Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e935d64-1d66-4e52-ada3-30f1ed26d564.roa
File: 1e935d64-1d66-4e52-ada3-30f1ed26d564.roa (raw, json)
Hash identifier: x5/+lHB7nxvCaZbBXJfHp6wz822kNBdBPAEt/bW2PpY=
Subject key identifier: 85:0A:2A:73:53:66:90:5B:0C:07:43:1A:85:BB:7C:F6:B4:E2:37:6F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1A21A6F48990CD1E75636ABF4E2CCE33CF3A0501
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e935d64-1d66-4e52-ada3-30f1ed26d564.roa
Signing time: Mon 26 Oct 2026 05:40:23 +0000
ROA not before: Mon 26 Oct 2026 05:40:23 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 145.17.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:21:a6:f4:89:90:cd:1e:75:63:6a:bf:4e:2c:ce:33:cf:3a:05:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:23 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=0a8197ae4a9bdb24f863f78bc37ea812e40de9c4109bd11b3ffbe038ee90b19c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4f:a0:4a:af:17:ce:f3:3c:64:ab:f4:6e:9a:
7b:5a:e1:ec:21:1f:30:5b:59:51:fd:a7:3f:7c:8c:
52:5b:89:c4:4b:b8:8d:b5:2e:0b:32:30:38:ae:e7:
29:d8:37:a0:53:f2:d1:7c:9f:6d:af:3b:50:0d:33:
96:f6:44:7f:e3:9c:58:09:e7:a8:d4:f8:dc:57:39:
f5:9d:2b:a1:25:da:f4:d9:4a:4a:70:3d:51:86:b0:
2f:51:f2:ab:c7:f5:9f:e7:9b:ca:96:97:04:03:b0:
62:0a:d6:6a:c8:2d:ea:5f:f8:26:8c:a0:a8:fb:b8:
cc:00:88:8d:66:19:b9:47:a0:36:f2:e0:be:74:ab:
4f:55:70:b3:19:34:18:86:6c:fe:27:b3:54:6b:4c:
2e:1d:f5:b3:45:03:fa:b1:6e:3d:85:35:54:38:32:
bc:81:a5:6b:2c:c7:ea:f2:3d:ce:70:f5:b8:f4:8e:
19:c8:f4:b6:8f:44:39:62:bd:46:c6:fe:08:7b:f8:
89:e4:a6:88:9e:9b:a0:e7:fc:9b:4f:0f:13:b5:72:
81:12:fc:8a:11:33:e6:ff:12:62:d9:5b:7f:f5:bf:
de:6c:0e:3b:c3:d8:d5:dc:fe:9c:cd:2c:da:1b:97:
3e:5b:e0:9a:c3:77:ad:ae:8e:ef:d4:a6:e3:81:69:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:2A:73:53:66:90:5B:0C:07:43:1A:85:BB:7C:F6:B4:E2:37:6F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/1e935d64-1d66-4e52-ada3-30f1ed26d564.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:43:34:73:70:af:82:11:cb:32:31:50:71:04:97:f9:1a:cd:
5f:0e:84:1e:e9:8b:86:85:00:58:62:64:d1:d3:5f:44:f0:0b:
63:38:78:70:58:8f:8e:46:32:5d:28:f2:28:b0:f9:aa:1b:1b:
c8:04:ed:91:fb:09:8d:62:a3:27:f6:dc:18:15:76:c9:3e:b0:
63:01:9d:34:f2:78:ec:f0:7f:de:47:e4:dd:2c:44:16:b4:6b:
a1:6a:f9:65:c3:8e:b5:72:dd:d0:ed:30:55:77:15:da:87:98:
c9:e6:21:c8:02:96:89:3f:c6:13:5b:55:5e:d3:2f:b9:4c:e0:
f5:2c:02:42:84:e8:ae:31:f6:f6:ce:9f:20:f1:1f:af:51:1b:
ad:71:e0:0c:b1:47:0a:d1:de:3c:96:0c:75:71:ab:11:24:1e:
06:f6:49:0b:cb:a3:07:d0:d8:2e:c9:74:f9:22:df:81:12:33:
c4:3a:d2:dc:1f:2c:77:60:7a:cb:05:91:27:5d:f9:5a:d6:57:
0f:5f:ed:cc:c0:61:c0:b1:d9:00:2f:0b:51:36:98:4e:ab:70:
9c:fa:dd:73:20:28:29:2b:16:35:1d:ce:d3:ba:2c:ce:9c:4c:
97:4a:3b:7f:d5:7c:8f:c1:99:28:fc:51:88:e8:db:78:a8:4d:
89:fe:b6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:27:50 2026 by rpki-client