Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/15288dfc-bb6b-43a2-9ec3-7275954dae14.roa
File: 15288dfc-bb6b-43a2-9ec3-7275954dae14.roa (raw, json)
Hash identifier: X2YFje61EhhV2hy+BA9XmxWUHmDdl6OftZVOu1Qr+d4=
Subject key identifier: F1:7F:A4:ED:AE:11:26:01:28:CE:C8:7D:95:A8:ED:42:D8:D9:EE:B9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 79F68F1962A2AF2B676823780348725DED0697FD
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/15288dfc-bb6b-43a2-9ec3-7275954dae14.roa
Signing time: Mon 27 Jul 2026 00:20:07 +0000
ROA not before: Mon 27 Jul 2026 00:20:07 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f6:8f:19:62:a2:af:2b:67:68:23:78:03:48:72:5d:ed:06:97:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 27 00:20:07 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=ce566e41439e58448facc44fbbc87a6fea6151947219841645643540d9b785e6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:08:27:d7:58:a7:fc:4e:6e:5d:ef:b8:0e:
8a:92:cd:23:9e:6f:c5:ec:32:68:12:6c:85:93:ca:
10:80:78:92:7c:11:f7:6b:83:2d:72:01:3c:7e:32:
4b:4a:5c:45:71:27:47:ff:81:27:0b:8d:a5:9a:1e:
c4:3d:d3:30:a4:d8:40:23:d2:a7:d5:11:f4:3c:b4:
97:cc:b2:94:d7:25:43:f2:8d:28:51:9b:55:96:7a:
66:05:2d:f4:27:84:d6:08:9f:76:c0:40:93:79:68:
ea:6a:2d:73:e0:ba:c8:d1:db:cf:b8:64:63:43:35:
d8:63:fc:e7:f2:b9:0d:61:30:3d:e1:ab:58:27:12:
ca:db:76:fa:f2:29:a2:91:a0:a0:4a:6d:bb:67:9f:
9c:24:50:88:10:35:42:fb:e4:3f:c0:97:de:1b:9c:
98:8b:8e:c6:1d:cc:7b:90:a6:f8:74:b4:3b:a9:5f:
12:fc:a2:df:c0:2f:e2:79:28:7b:a6:1f:dd:74:4c:
1a:6d:8d:14:ea:ce:c5:9b:1a:b9:a7:71:46:e7:d0:
e4:6f:ca:ed:0e:9c:87:36:2a:73:12:f2:85:c0:1e:
f9:73:55:a2:c3:de:fe:aa:b5:48:66:ac:d7:d3:45:
96:d6:92:18:f5:89:2d:4b:c7:50:9a:51:20:50:ad:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7F:A4:ED:AE:11:26:01:28:CE:C8:7D:95:A8:ED:42:D8:D9:EE:B9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/15288dfc-bb6b-43a2-9ec3-7275954dae14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a2:55:1f:9d:0d:7b:9b:3c:b3:31:b0:e9:c4:fe:e3:8a:a8:ae:
41:29:b7:08:b6:81:8f:db:71:f3:17:f3:be:3f:97:c6:49:1f:
e8:52:1b:f6:89:89:0d:af:48:00:aa:e6:1b:52:e5:0f:28:68:
7c:04:aa:aa:35:21:f7:bf:55:a1:2a:58:fa:91:e3:b3:8c:31:
90:a3:97:6c:8b:bd:dd:fd:af:d6:b5:3e:8f:fc:fa:15:8f:e6:
de:bc:aa:fe:2a:67:9c:61:a4:ba:3c:95:c5:0b:47:0b:15:99:
24:e3:e5:e7:28:61:4e:cb:28:82:00:23:50:a6:30:66:28:aa:
20:02:cc:5e:12:f6:86:51:bd:a8:75:60:01:83:24:9f:1d:97:
a4:0d:9a:2f:88:cf:cd:12:ca:5d:ec:76:05:55:38:97:5d:b5:
48:aa:7c:89:94:8c:01:98:4b:5f:74:11:1f:9d:d9:5d:03:11:
15:59:cb:f1:65:a0:3e:27:b5:f4:bf:9a:5b:b9:fd:50:5e:bc:
9a:96:27:cc:6a:43:03:44:a2:67:60:e4:14:31:c3:49:0b:02:
5c:59:45:52:63:b7:a1:f9:f5:31:37:12:40:96:93:f9:64:46:
c8:ef:17:85:c4:fe:3b:96:77:c2:1c:ef:ea:d5:c0:7f:6e:5a:
4c:b3:1d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:41:15 2026 by rpki-client