Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/338cbdf4-937d-41ee-8ec5-ca45e166a036.roa
File: 338cbdf4-937d-41ee-8ec5-ca45e166a036.roa (raw, json)
Hash identifier: Q8ZTXYx4fvf8TJtbOoTUvixuXTrL3NMjyEpQUvaDr3M=
Subject key identifier: B8:F1:59:C7:42:3B:2D:DC:36:2A:10:A1:F3:D9:A6:86:2B:1D:CC:FE
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0C5FC06FE19F3DE2555D71C9A1E58A01C73C9788
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/338cbdf4-937d-41ee-8ec5-ca45e166a036.roa
Signing time: Mon 26 Oct 2026 05:40:05 +0000
ROA not before: Mon 26 Oct 2026 05:40:05 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 7224
IP address blocks: 193.57.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:5f:c0:6f:e1:9f:3d:e2:55:5d:71:c9:a1:e5:8a:01:c7:3c:97:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:05 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=4f057b4695f18b97787b3b95557ac58aa2cea2c14dd6ed915538795a36727e71, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:c0:75:0f:99:4b:a7:75:06:ef:b0:fe:47:
e9:ed:af:71:b1:d7:34:18:cf:0e:9c:39:00:cf:b0:
7f:6b:1c:62:9c:03:50:52:d3:7e:81:26:d2:05:d6:
0d:eb:f7:a0:96:73:2d:5e:a6:b3:9e:2a:3d:3d:b5:
20:0d:08:8f:74:70:23:a7:f0:b2:d1:2e:59:af:c3:
a5:73:f4:ab:de:b2:e2:f8:2b:ee:9c:b0:8d:09:2e:
b6:b6:c3:06:e7:b3:0f:18:f9:93:57:58:3e:67:8d:
12:d4:8e:30:af:0a:02:7e:a6:be:4b:46:ea:70:9b:
55:c9:87:43:90:f4:7a:35:6a:04:0d:f1:08:9b:d2:
9f:e2:1f:9c:7b:02:50:e6:76:41:97:33:a3:5e:f2:
38:40:13:28:95:34:0e:42:af:4a:5a:b0:fa:8d:e8:
b4:5b:72:2c:42:e0:ce:57:1e:cd:46:81:dc:a2:08:
42:7b:a7:7f:9d:69:67:41:70:89:20:25:fc:6b:7d:
df:a2:6f:46:f2:4e:d9:6b:ad:0d:20:3a:09:cd:a5:
b8:d4:ac:94:00:52:01:1a:8a:0b:8a:c8:52:24:ed:
cb:64:a9:f1:17:2a:64:f7:45:3c:66:4e:15:11:e5:
0e:f8:14:b2:0b:94:4a:81:a2:8b:b3:da:92:22:57:
d1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F1:59:C7:42:3B:2D:DC:36:2A:10:A1:F3:D9:A6:86:2B:1D:CC:FE
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/338cbdf4-937d-41ee-8ec5-ca45e166a036.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.182.0/23
Signature Algorithm: sha256WithRSAEncryption
94:6c:e9:ad:61:a4:fb:92:23:25:53:2a:c5:6f:7b:83:6e:a5:
e5:d0:98:0b:79:61:d1:e7:a3:d8:5b:31:78:3b:e8:b0:80:ca:
9f:d2:ee:f7:59:dc:d1:34:f4:0b:18:89:1e:ce:91:11:fa:ec:
a0:f9:45:f2:a5:2a:b3:9a:bf:94:d3:74:0f:0b:15:21:87:2e:
59:4a:44:24:39:db:23:bf:08:7f:c9:3b:da:29:a9:08:d7:fa:
bb:20:c8:73:ba:dd:f7:45:62:f0:77:8e:51:04:4f:1a:68:99:
57:c8:eb:d1:ec:e8:6f:ea:50:50:64:6d:b1:29:bc:a0:e8:92:
f2:3f:ec:ea:1f:66:27:bc:df:04:92:10:4c:74:ef:39:05:86:
54:67:98:12:39:6e:8c:84:8f:c2:ee:90:ad:61:82:21:59:31:
80:ed:a1:88:96:d8:fb:13:62:8e:f4:41:d9:cf:91:1e:57:30:
0a:68:04:bc:11:48:a9:97:1e:82:63:a6:d7:4c:75:c7:32:42:
09:b4:07:7b:09:8b:b1:1c:bb:2b:3f:c0:05:39:3f:4b:12:82:
3e:da:d5:46:82:14:bb:56:1d:80:68:85:1c:58:f7:37:47:30:
48:a9:aa:e2:0f:e6:2e:7c:e8:5d:67:74:bf:43:c4:f9:cc:f4:
2f:fb:97:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:59:21 2026 by rpki-client