Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
File: fc353215-935f-47d2-9298-767ccc0eae1a.roa (raw, json)
Hash identifier: L+uV85+hHNZnvIvtB1GfFYJo/H+mnCWE0tuHfmVC//I=
Subject key identifier: BB:EC:E9:FB:37:D5:4A:C6:58:E3:78:7C:56:FF:D1:D1:24:77:CC:27
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 7D87A10AB2C9DBD088B0A3198133FF468C81C84D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
Signing time: Mon 26 Oct 2026 05:50:42 +0000
ROA not before: Mon 26 Oct 2026 05:50:42 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 85.151.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:87:a1:0a:b2:c9:db:d0:88:b0:a3:19:81:33:ff:46:8c:81:c8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:42 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=4a6ee3692face4bbded395bbe5a87a8275cbebb63d3d247709eba1446c3b42eb, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:bd:7d:e5:70:8e:34:88:ff:04:82:dc:f5:
17:d3:d9:af:07:60:e3:f3:87:e2:97:6a:8f:f4:45:
b9:11:de:b5:05:1b:6f:9a:96:0c:7e:3f:cd:a1:fd:
c7:ea:d7:0b:f5:27:d4:60:70:91:a5:57:98:83:0f:
9d:90:a5:ea:c9:fe:0e:c1:58:f0:00:ac:f5:f3:ba:
24:3f:d7:08:ba:4c:75:60:10:41:c0:6a:36:8d:56:
f7:f5:ec:33:3c:22:1f:52:10:26:9c:d2:9a:9f:15:
7b:18:3d:eb:b8:33:f4:f3:9b:ed:72:58:97:4a:a0:
a4:c4:59:4c:33:0f:2c:ab:b2:1f:cb:00:3d:0b:c1:
c2:47:d7:4f:9c:42:0c:02:e5:96:b8:d2:c0:4f:99:
75:91:e6:fe:28:a7:9a:1b:29:7e:7a:90:a1:e4:2f:
c1:9b:f2:f5:42:48:46:e0:2e:11:0e:42:04:d2:41:
ce:86:16:3a:45:07:da:f9:6b:97:8c:82:cd:d1:ac:
aa:3f:34:d8:53:73:26:df:3c:1c:31:c6:4e:c8:b9:
87:4e:03:1c:da:ea:74:f5:32:a2:69:b0:c4:6d:d7:
64:9d:03:19:b2:6f:e8:e9:89:24:98:80:4b:78:f1:
4e:34:96:38:a7:ae:a7:41:76:13:a5:4c:a3:4f:41:
53:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EC:E9:FB:37:D5:4A:C6:58:E3:78:7C:56:FF:D1:D1:24:77:CC:27
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:04:7c:4b:65:ad:e3:4f:ff:64:46:79:fa:58:3d:9d:27:7c:
7d:64:51:96:74:2c:b4:d5:90:16:ba:03:80:48:0d:1d:c4:ee:
4e:8e:69:17:9c:09:cb:13:b0:32:9e:ce:04:f8:f0:60:b6:dd:
b3:af:f9:e4:50:0c:8b:62:10:60:e0:52:67:ed:a9:6d:51:f3:
5f:8c:7c:4a:57:e5:03:c0:3c:e1:aa:5d:2b:16:6f:6c:a8:b2:
38:06:09:54:eb:4c:da:a4:69:52:b9:99:48:9a:69:40:df:93:
34:26:f2:37:1f:7a:44:b7:0c:5b:74:38:c6:e9:a9:fa:d6:71:
f1:70:00:71:b4:3b:d7:f8:01:12:f0:b6:66:a8:c2:03:45:19:
17:a0:f5:28:af:b0:1d:71:b4:47:b0:7f:14:6f:cf:d0:32:c3:
69:74:37:d0:94:4d:5c:d2:06:10:35:a3:32:23:a2:8e:b0:ab:
d6:aa:78:5e:4b:ec:fa:ee:90:0a:08:89:c4:8a:1d:33:e8:29:
01:7c:4d:26:bb:c5:c3:8f:48:61:fd:cf:d1:84:cf:53:85:1e:
3e:b5:d6:2f:77:a3:6e:85:e0:28:be:8c:a2:a9:11:5e:17:c6:
f9:20:bf:59:b0:9b:c2:79:57:5a:28:43:5d:33:55:0a:95:8e:
df:2a:99:16
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUfYehCrLJ29CIsKMZgTP/RoyByE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTUwNDJaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDRhNmVlMzY5MmZhY2U0YmJkZWQzOTViYmU1YTg3YTgyNzVjYmViYjYzZDNk
MjQ3NzA5ZWJhMTQ0NmMzYjQyZWIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANbGvX3lcI40iP8Egtz1F9PZrwdg4/OH4pdqj/RFuRHetQUbb5qWDH4/zaH9
x+rXC/Un1GBwkaVXmIMPnZCl6sn+DsFY8ACs9fO6JD/XCLpMdWAQQcBqNo1W9/Xs
MzwiH1IQJpzSmp8Vexg967gz9POb7XJYl0qgpMRZTDMPLKuyH8sAPQvBwkfXT5xC
DALllrjSwE+ZdZHm/iinmhspfnqQoeQvwZvy9UJIRuAuEQ5CBNJBzoYWOkUH2vlr
l4yCzdGsqj802FNzJt88HDHGTsi5h04DHNrqdPUyommwxG3XZJ0DGbJv6OmJJJiA
S3jxTjSWOKeup0F2E6VMo09BU3cCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBS77On7
N9VKxljjeHxW/9HRJHfMJzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZmMzNTMyMTUtOTM1Zi00N2QyLTkyOTgtNzY3Y2NjMGVhZTFhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAFWXMA0G
CSqGSIb3DQEBCwUAA4IBAQAgBHxLZa3jT/9kRnn6WD2dJ3x9ZFGWdCy01ZAWugOA
SA0dxO5OjmkXnAnLE7Ayns4E+PBgtt2zr/nkUAyLYhBg4FJn7altUfNfjHxKV+UD
wDzhql0rFm9sqLI4BglU60zapGlSuZlImmlA35M0JvI3H3pEtwxbdDjG6an61nHx
cABxtDvX+AES8LZmqMIDRRkXoPUor7AdcbRHsH8Ub8/QMsNpdDfQlE1c0gYQNaMy
I6KOsKvWqnheS+z67pAKCInEih0z6CkBfE0mu8XDj0hh/c/RhM9ThR4+tdYvd6Nu
heAovoyiqRFeF8b5IL9ZsJvCeVdaKENdM1UKlY7fKpkW
-----END CERTIFICATE-----
Generated at Wed Nov 11 13:59:13 2026 by rpki-client