Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ff2e2d46-44f0-4790-a453-0090beda0015.roa
File: ff2e2d46-44f0-4790-a453-0090beda0015.roa (raw, json)
Hash identifier: PAx/Q2XMnshLLDaz18bnUCXhrTFoPVhDJp/EzkyuuMU=
Subject key identifier: AB:AA:62:2F:14:5A:03:47:3C:68:FC:D6:87:5A:41:45:07:04:68:49
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 651A1EDBDB04F22C34D52096D8D52358483F7E9A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ff2e2d46-44f0-4790-a453-0090beda0015.roa
Signing time: Mon 26 Oct 2026 05:40:34 +0000
ROA not before: Mon 26 Oct 2026 05:40:34 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 195.247.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:1a:1e:db:db:04:f2:2c:34:d5:20:96:d8:d5:23:58:48:3f:7e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:34 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=f20181491e6862ec9a608c8368d647136338452c073e553f207e9eda2c6137b5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9b:9a:17:36:c1:30:74:82:4a:58:e2:0f:66:
4a:cb:39:b5:d7:bf:75:dc:26:1f:02:68:b1:04:1c:
bc:ef:7d:37:90:0a:43:03:b9:d1:f8:57:4e:0b:0d:
9d:07:5a:34:6e:fd:06:21:41:d1:d7:58:e5:e4:e1:
1f:fc:74:6b:82:85:b2:51:e7:9d:4e:4c:3f:f1:ed:
e0:77:aa:98:a4:34:31:78:a6:c5:e3:5e:85:be:60:
34:5f:79:b2:9d:f0:06:d7:b9:78:78:f6:29:45:3f:
69:cb:b5:46:5a:0d:20:44:cc:80:7c:d5:05:97:a4:
be:ec:c1:5d:37:91:db:bd:df:36:8e:94:61:17:64:
aa:d9:cf:e0:db:0d:3b:cb:d3:c1:03:7a:3c:15:52:
ff:0c:05:d2:e1:56:ac:4f:82:a1:e0:aa:14:9c:89:
2d:d1:61:ed:a5:78:26:7d:cd:74:d2:21:2d:b4:92:
89:b9:f4:37:ba:a9:80:c6:35:49:95:6b:cf:f1:ba:
12:8f:c0:3c:7e:e8:87:19:d9:d1:cb:66:26:42:99:
92:1a:c1:6b:55:89:b7:21:77:c8:08:84:a7:2b:b0:
09:ba:fb:2d:c9:b7:e6:24:69:c8:af:3e:00:38:e8:
ba:13:41:10:ae:e1:20:84:d7:8d:99:3c:72:ad:fa:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AA:62:2F:14:5A:03:47:3C:68:FC:D6:87:5A:41:45:07:04:68:49
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ff2e2d46-44f0-4790-a453-0090beda0015.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.247.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:cf:28:d4:96:ce:a2:f5:b9:18:67:ce:6f:b9:8f:c8:ed:c7:
dd:1b:5e:7a:24:c5:ba:cf:71:35:b2:69:35:2a:d0:63:7f:e0:
7f:77:44:3c:51:72:83:43:87:6c:89:9e:41:fd:9e:cb:49:20:
a8:86:84:90:0d:98:fe:3e:53:6f:2d:d9:ec:d5:59:0d:c6:32:
67:11:a6:33:df:4e:cc:ac:6f:19:90:39:27:48:06:26:25:99:
fa:65:ca:b6:77:16:51:f4:b1:d5:96:3e:85:3e:10:ba:5a:47:
96:9d:02:76:ef:8a:ec:c9:4d:38:8b:6f:22:d4:75:51:38:b9:
ba:aa:9f:eb:c7:29:40:a6:1b:22:d5:48:dc:f7:55:96:90:d4:
23:1f:89:66:be:d1:e4:bb:e4:0c:67:3a:f8:0c:a8:ab:18:c2:
e7:80:f5:1d:77:d9:bc:7b:c5:74:e6:84:cc:35:33:49:ef:e7:
15:98:99:6d:aa:b7:13:da:5d:bb:f0:6d:0c:6b:72:44:44:0f:
98:e2:17:84:be:fb:4d:5b:d0:b1:31:cf:92:af:37:da:3b:fe:
12:b4:8e:bd:98:24:b0:f6:60:16:4a:ff:0a:2f:7c:4d:dd:4f:
2a:fb:fb:5d:d5:bc:55:e2:6f:a7:71:bb:6a:79:35:10:3f:6c:
9e:cf:2c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:29:48 2026 by rpki-client