Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5f332a53-b8fa-4d61-9e5a-9ca4e586588d.roa
File: 5f332a53-b8fa-4d61-9e5a-9ca4e586588d.roa (raw, json)
Hash identifier: Lri2JCvPNJMazkRisr5cfLiKHJRmSnn2TDjpT8TCvVo=
Subject key identifier: 33:EE:0D:0D:63:0F:FF:12:27:CC:AD:EA:B2:0B:98:C7:F7:19:31:11
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2511E36A040D78913BB147126C0DA4C58BB1F93C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5f332a53-b8fa-4d61-9e5a-9ca4e586588d.roa
Signing time: Sun 11 Oct 2026 15:20:11 +0000
ROA not before: Sun 11 Oct 2026 15:20:11 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 83.129.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:11:e3:6a:04:0d:78:91:3b:b1:47:12:6c:0d:a4:c5:8b:b1:f9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 11 15:20:11 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=3e0010d4d48b4e7e3094c79d6a3746a553fa90688726c009c39171647eec66ec, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:62:a0:47:54:7f:5a:4f:26:94:a4:ec:ea:
42:81:8d:7d:33:0a:8d:bd:d5:ca:13:54:48:ad:74:
55:5b:bb:7b:52:2d:b5:de:27:a2:d1:93:ab:34:42:
56:ca:0b:08:33:f2:d2:44:2d:bb:da:21:96:9d:f9:
a9:cd:3f:06:2d:62:32:3e:5a:30:10:33:e9:5a:82:
40:ce:9b:11:33:b2:5a:c0:10:e1:b4:33:47:97:27:
ee:a9:28:3c:b2:16:65:c7:ea:3b:1c:4e:2d:53:0a:
0a:06:e9:ce:da:8a:7a:2a:fd:29:bf:0e:0c:d5:d6:
b0:34:14:0c:8f:ea:01:05:7b:d0:1d:79:d0:89:45:
bc:64:25:b5:9e:d7:d2:3a:65:c4:fa:ff:22:b7:6e:
fe:7e:84:59:a7:27:f0:50:0a:23:28:60:de:b7:94:
97:5e:a4:ed:d7:8b:fc:aa:f0:59:a0:7c:c3:61:fb:
4c:e7:29:ae:7a:b7:4e:5b:51:06:36:4b:40:e0:92:
f0:68:b5:f7:3c:6d:0a:6c:76:31:ad:8f:b2:9c:19:
bf:5f:9e:74:79:f3:ef:7e:28:1e:a2:fb:ca:e0:8b:
21:e5:f2:d9:d4:f0:a7:d7:66:50:5f:1d:85:ee:f5:
b9:19:8f:af:7d:7f:45:6d:ac:1c:9e:31:81:6c:ab:
1e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EE:0D:0D:63:0F:FF:12:27:CC:AD:EA:B2:0B:98:C7:F7:19:31:11
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/5f332a53-b8fa-4d61-9e5a-9ca4e586588d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:3a:01:a2:92:6a:6a:35:12:27:c5:7e:10:14:70:81:15:b1:
96:9d:d9:ff:41:99:fc:d9:8e:33:c0:19:b7:19:f6:9b:b4:0c:
74:2d:a8:2d:e9:89:22:9b:35:ec:4d:0d:bb:c9:15:8a:1a:39:
03:f1:fb:88:46:24:00:19:d1:d7:b5:4a:1e:33:a3:ae:96:4a:
45:3b:51:4d:a0:e1:d4:be:ec:66:eb:c9:6c:b8:66:24:22:59:
6f:92:c0:24:b7:84:bd:3c:56:9f:31:01:d7:bd:b6:60:5b:71:
1a:a6:5a:97:fe:21:e5:d8:eb:84:c3:66:a2:3a:a0:19:15:77:
51:53:29:c5:7b:f6:b8:d7:0e:55:a4:36:85:55:86:37:32:11:
e1:aa:77:8c:aa:54:98:95:b0:75:4c:e6:80:ac:41:18:a2:5a:
16:2b:d8:5f:b6:98:8f:c0:c8:54:04:e8:29:32:2a:f8:f7:cd:
74:dc:22:6e:13:b2:14:25:4a:b5:f0:7a:52:d8:4e:ee:59:1a:
2f:e5:54:7d:d5:a8:80:fc:b9:f1:08:3e:e5:82:b9:38:92:31:
06:42:f6:72:a5:af:c0:6f:73:44:b1:dd:86:d6:71:15:79:ad:
d8:1d:4c:e8:40:ac:83:91:3e:09:eb:82:fd:e7:64:33:e1:04:
f8:7c:a8:52
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUJRHjagQNeJE7sUcSbA2kxYux+TwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMTExNTIwMTFaFw0yNzAxMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDNlMDAxMGQ0ZDQ4YjRlN2UzMDk0Yzc5ZDZhMzc0NmE1NTNmYTkwNjg4NzI2
YzAwOWMzOTE3MTY0N2VlYzY2ZWMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMK/YqBHVH9aTyaUpOzqQoGNfTMKjb3VyhNUSK10VVu7e1Ittd4notGTqzRC
VsoLCDPy0kQtu9ohlp35qc0/Bi1iMj5aMBAz6VqCQM6bETOyWsAQ4bQzR5cn7qko
PLIWZcfqOxxOLVMKCgbpztqKeir9Kb8ODNXWsDQUDI/qAQV70B150IlFvGQltZ7X
0jplxPr/Irdu/n6EWacn8FAKIyhg3reUl16k7deL/KrwWaB8w2H7TOcprnq3TltR
BjZLQOCS8Gi19zxtCmx2Ma2PspwZv1+edHnz734oHqL7yuCLIeXy2dTwp9dmUF8d
he71uRmPr31/RW2sHJ4xgWyrHmcCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQz7g0N
Yw//EifMreqyC5jH9xkxETAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
NWYzMzJhNTMtYjhmYS00ZDYxLTllNWEtOWNhNGU1ODY1ODhkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAFOBMA0G
CSqGSIb3DQEBCwUAA4IBAQAXOgGikmpqNRInxX4QFHCBFbGWndn/QZn82Y4zwBm3
GfabtAx0Lagt6YkimzXsTQ27yRWKGjkD8fuIRiQAGdHXtUoeM6OulkpFO1FNoOHU
vuxm68lsuGYkIllvksAkt4S9PFafMQHXvbZgW3EaplqX/iHl2OuEw2aiOqAZFXdR
UynFe/a41w5VpDaFVYY3MhHhqneMqlSYlbB1TOaArEEYoloWK9hftpiPwMhUBOgp
Mir498103CJuE7IUJUq18HpS2E7uWRov5VR91aiA/LnxCD7lgrk4kjEGQvZypa/A
b3NEsd2G1nEVea3YHUzoQKyDkT4J64L952Qz4QT4fKhS
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:24:34 2026 by rpki-client