Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/387a5e5f-3658-431f-b236-d486cddcae07.roa
File: 387a5e5f-3658-431f-b236-d486cddcae07.roa (raw, json)
Hash identifier: UOfmHFddQCBhxopbwoGbYbbNy8iOjmkDPYD4RS4kWVM=
Subject key identifier: 7B:E7:10:C4:3E:34:24:39:E2:1D:42:B3:71:89:1A:87:AF:C1:AB:46
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 45F2FDD235983C6555F537DCFA5B190E95EA9E66
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/387a5e5f-3658-431f-b236-d486cddcae07.roa
Signing time: Tue 17 Feb 2026 00:00:06 +0000
ROA not before: Tue 17 Feb 2026 00:00:06 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f2:fd:d2:35:98:3c:65:55:f5:37:dc:fa:5b:19:0e:95:ea:9e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Feb 17 00:00:06 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=bb8d54b25d93f83445fffd2c88495882929b753b432ea39e4bac861878ee56d8, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:81:d6:76:90:3b:b6:57:32:56:1d:27:5c:19:
73:73:90:9e:eb:36:2a:f8:ce:5f:36:9f:58:6d:00:
fb:ae:14:70:3d:43:85:04:f1:59:3b:8d:d2:20:25:
9e:28:bb:29:86:f7:5b:2c:c4:25:b1:3b:9c:cf:de:
e8:5e:5c:1a:71:73:45:93:df:3f:b2:e3:53:52:36:
bc:01:be:66:fb:a1:d9:8d:8d:d5:6d:28:5b:59:bf:
eb:05:24:37:b5:b9:66:72:f3:f1:42:9a:60:18:27:
26:fc:1f:71:53:0f:b3:dc:55:2a:dc:b4:b2:71:db:
11:86:b6:54:cb:d5:48:51:5f:f2:9d:c3:46:f4:bb:
10:0b:5e:ba:92:57:d9:03:5b:d9:aa:7f:eb:9c:32:
14:21:75:a1:c8:a3:db:9d:2c:fa:a8:39:47:74:a8:
b6:bc:69:b5:f6:95:84:99:96:b7:a7:1f:a2:4a:0d:
86:2b:f2:8d:23:11:98:a4:ca:26:50:9f:00:33:78:
bd:66:1a:2e:8b:3e:a2:8e:55:b8:ce:3d:ac:2e:30:
57:64:7d:59:d9:12:34:fb:28:79:9f:8b:cb:16:f1:
bd:47:6b:91:e0:50:f3:60:14:b8:2e:48:5f:f1:6d:
ce:34:a7:cc:4a:2c:6d:1a:67:c8:63:1c:c1:45:bb:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E7:10:C4:3E:34:24:39:E2:1D:42:B3:71:89:1A:87:AF:C1:AB:46
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/387a5e5f-3658-431f-b236-d486cddcae07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.128.0/17
Signature Algorithm: sha256WithRSAEncryption
cb:b1:22:e8:96:9b:48:3e:51:82:9e:fa:6e:ce:ef:a0:5c:59:
0d:ec:5a:5e:dc:87:5b:c8:35:25:3d:e8:9c:8c:23:4e:d2:ea:
90:39:fd:0d:10:d4:66:55:4d:d1:c7:42:dd:ee:7b:20:81:c3:
d7:b1:a9:04:d9:bd:98:e2:87:1f:19:67:29:d5:5c:2b:64:bc:
38:a3:02:0f:49:c2:68:96:38:8b:f3:5b:c6:1b:0e:80:26:32:
09:c3:54:64:6f:f9:23:2b:0b:41:28:5e:94:c2:c2:46:cd:57:
5f:9f:61:ae:ff:db:d6:56:8f:64:a0:76:fa:5a:c0:46:e4:3e:
65:ce:0d:a9:1e:3f:d6:8e:b3:5b:c8:00:d3:1b:82:24:8f:98:
46:07:f7:5d:c7:ee:9a:db:b1:d4:bc:25:66:1f:dd:75:fc:cb:
96:78:3f:3d:db:8b:95:d1:29:e5:c0:bf:a9:57:99:aa:fa:5d:
c2:c6:63:c7:c9:d6:c1:f9:bb:76:17:94:8a:bb:24:9c:3c:96:
5f:23:40:4c:01:87:73:ba:dd:8a:c8:58:dd:88:b8:a7:e5:65:
4c:7b:22:62:6d:cd:15:37:81:73:f1:10:d4:d5:9c:60:96:69:
e3:20:1f:99:c8:00:0e:cd:7c:d3:08:5a:c9:e0:9b:9c:45:e2:
8a:ff:88:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:50:15 2026 by rpki-client