Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fdb81a1b-3eea-4c1a-97f6-940966a0bde0.roa
File: fdb81a1b-3eea-4c1a-97f6-940966a0bde0.roa (raw, json)
Hash identifier: jCXXbkVrV1nhVVbjMvvVfgI6gNWcPueHbs2eS92KLKk=
Subject key identifier: 6A:41:74:0E:71:4A:70:E4:60:E6:21:66:5E:D5:93:EF:4E:D2:2F:2D
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 44CB3AD84E9985577E458EBE7D0113445E4568AE
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fdb81a1b-3eea-4c1a-97f6-940966a0bde0.roa
Signing time: Thu 15 Oct 2026 00:20:10 +0000
ROA not before: Thu 15 Oct 2026 00:20:10 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:cb:3a:d8:4e:99:85:57:7e:45:8e:be:7d:01:13:44:5e:45:68:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 15 00:20:10 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=411c305f2e268217d10f824b5e71017b425e341c633aa4baf48962f7bb251574, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:f4:73:2f:fd:fb:10:f5:fc:a6:d4:38:2c:
31:e6:4e:87:06:d1:2c:4c:d7:08:09:77:d6:ad:58:
e2:eb:10:e5:31:97:6d:93:6e:65:fb:f8:78:7c:10:
47:16:aa:5d:e6:96:99:b8:11:64:68:c8:b2:e0:f1:
ff:96:81:51:07:f2:d3:6c:fc:00:77:b0:22:28:5e:
44:6e:87:bb:a5:18:57:20:c4:b2:f8:e4:87:cd:2a:
73:0b:09:f6:58:bf:16:f5:38:d4:ab:b1:d4:10:90:
2a:15:18:a3:22:16:9c:0d:51:28:89:27:39:dc:9d:
91:85:e9:31:d5:74:37:bf:12:89:e4:0b:13:4b:fe:
98:11:de:ad:c2:6f:fa:91:31:85:41:d3:ac:bb:73:
2b:43:58:e7:19:d9:96:1a:1e:f0:c3:02:61:99:14:
5f:64:97:53:9e:45:40:6d:5d:00:f8:5f:92:d4:d9:
39:ce:fb:8f:03:b9:20:10:8f:d0:dc:06:5f:27:95:
53:25:3c:87:8d:19:b8:49:46:ed:eb:f5:f9:8e:8c:
c1:c6:4b:04:86:43:04:2b:33:1c:d0:6d:df:46:94:
da:08:5b:cd:ac:ec:de:fe:10:ad:d1:56:e7:1c:61:
9b:26:11:d9:89:88:c9:d3:8a:71:43:bd:52:ae:d9:
d0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:41:74:0E:71:4A:70:E4:60:E6:21:66:5E:D5:93:EF:4E:D2:2F:2D
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fdb81a1b-3eea-4c1a-97f6-940966a0bde0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.128.0/19
Signature Algorithm: sha256WithRSAEncryption
69:b1:83:b1:ce:71:1d:9f:4f:aa:8f:5e:ab:b2:2a:4e:c2:0f:
15:49:33:4e:93:05:84:85:e1:3e:fd:fb:a3:ab:61:11:b6:07:
a6:22:b0:2e:e8:27:f6:7c:f1:4f:9f:6f:ae:c1:07:bf:d5:c6:
a1:d3:06:6c:a7:7a:7a:19:a9:90:41:82:1f:44:51:48:b8:7e:
9d:ad:a5:f0:f0:05:93:a8:3b:c7:7d:19:9b:79:d2:d8:59:ce:
b2:a7:a7:e5:cb:86:6f:34:b8:28:6e:ce:03:be:79:c7:70:52:
ef:7e:bd:79:14:5b:44:75:b9:8f:7e:04:87:a3:a4:d2:60:b2:
e2:06:18:3e:4f:45:16:30:bd:44:cf:74:dd:05:fb:8c:ee:cc:
d3:8f:ac:0f:95:97:be:39:2a:c8:31:74:05:73:12:11:80:ca:
44:b0:be:78:d4:31:f4:93:0c:4e:2c:33:54:82:20:84:95:7a:
2e:81:ea:dc:79:ce:61:b1:49:04:39:2a:b8:04:55:07:85:48:
8b:ab:d6:57:b0:f5:88:74:c0:44:6e:a6:2c:f3:32:fd:cc:1a:
cc:78:31:66:81:3f:e9:51:a9:52:9d:5c:b1:1a:a5:ec:ad:25:
bb:22:d3:4a:38:27:7a:9e:b1:20:64:24:25:e2:4e:fe:b4:a8:
b5:1f:9f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:50:13 2026 by rpki-client