Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/207ef309-dcb5-4264-bf57-0d52fea079cd.roa
File: 207ef309-dcb5-4264-bf57-0d52fea079cd.roa (raw, json)
Hash identifier: toaRD/xArc2H8hWZTGEiB13Ffll06RIArdJcwTdr8CI=
Subject key identifier: 04:C6:2B:C0:D5:F0:B8:AA:F3:CE:82:1D:68:CD:9D:67:62:A7:85:73
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3C7BB169925EE05DD61099517C0BF7B2DE107B2A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/207ef309-dcb5-4264-bf57-0d52fea079cd.roa
Signing time: Sun 11 Oct 2026 15:20:23 +0000
ROA not before: Sun 11 Oct 2026 15:20:23 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 130.24.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:7b:b1:69:92:5e:e0:5d:d6:10:99:51:7c:0b:f7:b2:de:10:7b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 11 15:20:23 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=7adec853baa8f31107d08e59693880fe1d6c2bf5685b325be6471a1931f2f926, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:80:03:43:27:a1:46:af:df:2d:33:b8:f2:1b:
84:b7:a0:34:d2:2e:37:eb:47:eb:09:80:65:d8:99:
df:3c:8c:b1:a5:3d:a0:40:bc:1e:a6:3b:f0:ef:e2:
1f:6e:e4:eb:20:92:47:12:00:71:80:ae:d6:97:1f:
1d:1e:4b:b4:b4:ca:ab:c5:07:4b:9c:9c:0d:b7:36:
1a:92:11:05:e4:a2:45:f1:f5:df:be:b3:d7:01:08:
2c:0f:2d:76:08:f3:d2:4d:bf:33:e0:dc:dd:05:f4:
83:9b:b6:34:10:e5:17:ae:6d:64:ee:71:65:59:49:
bc:01:a8:1b:a1:f9:4a:a1:73:d2:1c:f2:2a:0f:92:
b9:a8:ea:5b:15:ba:7a:d3:a5:67:fa:21:6f:1d:d7:
79:24:a1:e1:15:50:91:e0:33:b0:02:db:fd:c4:09:
3b:7b:a5:e6:59:69:ab:2b:a1:49:a6:ee:b2:ba:1b:
be:eb:03:8e:d2:5c:6a:c8:55:34:bf:c7:cd:6f:2a:
4e:c4:c3:e4:1d:5b:69:bc:20:e2:b0:0a:34:72:57:
26:88:ab:b2:f0:bc:93:69:62:bd:eb:9d:c0:7a:6b:
93:3a:26:67:00:4a:e7:8f:7d:f6:d9:3d:d5:46:65:
86:4d:83:f7:48:97:99:8a:12:00:d9:51:70:1f:f0:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C6:2B:C0:D5:F0:B8:AA:F3:CE:82:1D:68:CD:9D:67:62:A7:85:73
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/207ef309-dcb5-4264-bf57-0d52fea079cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.24.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:22:da:6b:ae:e0:aa:5e:e1:4f:60:fe:ac:f2:1d:91:7a:2f:
ef:e3:39:a8:c5:ee:c0:83:c2:2c:8b:f8:47:84:3d:73:cb:12:
de:39:80:1e:b1:54:4a:f9:02:30:24:02:04:62:be:3d:4b:13:
5d:c7:09:3e:28:de:f2:fe:a2:76:6a:ea:88:c2:12:23:60:e0:
59:17:ad:e2:6a:d0:c9:d4:c1:99:a1:3a:4f:65:22:7b:73:5d:
03:bb:5e:f1:8d:00:fb:71:8b:8f:b7:40:e3:a0:d1:2d:0a:60:
d3:74:0e:7b:b0:61:f2:3a:e6:e9:17:48:22:1e:8b:ac:a2:15:
1e:4b:56:8e:25:60:ce:79:89:5f:fe:53:cd:24:22:dc:1f:eb:
87:9e:fa:83:ff:88:a5:5a:a7:7a:29:e1:ba:30:20:51:26:d6:
d1:42:b6:84:0c:01:2e:23:49:01:00:49:fd:09:53:d3:47:b4:
65:95:c4:b5:f2:f3:9d:46:2e:7a:00:d3:ee:d3:22:8b:f3:9b:
fc:1d:14:14:03:ec:54:18:cd:eb:d5:4f:2b:48:57:a1:d8:51:
0a:8c:c3:02:d6:2c:c7:9c:3e:5e:11:3b:07:14:29:10:5f:c2:
06:06:35:07:47:04:13:cd:31:a0:88:1a:06:bc:49:c9:87:ff:
5c:22:b4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:05:38 2026 by rpki-client