Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5f17520-2ea0-4b9a-a01c-04329523a547.roa
File: f5f17520-2ea0-4b9a-a01c-04329523a547.roa (raw, json)
Hash identifier: lACQzNHv7aMLfKlxbOTomuLNiIHZmTW/Q5x6iQRXYlo=
Subject key identifier: 28:44:1D:3D:E5:82:0E:B4:FC:56:D2:64:6E:74:2C:1C:AA:B2:6E:1C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 495964D0226DCE3B57955B6014A127A4E92EAC24
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5f17520-2ea0-4b9a-a01c-04329523a547.roa
Signing time: Sun 11 Oct 2026 15:20:06 +0000
ROA not before: Sun 11 Oct 2026 15:20:06 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 195.61.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:59:64:d0:22:6d:ce:3b:57:95:5b:60:14:a1:27:a4:e9:2e:ac:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 11 15:20:06 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=33f5ba7702d472cedda1bdf0d129fa3f05fd7b9247b6a815543be4be45e1016c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:c6:53:30:35:b6:c1:61:60:d8:f7:94:74:
7d:8c:63:8b:01:f2:52:87:ac:fb:f8:bc:9f:fc:5b:
03:53:07:c5:b6:27:df:3e:1f:39:ea:f2:22:a9:5b:
91:d3:cb:c0:4f:62:bc:d3:21:42:e5:28:f5:ef:6d:
08:9c:f5:ad:b6:22:20:2b:b2:ce:3e:d2:30:d4:15:
ae:63:48:cc:ca:58:b5:56:e3:22:b8:bd:49:64:f2:
82:ed:d7:37:dd:71:d7:b9:c8:23:eb:2d:0d:20:28:
e6:0d:26:08:c2:99:7a:7b:1e:ac:1d:fc:21:7a:ea:
1c:1b:eb:fb:37:03:7c:e7:c1:35:b8:37:4b:d1:b9:
21:ba:88:db:68:69:c8:0c:75:d3:12:96:fd:fc:ff:
81:a2:26:7c:88:15:74:1d:dc:bc:0d:35:25:c8:4d:
2b:50:d7:13:eb:d1:3e:69:aa:6e:93:ce:6f:72:c7:
59:72:7d:f6:c5:df:06:80:ce:f0:72:4e:2d:65:db:
46:f7:97:f8:53:01:92:97:bc:81:d8:da:93:6f:09:
04:4a:86:1e:3b:6e:bc:b3:cd:f0:4a:9f:cc:0a:2d:
e2:1d:b0:b3:19:10:9c:2c:4b:0d:09:f2:e7:b9:55:
47:de:50:7f:45:1a:4b:ba:2c:f3:29:9d:76:97:58:
34:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:44:1D:3D:E5:82:0E:B4:FC:56:D2:64:6E:74:2C:1C:AA:B2:6E:1C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5f17520-2ea0-4b9a-a01c-04329523a547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.61.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:b8:14:a8:93:8d:73:21:9b:62:12:e1:88:38:82:20:31:32:
3b:66:4d:6b:af:a3:7a:e5:40:d2:ad:b8:97:e7:1c:c5:3a:43:
86:58:b0:69:02:6b:66:10:61:3f:bf:49:bf:4f:e3:b9:a8:b5:
6b:d5:b2:58:33:5f:fb:dd:9f:81:53:24:84:12:a5:91:28:82:
de:01:53:26:c4:f4:ec:5a:45:2e:7f:90:cc:89:fc:ac:49:92:
ae:0c:e8:84:4b:b4:b2:1d:51:5f:25:6c:cd:4b:73:8e:f4:cf:
3e:2a:10:71:11:29:6a:63:4b:b5:a9:71:53:fe:e5:39:ff:8e:
e3:00:4c:4c:0a:d8:68:b7:18:c2:91:3c:6c:a1:f8:b4:29:d6:
c5:a5:2f:03:f0:d9:58:d7:64:33:e2:4d:15:76:de:22:a8:66:
1e:cf:62:0d:4b:4a:4d:fa:a9:e5:69:29:3b:c4:9d:94:5d:44:
7d:81:d2:04:4f:ca:6e:02:f5:92:db:07:a7:f9:da:1b:e6:12:
1b:77:53:58:04:cb:19:13:19:96:15:34:da:c8:45:27:f1:f6:
2d:2d:32:9c:86:82:64:f8:99:7c:33:90:5b:1d:33:ea:cc:81:
82:2b:a2:02:a5:0e:12:cd:a3:dc:ca:73:46:16:c9:8c:05:05:
62:1b:db:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:22:59 2026 by rpki-client