Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/695716ab-c4db-435d-95fe-4143be62030e.roa
File: 695716ab-c4db-435d-95fe-4143be62030e.roa (raw, json)
Hash identifier: 2j+o+ooRFYbagUFN3HgCy5abZHG9CwP6emxukJoTgFY=
Subject key identifier: 01:7A:62:98:AF:F5:35:2D:89:91:37:9D:CF:2F:3F:61:82:65:F5:BF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 398CC2AC39BAC1675ED349E51FEE8EB353A933FA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/695716ab-c4db-435d-95fe-4143be62030e.roa
Signing time: Wed 20 May 2026 00:50:09 +0000
ROA not before: Wed 20 May 2026 00:50:09 +0000
ROA not after: Tue 18 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 139.79.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:8c:c2:ac:39:ba:c1:67:5e:d3:49:e5:1f:ee:8e:b3:53:a9:33:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 20 00:50:09 2026 GMT
Not After : Aug 18 23:59:59 2026 GMT
Subject: serialNumber=09d184552417a4c735a02ed8dce946b2ce26716e06940089f38243f068325e91, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:c0:6f:c0:89:38:5d:48:56:a5:e6:6f:32:
38:c8:aa:f0:42:74:80:8d:6e:8f:6f:54:98:64:c1:
db:84:0b:20:84:94:6e:63:7d:ff:4a:57:11:57:c4:
e5:41:e3:c3:8f:c6:45:dc:99:ce:ee:c6:dc:62:55:
52:9d:be:b8:e7:eb:b8:45:8d:77:74:84:bf:dc:9f:
e1:fd:0e:0d:d6:5a:0b:60:a9:69:97:3d:19:c5:7c:
5b:dc:c5:d1:bd:de:0a:8a:46:81:41:f2:b8:6a:37:
41:25:7a:3b:2f:b2:90:ba:7e:ac:97:30:05:34:b1:
1e:55:c7:19:74:09:c8:fe:24:78:51:bc:56:f8:1a:
42:63:8d:02:e4:3b:b5:ae:b1:f4:0a:7c:d1:82:0d:
14:09:39:5a:b8:81:b9:62:c2:e4:db:a7:ad:20:b7:
de:e5:8d:a9:a6:9f:07:ae:1a:d8:32:be:7d:ba:c0:
97:e0:74:20:90:5d:5c:2f:f8:c2:64:38:ad:88:06:
75:02:29:02:aa:c6:70:85:50:4a:e8:aa:3f:f0:8e:
0e:42:2c:f1:a0:eb:17:de:d2:0e:4f:23:f0:bc:7e:
aa:7c:0e:f9:89:cc:01:e1:54:4f:fe:8c:67:3f:93:
23:3c:fb:12:ca:dc:0b:fb:e5:bf:2a:49:50:12:82:
19:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7A:62:98:AF:F5:35:2D:89:91:37:9D:CF:2F:3F:61:82:65:F5:BF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/695716ab-c4db-435d-95fe-4143be62030e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.79.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:3c:9f:08:e2:26:ae:06:a7:83:4d:a9:8c:c6:06:76:61:39:
99:26:2b:dd:cb:9d:2e:54:05:b7:6e:cc:42:a0:51:4a:93:df:
95:be:36:af:d7:6d:c2:2c:a1:99:6a:27:1c:bb:2c:f5:62:3e:
50:5c:af:ae:ed:a5:4c:5f:90:38:7c:67:cb:36:93:58:ba:dc:
f5:37:03:ad:44:18:40:1b:9f:bb:93:11:bf:01:98:23:78:1d:
28:da:31:23:94:c7:0f:34:12:c7:0c:bc:81:21:f3:b9:01:d4:
fd:ae:4c:79:af:a8:bb:77:25:77:11:f8:9c:2c:ff:6e:f6:08:
c1:8c:b5:0d:3c:c8:5e:fd:a9:bc:3d:e4:1c:2e:1f:45:c5:03:
c1:3e:cb:fd:d9:c4:59:78:c6:2c:ea:c4:23:9c:39:75:ff:2e:
7d:1d:38:c3:ff:6d:e4:68:33:64:0c:5f:b8:40:fd:e8:95:2b:
99:60:3c:25:4d:48:eb:46:c3:68:da:fb:52:91:b4:6d:82:a3:
3c:96:12:d9:c2:d8:c5:00:f0:b7:b9:d5:9c:10:b1:d1:cf:e3:
61:65:af:1b:7b:c4:32:66:48:55:f7:d6:6b:3e:b7:d1:d7:f0:
38:9a:19:a9:e3:df:64:56:5b:14:d8:e9:1e:09:96:c3:6b:52:
6d:33:23:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:34:25 2026 by rpki-client