Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
File: fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa (raw, json)
Hash identifier: hJ+ELaAJQ6sDVoElGkZoyd8hErwLQFPGUpTDah1ggVg=
Subject key identifier: BF:75:8A:4C:E7:62:BD:8F:CC:1F:2D:E0:B0:16:D3:C1:66:BA:22:17
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 160A2315CBFAA5DBC69B36372DBF4F0A73F8B273
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
Signing time: Mon 26 Oct 2026 05:40:22 +0000
ROA not before: Mon 26 Oct 2026 05:40:22 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 57.95.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:0a:23:15:cb:fa:a5:db:c6:9b:36:37:2d:bf:4f:0a:73:f8:b2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:22 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=5762eef434b5e8ad4f455935a885d3adedb485fa2308a835eb5b55d6f33d6c2c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:4e:a3:1b:bd:ea:70:53:1a:13:0c:15:e5:
1d:b8:75:52:b2:39:af:b6:73:a5:1b:2d:a3:a4:eb:
f8:2b:51:aa:43:c9:d8:ed:94:2e:0a:63:41:44:28:
ac:07:22:00:f0:af:3e:e0:ed:a1:9b:8b:71:8b:da:
37:33:ff:5a:6e:c4:2f:04:7a:09:07:19:00:21:3e:
f0:80:2e:e0:3b:20:ec:1d:14:83:31:55:a4:66:43:
67:b4:86:16:fd:9c:a8:f7:8b:1e:ed:15:a8:02:f4:
56:dc:a7:4c:15:a4:ad:f8:be:db:87:9d:cc:a6:77:
d7:da:0c:9b:aa:5b:c4:c3:54:b6:9b:23:6a:d4:70:
e2:74:40:89:75:46:b4:37:bb:70:71:7f:66:20:ea:
39:00:ca:5d:9e:c4:9f:c3:dd:77:67:3b:87:b1:6a:
26:5c:8c:ed:f7:7d:17:25:4c:01:4e:ee:99:57:7f:
96:37:16:a7:fa:c6:33:3c:0e:e1:f7:9f:83:c7:d9:
b8:30:91:8f:c9:00:4b:56:f7:4e:c2:2e:ea:3d:42:
94:45:23:b5:ca:c3:5e:53:4f:84:c0:40:80:cf:53:
c3:97:1d:06:91:4f:8b:bd:d2:85:ea:41:c2:19:88:
40:b0:6a:ce:76:44:d2:a3:85:3c:53:6c:34:96:ae:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:75:8A:4C:E7:62:BD:8F:CC:1F:2D:E0:B0:16:D3:C1:66:BA:22:17
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.95.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:21:fd:fb:22:a4:0f:7f:19:2a:09:80:39:40:77:76:14:24:
ec:a4:5c:c7:82:54:94:30:e0:c5:61:dc:37:18:ff:43:f7:71:
ea:8c:7a:2b:5d:dc:25:e1:23:55:03:9f:c4:74:5e:36:97:72:
af:23:d6:27:9b:0e:bd:aa:b8:38:cb:12:49:3e:14:93:aa:66:
03:1d:46:b7:80:d1:77:43:fc:b7:93:36:9d:32:87:20:8c:eb:
40:76:4e:e5:6e:30:db:71:e0:88:4a:52:9a:ad:86:fa:0e:8f:
78:9b:b4:0d:3d:ac:de:4e:71:ca:cd:a2:34:6f:d7:20:c2:0d:
2e:68:e0:91:88:e9:34:70:cf:b3:17:3a:b0:1b:b0:f6:26:c6:
29:8f:78:ac:c1:39:16:c5:f8:a4:56:09:f8:ac:c0:ca:0c:c9:
6a:a0:09:f2:19:39:10:f0:37:0f:4c:2a:63:90:31:3d:ad:9a:
3d:9b:3e:d7:74:ae:a2:2e:79:0a:db:e3:42:23:e2:aa:00:29:
33:95:20:85:f8:37:9b:76:4e:b2:99:bc:5a:1a:77:00:b3:1b:
9d:ec:80:62:5b:7f:1f:d9:0c:e5:b0:e9:68:5f:8d:ab:3a:dd:
3d:f2:7b:e9:0f:27:94:8f:4e:db:fb:03:98:fd:0d:4f:e1:bc:
1e:03:ae:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:51:16 2026 by rpki-client