Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fb2bc1bb-cbbe-4f6c-8ef3-eabfdb4fa7b9.roa
File: fb2bc1bb-cbbe-4f6c-8ef3-eabfdb4fa7b9.roa (raw, json)
Hash identifier: gFficnlAjmHXeS5299jEgbzyTEvP0nQwVczsYzxfZ2s=
Subject key identifier: 0A:F8:EE:CB:A2:58:58:27:BB:3D:DC:48:3D:6A:AA:2C:62:1A:FC:A3
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7F7DDC7089C9CDB06FCE491A7F4F5B0CDE3D6D8A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fb2bc1bb-cbbe-4f6c-8ef3-eabfdb4fa7b9.roa
Signing time: Mon 26 Oct 2026 05:40:06 +0000
ROA not before: Mon 26 Oct 2026 05:40:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 212.167.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:7d:dc:70:89:c9:cd:b0:6f:ce:49:1a:7f:4f:5b:0c:de:3d:6d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=5af2fb0b51ff7a165a63c37a82334bc47684b49fbf5ec6c149a8d7eee5e2482a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:32:2c:8c:e8:02:bf:c4:7a:5a:32:19:1c:
f6:8d:08:f0:fa:58:f4:22:01:7d:97:b4:ca:e1:d4:
60:19:62:2d:c1:62:61:f1:f3:5c:f8:cc:55:91:ee:
02:31:a8:e0:ff:f3:b0:96:6c:75:4e:0d:46:83:6f:
d8:2e:fb:b0:a1:fc:12:6f:8e:32:b3:b0:3b:21:e5:
1f:ee:a5:96:bb:a7:c7:b0:6f:65:60:46:38:f5:ba:
b4:5b:e8:d4:3c:f6:0c:ff:d9:87:cc:1b:aa:b7:df:
4e:30:e8:d9:6a:c5:c1:af:40:d6:d9:46:54:12:05:
5e:e0:63:72:41:c4:91:62:0e:92:a4:77:66:55:aa:
87:0c:bf:dd:35:57:c2:dd:ee:90:11:92:be:06:af:
8c:8d:77:c8:1c:7d:d4:2f:4b:d3:74:78:0e:51:d9:
9f:b3:6f:06:70:56:d2:7a:95:de:e2:40:15:7c:31:
6d:03:e4:ae:02:a3:68:ff:7f:ba:b8:08:51:65:d8:
46:ac:b5:40:de:15:e2:f3:5f:46:ca:4a:36:12:a7:
98:b5:49:f0:67:34:62:f0:70:ae:bd:c8:07:22:04:
bc:e8:4c:ed:60:52:06:80:4e:5a:96:76:a1:43:04:
db:e3:9d:42:a4:38:d8:b8:b2:5f:ff:e4:c6:64:4d:
e4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F8:EE:CB:A2:58:58:27:BB:3D:DC:48:3D:6A:AA:2C:62:1A:FC:A3
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fb2bc1bb-cbbe-4f6c-8ef3-eabfdb4fa7b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:cd:a9:98:6a:c4:97:8e:d2:75:39:db:bd:c7:4b:1e:15:97:
19:bd:f0:a1:82:b1:82:94:28:03:85:8d:2c:a7:73:a0:3b:1c:
88:38:f6:7b:ac:e5:06:0e:62:10:7d:a9:6f:5c:c7:12:52:79:
54:11:90:8c:79:48:0a:18:a0:51:ce:d2:8e:f6:27:ff:0b:0f:
b6:3c:04:72:84:cb:5b:ce:e4:5c:bc:d1:43:42:10:67:46:8b:
0d:20:a7:8e:3d:c4:05:2a:93:78:5c:9c:86:5c:ca:2b:b5:26:
97:ce:fb:33:ec:fd:ac:d1:b2:cf:46:5b:58:4e:6e:01:c2:a3:
8e:de:1d:ee:e9:16:92:1d:cc:ec:a4:68:55:f5:95:34:17:a8:
39:ea:14:09:b6:75:fe:1a:1d:f8:3b:22:59:1d:bb:1b:9b:9c:
7b:2c:2d:24:82:1c:76:56:2c:d0:5e:79:09:73:58:e2:5a:ca:
37:f2:a1:97:2e:c3:80:fa:ae:6d:10:b8:2d:36:1e:a8:a1:8a:
ca:73:ba:fe:05:51:b5:b9:c4:a7:41:3c:c9:97:18:e1:b8:c9:
77:90:fc:0f:5d:5e:71:5f:1e:1d:1a:c4:8d:56:e2:81:70:d3:
63:9b:ea:7a:2e:da:48:68:a9:34:2c:7d:35:ad:10:ba:41:6b:
4f:b0:f3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:47:19 2026 by rpki-client