:91:7d:b7:16:39:c9:bd:5f:51:80:eb:58:
bb:28:6c:05:52:4b:57:2a:2b:fe:a2:4f:7b:e6:1a:
58:53:ce:06:ba:cf:07:a4:8e:8d:f8:11:9a:bb:7a:
2a:87:b5:ba:d6:35:c6:6f:9d:62:06:8f:88:23:5b:
7e:b4:d4:0f:04:e7:da:0b:45:9c:34:16:43:e9:2c:
23:f2:90:dd:10:f6:b0:32:98:93:5f:cd:6b:fe:95:
a6:d6:e3:cf:2a:53:cb:f7:20:7c:e4:bb:12:13:a5:
94:4e:ed:4d:64:78:e3:75:60:bc:94:da:16:55:0a:
af:1d:6a:d2:e3:8e:a0:3f:dc:2f:00:10:cc:92:df:
73:b2:a6:1e:f9:2a:74:5b:3d:06:34:f0:c6:f8:ae:
95:6f:26:96:a5:fa:55:23:2b:2e:a9:f4:6b:aa:fb:
fb:36:0a:8b:a0:31:d5:4f:20:19:52:8d:32:10:f3:
cc:aa:2a:4f:0a:ea:d2:8b:af:b4:83:3d:78:bc:d2:
13:ae:6d:6a:30:15:66:13:a2:b8:9b:a9:6f:e2:35:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AA:8A:7B:E7:94:EF:28:F8:80:48:2D:31:6F:39:91:1C:7A:C3:91
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.64.0/19
Signature Algorithm: sha256WithRSAEncryption
40:d5:69:3e:50:58:71:19:05:9c:4f:75:a7:31:7f:bc:91:07:
e6:74:85:50:36:57:46:19:d7:22:02:e4:e6:cb:33:4d:65:22:
49:91:ee:d5:2f:93:18:1e:03:41:27:fd:9e:91:5d:7e:45:d8:
ce:04:3b:56:eb:6e:5b:62:87:b7:e1:6c:7e:c1:03:eb:0e:3c:
a9:88:cf:4b:e3:d4:e1:0a:c5:eb:d1:2c:87:b0:9c:af:bb:f5:
3c:2c:86:a6:b1:20:c1:85:bb:11:11:e9:20:eb:48:38:bb:56:
63:da:4a:5e:66:f7:f9:87:fa:5c:01:b7:d1:1a:41:68:50:4d:
dc:35:f1:14:c9:45:ce:f8:71:68:ee:1c:1c:cc:cb:b9:f1:4b:
15:e7:95:7a:f1:2f:2c:b2:ac:da:25:2a:97:60:18:b0:c1:87:
c7:57:14:38:b5:72:22:fa:88:1c:0e:ba:77:eb:42:f6:26:b1:
2b:94:31:20:7b:9a:71:0a:f3:df:18:8a:be:84:37:71:07:fe:
c4:ac:da:e2:99:8c:2d:2b:ef:38:54:25:3a:1a:2e:a1:71:eb:
80:8a:2d:61:92:06:ec:ef:a9:4b:c5:d4:0a:34:56:91:32:35:
55:19:00:e5:74:12:72:a5:c0:fd:6c:7a:e9:7d:95:fe:ce:2f:
bf:f0:55:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:38:01 2025 by rpki-client