Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44c4496c-63e1-49fc-828b-d77f94e0a789.roa
File: 44c4496c-63e1-49fc-828b-d77f94e0a789.roa (raw, json)
Hash identifier: od1ALvRhUWDC2rXKFSkYSPzSwfEn9q6pw9jWzjkwPl0=
Subject key identifier: 6C:7A:23:21:D5:19:78:C6:7A:CA:94:B9:37:A7:50:AC:94:5B:26:47
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 02709076AB94C1B819001567DAC674E9A9F97F27
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44c4496c-63e1-49fc-828b-d77f94e0a789.roa
Signing time: Wed 20 May 2026 00:50:05 +0000
ROA not before: Wed 20 May 2026 00:50:05 +0000
ROA not after: Tue 18 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 213.72.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:70:90:76:ab:94:c1:b8:19:00:15:67:da:c6:74:e9:a9:f9:7f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 20 00:50:05 2026 GMT
Not After : Aug 18 23:59:59 2026 GMT
Subject: serialNumber=15a595d97b462440881945de1cc47ed1e11ca80123f5a387dad05e3df0b69bea, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:e8:a5:4a:ec:79:74:d6:44:cf:f7:82:e4:
32:0f:7d:18:18:1f:21:14:aa:e3:2a:53:f2:8a:68:
cd:62:46:6f:07:1a:2d:3d:72:df:22:57:4f:89:34:
2e:c7:de:31:f3:47:13:b9:f8:8b:a5:75:fc:0a:c3:
18:a6:30:08:dd:15:3f:f9:27:a0:32:6a:25:ee:c2:
83:fd:2c:5c:fb:1b:29:9f:27:64:2d:b4:54:25:c6:
60:44:98:fc:37:c1:39:34:c1:39:e1:2b:79:fb:7d:
b7:7d:c3:f1:c5:9b:e9:bc:6f:f9:b7:af:c6:61:97:
15:8a:e8:58:a3:ab:6b:e1:4a:89:d7:ad:e2:e1:14:
3c:58:47:86:30:3a:9d:3c:79:a7:4b:7b:6a:98:2d:
64:2d:a6:7b:74:e3:14:0d:27:a6:39:79:bf:f2:90:
1f:d8:7a:89:7b:c0:b8:6f:54:3a:ae:4c:12:f2:98:
14:ee:4f:5d:91:a6:94:45:82:66:c0:de:c1:02:b9:
b0:aa:78:5c:39:cc:74:8d:44:17:d9:f2:7a:1e:1f:
b9:c8:fb:84:bc:21:c8:ce:c1:a3:89:34:0b:98:ff:
7a:5d:6c:db:a5:6c:34:ae:a1:17:be:6a:ec:d4:04:
22:01:99:9d:17:19:fc:18:e2:49:eb:11:09:87:1f:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7A:23:21:D5:19:78:C6:7A:CA:94:B9:37:A7:50:AC:94:5B:26:47
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44c4496c-63e1-49fc-828b-d77f94e0a789.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.72.128.0/17
Signature Algorithm: sha256WithRSAEncryption
d7:a4:80:a4:76:51:2a:23:e8:d6:34:7d:6a:25:36:8c:46:f3:
3d:4f:61:1b:5f:2e:38:33:c4:e8:58:a2:64:7a:44:5b:88:bd:
3c:ff:6c:15:a4:6b:4e:5d:00:63:b5:58:1a:42:0d:14:6a:4a:
a7:8a:df:c1:67:c8:7e:96:24:01:96:50:d1:95:41:81:7b:34:
02:27:41:88:5b:42:fe:67:71:a3:16:0d:9c:09:65:a2:8e:04:
ab:82:b7:2a:87:df:9a:46:e4:ec:c7:82:40:f4:56:eb:37:d7:
1a:17:67:49:d4:30:c4:53:f9:55:91:aa:1d:bc:2c:56:ee:37:
cb:e0:8b:99:57:46:3e:f3:cc:c8:3e:4b:80:ce:83:f8:07:e8:
a4:da:c0:25:9f:a1:e7:1c:b9:aa:35:bc:65:ff:25:39:44:65:
7e:80:a1:f1:28:cd:dd:61:8f:01:8a:a9:a2:f2:98:58:d4:7a:
74:23:0d:71:51:c9:2e:c7:ce:12:4d:1d:95:f1:08:d9:77:35:
82:07:c5:73:e8:a7:24:b9:d8:e3:01:6c:cf:49:64:39:3b:e5:
ec:22:40:d4:da:3d:ec:af:ee:39:2b:16:45:2d:fe:85:7e:ca:
d6:85:b8:2f:2c:35:4b:8e:69:d6:53:52:7b:75:d8:43:36:8a:
9b:4f:ac:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:24:14 2026 by rpki-client