Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa
File: 157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa (raw, json)
Hash identifier: iBqLjaNCEIWN3ocK6t4yUFCyJd4MTDzV8+BheDq43IY=
Subject key identifier: EA:9E:E8:FB:59:D8:A0:0A:44:11:82:B9:80:33:54:75:29:D1:E8:AF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4BDFEFD16FDCE1DCACDE4786419F55E1397B4B58
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa
Signing time: Sun 11 Oct 2026 15:20:10 +0000
ROA not before: Sun 11 Oct 2026 15:20:10 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 80.203.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:df:ef:d1:6f:dc:e1:dc:ac:de:47:86:41:9f:55:e1:39:7b:4b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 11 15:20:10 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=0c788e26674e1dfa7af195ffeae708bb1262b18e07cd85aa6d721f2f67e22dfa, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6e:07:0f:2e:c5:d6:db:c3:b6:27:d4:6e:4c:
12:e1:67:ec:d2:14:85:fe:4a:dd:4c:75:05:c5:26:
a3:bd:b6:9d:cd:fa:21:be:16:48:2f:7f:7f:22:33:
d1:59:45:8a:e4:17:e7:1c:62:45:ef:86:bc:e6:02:
c9:bb:b6:7f:3f:41:d1:6b:3f:18:e0:5d:c1:08:cd:
8c:9d:7b:20:f0:10:4e:05:ab:1c:fd:aa:2f:db:66:
5c:f9:53:14:47:7f:f7:07:b0:b8:e3:e1:6a:2d:06:
bd:4c:89:67:1a:44:5f:98:b8:66:37:99:8c:ed:3e:
35:dc:82:f5:bf:67:74:ee:e8:a0:e3:d8:50:3a:3b:
aa:51:3f:06:e1:84:67:91:41:38:4d:09:4b:69:2f:
b0:19:4d:5a:8b:e8:9e:92:58:a2:62:c5:f2:56:fa:
45:81:d1:ec:0b:43:74:91:e3:37:9e:8b:18:bc:b0:
cb:7f:d0:58:80:be:23:c6:cf:de:02:c1:c3:16:12:
4f:93:da:d1:c3:0c:27:b3:70:7b:c8:f1:30:cf:1f:
b0:de:4a:6b:f4:9f:bf:08:4b:88:4b:ea:d5:aa:94:
3a:1c:e8:e0:7d:87:7d:64:61:0b:19:49:08:24:d4:
fc:9b:23:78:a2:4b:42:b7:34:ba:8e:0c:99:83:fd:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9E:E8:FB:59:D8:A0:0A:44:11:82:B9:80:33:54:75:29:D1:E8:AF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/157e5e79-2e0b-4b8f-adb2-fd57f3d28ab6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.203.128.0/17
Signature Algorithm: sha256WithRSAEncryption
17:fb:2f:a0:60:99:93:4e:b2:31:d3:73:98:f1:2f:f1:7a:d2:
4a:e2:86:0a:93:34:eb:15:f7:80:46:36:7c:71:c5:71:1c:c2:
78:a3:e4:28:e3:51:95:0f:99:96:5e:2d:da:e7:a0:ae:65:e1:
86:cb:5d:26:67:bd:28:96:ef:de:17:2e:f2:5e:03:bf:c6:8f:
15:f9:fa:1a:06:65:eb:b8:22:31:c6:6c:b7:a7:9f:84:bc:6a:
6b:f5:73:83:0b:07:94:d7:63:cd:cd:2c:20:5e:aa:a3:68:ff:
6d:ac:b9:51:81:37:30:36:6c:cd:15:d8:f6:48:f8:3e:37:cf:
20:e7:b7:7e:ad:e3:d3:46:f0:e7:bd:6d:7c:e2:1d:a4:8c:9a:
fe:80:7a:76:5c:67:56:9d:bb:23:d2:34:af:c5:a3:9f:83:28:
a7:c5:76:e4:13:df:ba:b5:b3:3c:33:ba:7e:bb:fd:37:9b:c1:
64:09:53:c9:b8:42:b0:9a:26:c5:4e:95:00:56:c6:7c:e2:66:
b5:5c:d3:10:e1:5b:c7:11:6b:a1:a2:88:46:a6:d1:d3:df:3e:
0c:45:54:22:50:46:58:e5:2f:0b:ff:92:f2:77:78:dc:b7:17:
54:5e:7e:8d:f7:01:e5:ff:dc:52:41:f7:9d:0d:1d:df:12:0d:
9f:4c:d2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:28:38 2026 by rpki-client