Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2dbc9912-b766-4000-9f7c-cb9e37916980.roa
File: 2dbc9912-b766-4000-9f7c-cb9e37916980.roa (raw, json)
Hash identifier: w8niFk9tKuR1T69+6g3BBbKgOsuih2pzXhIYqCvwjAo=
Subject key identifier: F9:E3:7A:56:0D:86:FA:F8:60:09:E5:F9:D0:12:C9:03:B2:98:6D:11
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2B6D7979BE00D5029E2ACFBFFCC487BFC208FB02
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2dbc9912-b766-4000-9f7c-cb9e37916980.roa
Signing time: Mon 27 Jul 2026 00:20:06 +0000
ROA not before: Mon 27 Jul 2026 00:20:06 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:6d:79:79:be:00:d5:02:9e:2a:cf:bf:fc:c4:87:bf:c2:08:fb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 27 00:20:06 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=19a9ec1447128d136f0b210df6b0fa96a3f5313b2ed7045825e8eb243940297b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:35:a7:de:c7:77:c1:52:2d:73:60:5e:ab:
67:ea:ab:50:c0:28:3d:5e:f2:a0:72:82:1e:c2:88:
ad:d1:a3:0e:13:e7:e6:60:dc:38:31:4c:e3:a9:70:
32:05:3b:88:f6:50:e1:b9:7a:b7:de:23:92:a1:85:
2d:fe:fb:12:24:42:f1:d0:15:e1:a2:f7:86:06:f3:
87:c0:d1:42:b9:5e:c3:70:2b:05:51:79:e9:c6:17:
88:05:27:bc:16:34:d6:dc:25:ec:cf:a3:76:2e:30:
50:84:61:4c:8a:5e:16:5b:39:05:dc:99:4c:2c:e8:
a8:e8:da:27:64:1f:33:4a:96:68:5c:3e:07:a5:96:
0c:ac:3d:19:1f:d5:ff:ec:ba:44:23:e6:06:f1:aa:
b6:e6:2d:7f:5c:3f:f2:ef:b2:07:07:95:70:35:34:
3c:64:0c:0e:5d:ce:4a:00:23:3e:56:f8:23:02:b0:
7a:e2:a8:02:2c:26:04:57:6d:4f:25:24:50:da:b4:
dd:77:49:09:80:73:7c:bd:0b:de:97:cc:e3:0b:7f:
20:78:d3:3d:68:c6:07:ce:54:6d:5b:db:d7:8a:9e:
6e:a8:f8:ad:5f:5e:00:94:e4:35:a4:39:ac:59:69:
74:24:60:24:6e:2c:a1:e2:3d:54:08:6a:c0:82:6e:
5f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E3:7A:56:0D:86:FA:F8:60:09:E5:F9:D0:12:C9:03:B2:98:6D:11
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2dbc9912-b766-4000-9f7c-cb9e37916980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.128.0/18
Signature Algorithm: sha256WithRSAEncryption
9f:1c:63:3e:18:05:ff:9e:9a:7e:80:00:60:1a:f0:91:dc:f0:
51:b8:54:9f:81:fd:e8:6d:8a:80:11:9a:68:d9:76:b6:22:e5:
0a:1a:ac:4a:cd:c8:bd:c9:47:13:0a:ce:58:d1:db:a7:8d:f5:
a2:3f:d3:1a:a4:5c:cd:0b:87:35:01:6d:1e:80:22:bf:e7:c6:
e1:95:1c:27:a2:d7:4c:bb:cf:9b:f1:14:8e:cb:cc:5c:ef:73:
99:e2:e7:33:7d:b3:a6:3f:8c:b9:2e:c7:20:01:62:89:1b:e2:
0b:04:e6:40:27:81:c5:7b:aa:6b:1d:eb:2c:8a:62:76:3c:e9:
0d:00:cb:dc:0f:93:49:40:bc:e5:7b:9c:19:df:87:7b:e7:e1:
a0:b2:db:ef:e9:e8:57:37:07:95:d4:3e:3d:dd:eb:e9:71:37:
5f:d4:42:11:69:fe:41:a3:58:63:13:ca:94:51:68:2d:04:ec:
5e:14:de:29:2b:c3:92:e3:65:fd:69:dc:3e:00:f3:5c:e5:4b:
63:0f:bf:cb:6a:61:58:4b:b0:d6:16:79:5b:6b:4f:b9:b8:10:
cd:7e:49:28:39:85:4b:b6:39:72:bd:28:6d:19:c2:30:79:6f:
e9:35:6c:f0:66:14:38:72:75:85:21:53:cc:04:8a:9d:27:10:
98:e2:58:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:40:56 2026 by rpki-client