Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5f17520-2ea0-4b9a-a01c-04329523a547.roa
File: f5f17520-2ea0-4b9a-a01c-04329523a547.roa (raw, json)
Hash identifier: 9eRSl7a9/EwE9R8BHzCxct5G+pd1zJ7cUCGaw8lJL3A=
Subject key identifier: A8:D6:45:19:5D:77:F7:68:03:9A:CA:BB:D5:FA:EC:2E:22:72:29:04
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0478E81199B2C8ADDF308AA8805EAF401DF2BC38
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5f17520-2ea0-4b9a-a01c-04329523a547.roa
Signing time: Thu 23 Jul 2026 15:30:11 +0000
ROA not before: Thu 23 Jul 2026 15:30:11 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 195.61.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:78:e8:11:99:b2:c8:ad:df:30:8a:a8:80:5e:af:40:1d:f2:bc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 23 15:30:11 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=25efc54c84f3aaf1a03d924835fa5bd6bed3e6a863eb95cdb6c5292e9962c570, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:98:e5:dc:70:fd:6e:88:c7:f1:ce:90:32:
5d:8a:af:3a:50:33:f4:e4:49:bc:07:10:43:bb:57:
e2:ea:65:23:b2:f9:37:87:b0:17:44:b5:ba:9d:08:
78:1b:2f:d0:e5:3f:1c:e5:b4:53:fe:50:d4:71:81:
3a:f5:ac:91:e6:93:73:ac:e9:e4:4e:21:c3:ff:5c:
f2:64:d2:d2:79:db:96:d5:91:c2:76:b7:30:50:90:
ab:cb:b0:da:4c:68:54:e0:4d:d4:95:ac:ef:5c:ff:
40:8e:85:2b:e6:60:aa:8c:55:b3:5d:05:c6:8e:85:
9d:42:1c:11:94:5a:b2:a6:34:c3:5d:32:7a:67:e5:
62:b7:2f:46:65:9b:31:77:a0:51:f5:16:72:fd:68:
c3:ba:00:04:04:e1:78:ed:d3:97:dc:20:88:c6:0f:
ef:29:1b:03:f0:2a:a6:d1:41:6f:1d:c5:1b:0c:24:
dc:ee:a2:04:33:fb:79:48:da:73:84:c8:0f:96:f2:
98:61:1c:ff:a6:16:92:5e:3a:26:dc:f2:b0:ff:e4:
fc:ef:a0:72:a2:e2:d0:9f:6c:be:95:e2:0e:b8:d0:
0c:c5:2a:17:64:3f:44:37:96:dd:cc:a4:b0:09:36:
0e:8e:08:38:ae:e1:58:70:6b:2b:9e:16:1b:80:c7:
01:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D6:45:19:5D:77:F7:68:03:9A:CA:BB:D5:FA:EC:2E:22:72:29:04
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f5f17520-2ea0-4b9a-a01c-04329523a547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.61.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:aa:99:b9:49:0e:65:b9:42:07:40:c3:19:09:da:70:b5:14:
81:0a:b0:e7:dc:80:3b:67:c7:ee:84:36:5b:2f:e6:bc:6e:f7:
1f:b5:d1:2b:64:bb:af:b3:33:9b:fb:66:da:81:f6:b6:e8:7c:
c1:f1:d6:a7:e2:a9:cc:f9:f9:ad:bd:be:95:d4:d7:4b:99:d4:
25:61:0e:fe:38:29:2e:c8:db:66:02:5f:5f:75:af:63:66:db:
61:66:00:5f:4f:6b:03:9e:ab:56:ff:6f:09:84:ff:55:e7:7a:
1a:2b:6a:86:79:e8:8e:d0:45:04:12:70:b8:47:b2:9f:ff:f2:
99:a6:64:93:55:d0:53:f6:a4:07:6c:0a:2e:fa:a1:ad:04:52:
d2:04:68:5b:e1:16:fb:60:32:22:76:b6:9e:a4:da:02:44:7c:
36:ef:6d:c3:4b:d1:39:d4:6d:e4:5c:77:2f:c6:93:cf:1e:54:
40:be:43:c3:73:00:dc:ed:b2:a4:64:21:e4:f7:75:43:23:55:
e5:8e:da:b1:bf:bc:14:d6:85:7c:9d:cc:a6:04:84:1e:e0:aa:
0e:1c:2d:00:64:31:75:87:88:4e:9c:66:93:e9:74:3e:83:18:
69:0a:d4:b5:a5:f6:c3:e9:03:cf:af:90:30:8e:a6:d3:14:89:
9c:a4:e0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:31:38 2026 by rpki-client