Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5b8eca1c-0001-4580-9357-36838b685542.roa
File: 5b8eca1c-0001-4580-9357-36838b685542.roa (raw, json)
Hash identifier: 4LQ8Nnkm6KeOsMhQzVzvaP98w7qjjn0NesytXCs4CUA=
Subject key identifier: FA:46:DC:5D:3D:F4:D2:B6:C5:6F:9E:85:33:38:AF:92:BD:A6:19:E0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2DBB5F33CCF562FE4150F74C7D649141B25AD406
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5b8eca1c-0001-4580-9357-36838b685542.roa
Signing time: Sun 11 Oct 2026 15:20:19 +0000
ROA not before: Sun 11 Oct 2026 15:20:19 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 159.239.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:bb:5f:33:cc:f5:62:fe:41:50:f7:4c:7d:64:91:41:b2:5a:d4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 11 15:20:19 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=5af7fe83b9a46b8635a36b9ca85b289964018e3bba869a6f848e19cc04b88b24, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:79:88:00:ea:4d:cb:6e:54:14:52:10:9c:78:
d1:1d:2b:d2:b1:7f:02:21:1a:1d:33:a8:2f:ed:53:
07:9d:5a:f5:87:3d:db:e6:b9:34:8a:a5:6f:d9:c1:
16:f0:31:dc:39:62:26:c5:fd:f4:81:95:f2:c8:18:
de:7f:a9:10:7a:f8:3d:cd:fc:a7:20:16:cb:25:15:
ea:6f:27:5b:b2:0b:04:d0:43:8f:5c:59:09:97:ec:
fc:01:41:a5:77:f3:72:3b:64:5f:b0:23:92:05:dd:
7e:49:20:d3:50:38:b4:f9:71:6b:85:99:9d:5e:14:
de:27:a0:20:d7:2f:39:fa:74:af:01:30:d1:4f:aa:
56:cc:b2:ac:1b:8c:57:59:03:e5:f0:6b:54:a1:92:
32:89:e1:21:ff:2f:f5:dd:ea:23:99:1d:36:a6:75:
a4:ed:9e:56:fa:6a:1e:7b:74:7d:31:ee:54:fe:1b:
8f:47:7b:a2:66:35:ae:18:d3:2b:70:e6:94:de:35:
80:2e:1e:b3:1f:a1:7d:b4:a1:61:a9:bb:25:82:d8:
50:3c:10:cf:5f:aa:0a:08:01:50:48:09:c4:f3:a2:
40:96:ad:db:0a:55:d4:83:ef:ce:d8:ac:f8:3b:aa:
1a:21:1a:27:1d:9d:09:ff:1e:0b:9a:28:ce:16:01:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:46:DC:5D:3D:F4:D2:B6:C5:6F:9E:85:33:38:AF:92:BD:A6:19:E0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5b8eca1c-0001-4580-9357-36838b685542.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.239.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:92:03:b0:9b:ca:2b:d1:22:3b:20:71:a2:d9:64:ff:9e:16:
f6:c5:f0:e0:77:81:3c:8a:33:fc:ff:9f:3c:51:2d:42:ac:58:
08:2f:43:e9:11:bf:cc:24:e6:b2:67:b9:06:fb:55:5d:df:d3:
7b:48:7b:33:2f:1f:a4:52:d0:5d:1b:3b:89:81:29:a2:3f:75:
6c:6a:62:fb:28:b0:f7:33:f0:36:78:a6:5f:fd:44:8f:4e:37:
cf:6d:9f:80:67:ac:37:4a:18:ed:af:79:fd:6f:ce:ca:a9:2a:
3e:7d:0e:64:a5:9d:84:af:d9:c2:a3:62:dd:d4:65:35:26:aa:
0a:c8:11:d0:b1:8c:8d:dd:0c:cd:d4:e3:10:eb:2a:30:04:1f:
5f:12:3f:18:42:11:3b:81:ed:0e:4e:8f:f3:e0:9a:db:96:5a:
21:51:0a:9f:08:5e:b9:d6:cf:fd:38:b8:17:ee:33:d6:b3:56:
ca:68:a4:b9:a8:71:49:b5:c7:c3:83:87:d0:ff:76:5a:fb:e1:
64:47:8a:85:86:2a:7d:8f:f5:ee:cf:55:66:a8:d7:a1:d6:7b:
3c:a2:3b:16:9f:12:37:f3:14:5b:8c:8c:a4:47:16:60:f3:75:
0f:9b:c1:6f:8a:0c:36:77:2a:74:8b:7a:c3:aa:b6:41:54:5c:
9b:06:a7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 06:45:28 2026 by rpki-client