Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/387a5e5f-3658-431f-b236-d486cddcae07.roa
File: 387a5e5f-3658-431f-b236-d486cddcae07.roa (raw, json)
Hash identifier: kQQ16wESdrRYXeyo3lsVKxvI5/oRnd+9YQR6Od22Ok8=
Subject key identifier: 8F:31:45:81:2E:D8:4C:11:EF:76:E8:6D:F5:CC:D6:99:69:51:2C:1A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6D8AB2CA69833D6024D72EF25B80C23CA6E36FA2
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/387a5e5f-3658-431f-b236-d486cddcae07.roa
Signing time: Mon 27 Jul 2026 00:20:06 +0000
ROA not before: Mon 27 Jul 2026 00:20:06 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:8a:b2:ca:69:83:3d:60:24:d7:2e:f2:5b:80:c2:3c:a6:e3:6f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 27 00:20:06 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=87c697183118ac8ee3999a70b78a78fb1b426bedfe017669634dbc5e2bc6ca0a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:8d:83:b8:01:3f:b6:8a:da:cf:a0:26:66:
ec:6b:b1:a6:9f:29:7f:8d:1c:ca:ae:60:fd:61:e4:
c7:6c:02:1d:11:79:55:5c:78:ce:53:fd:30:0d:aa:
85:14:45:e6:c3:9c:5c:fa:0d:6a:4c:3a:1b:55:3d:
65:26:92:34:a8:4f:01:1e:ac:2f:ed:95:70:0d:94:
d5:f7:97:98:dc:5f:bb:31:d3:8f:af:33:87:73:b1:
3d:68:0a:7b:d2:17:b2:33:34:f3:32:fa:b6:70:3f:
0c:f2:f6:7b:89:66:be:0f:44:0d:58:f6:c7:3b:04:
21:ba:a3:0f:aa:bd:fe:48:84:75:06:c4:ba:de:2a:
c1:a0:db:c8:f0:26:04:e1:0b:6c:0f:77:53:c7:a2:
29:87:5b:12:f5:49:be:40:93:40:85:03:79:2f:e8:
18:ef:30:62:a8:23:af:9e:b7:ca:69:bd:15:2f:4f:
2f:4d:d6:fa:a8:e8:14:02:77:29:26:b8:db:1c:8f:
90:6c:ea:13:6f:33:89:9d:11:f9:66:9a:c5:36:ca:
4c:4f:d3:63:3a:86:84:62:7d:53:6e:66:f0:ec:ba:
ab:b0:f8:2c:01:01:87:2c:02:38:dc:e3:13:9c:8c:
3d:0f:97:27:14:c6:19:60:98:26:82:95:40:ff:80:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:31:45:81:2E:D8:4C:11:EF:76:E8:6D:F5:CC:D6:99:69:51:2C:1A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/387a5e5f-3658-431f-b236-d486cddcae07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.128.0/17
Signature Algorithm: sha256WithRSAEncryption
43:41:ce:09:4c:68:99:7b:cd:28:fc:8a:a6:8f:0b:a4:f1:cd:
97:e7:93:21:f5:ed:c5:b5:df:4a:c1:1b:b7:fd:c8:39:c6:85:
9a:98:9b:09:b4:3d:18:f0:85:91:20:e6:c7:f4:d5:34:3d:ae:
00:cb:28:25:77:32:f9:8e:69:30:c6:63:ff:19:9b:e6:5b:fa:
5b:7e:ef:78:91:3f:68:6b:13:d3:15:69:c6:8b:24:32:5f:22:
43:c6:22:41:11:a8:77:16:d1:4b:c4:d6:2e:d9:c1:f2:b8:e8:
b8:a9:dc:90:87:f6:72:97:bc:82:8c:3f:b9:bf:52:01:5c:5d:
64:13:58:bc:58:8a:4e:7e:7f:0e:f4:b4:3b:fd:8b:e0:62:ee:
39:69:7a:01:de:8e:7d:c1:e0:13:61:6e:c4:c9:7e:1e:fb:6c:
73:df:31:94:bc:34:45:33:d9:6f:35:9c:4c:2b:a5:7c:38:6a:
01:97:8b:f9:d6:5b:69:4b:b5:ca:1e:55:8b:ef:36:8b:b9:b0:
96:5d:de:e4:3c:22:18:90:f9:2a:de:10:76:b7:04:fb:0d:99:
f4:87:d8:3a:4e:a0:59:27:6e:a5:00:2f:e1:b6:9f:8e:b8:b7:
84:50:0c:98:a8:f3:89:f9:62:19:9b:ce:30:82:ef:ab:78:44:
72:b2:d9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:00:08 2026 by rpki-client