Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
File: 83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa (raw, json)
Hash identifier: x9YSA8/376ZyMaHcWao9rXjX2RoSjea6rgj+MPQosw0=
Subject key identifier: 74:E5:E5:27:1D:CD:6A:A5:69:81:CA:12:72:6C:39:7A:E9:05:8F:C7
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 6FC54915063DF0B2FDF5F502A3A8F68999F2A668
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
Signing time: Fri 07 Aug 2026 06:00:23 +0000
ROA not before: Fri 07 Aug 2026 06:00:23 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 213.72.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:c5:49:15:06:3d:f0:b2:fd:f5:f5:02:a3:a8:f6:89:99:f2:a6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 06:00:23 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=7328ca6472877b97e22f64d0d0457e5a26b936eed22d598df421c5fd9e4fdb22, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a3:31:ff:5b:2f:b1:6c:bc:c5:c8:1c:dc:b8:
81:f0:85:37:48:e2:2a:7e:db:fd:6c:00:c1:02:ca:
de:cc:bb:b2:17:34:27:bf:68:fd:e8:5a:14:99:46:
f7:72:01:83:28:1b:85:28:b4:90:6a:c6:73:a4:14:
88:47:dc:82:e0:ac:d6:6d:83:af:65:01:5c:80:10:
12:47:7a:58:fd:3f:c0:cc:8a:27:8f:8c:66:d2:6a:
bb:43:1b:a7:ad:83:a3:6f:19:f4:c8:97:26:c8:e6:
1c:fc:bb:c6:3b:0e:3d:e9:70:0a:7d:78:8a:79:58:
21:5f:51:03:71:aa:65:92:52:34:59:38:94:78:51:
97:eb:1b:d4:66:e2:52:48:92:62:5e:3a:a3:e7:12:
0d:ed:bf:d7:df:84:70:41:28:9d:0f:f1:29:3c:b8:
0c:c1:36:32:9b:68:bb:03:cb:79:c3:46:cb:9b:01:
de:32:e7:d9:48:fa:55:b6:c9:e8:76:50:c4:84:4f:
ef:3e:9b:53:c5:b4:09:97:73:25:6a:4a:41:cb:37:
ac:da:91:a1:0d:bf:b4:8f:71:a3:92:29:90:0d:3d:
04:81:f7:e6:c8:f0:6f:87:49:07:f1:8c:20:1b:0c:
7a:69:fd:6d:65:d2:9f:12:4b:6e:fc:45:4b:57:53:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E5:E5:27:1D:CD:6A:A5:69:81:CA:12:72:6C:39:7A:E9:05:8F:C7
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.72.0.0/17
Signature Algorithm: sha256WithRSAEncryption
78:4c:b8:18:73:f3:77:c5:9c:5d:56:f7:85:e1:c6:5d:95:14:
03:6b:b9:4f:7b:2a:34:fb:fc:75:a0:f1:00:3c:0e:d8:af:63:
6a:6a:a0:40:06:96:ab:c0:61:0a:1e:98:70:14:6e:4f:e0:49:
41:ca:a6:3a:0f:47:97:57:a2:30:43:e1:0d:3b:09:90:1d:b1:
0c:43:95:5e:f4:12:3c:38:59:f5:da:14:d3:d1:5b:22:91:8d:
86:a4:3b:d0:2d:2e:34:95:3e:be:2f:7e:fa:ac:f2:52:3b:e8:
87:93:24:b9:ca:05:de:16:2a:20:cb:5f:6b:4e:7f:94:7e:2f:
83:e7:52:c0:fc:49:15:53:d9:41:db:76:ec:8a:9c:19:4a:af:
21:f8:3c:03:ac:c3:71:6b:a5:4e:0d:ae:4b:c6:b8:81:47:91:
a6:bb:63:cc:b7:78:1c:a3:2a:4b:b7:a2:4a:cf:fd:3f:de:16:
f3:e0:a4:b0:af:86:55:1c:be:10:9a:a9:c2:23:98:a7:94:1d:
c3:41:85:6d:66:96:e1:08:76:3b:d0:cf:1a:f5:b9:15:72:ec:
ca:27:08:c3:ad:79:ba:2b:6b:7b:99:9b:eb:09:d9:c2:95:7e:
e7:5a:67:61:96:8b:d5:db:f8:dd:c3:d6:f7:86:92:83:03:52:
e8:2d:a3:a1
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUb8VJFQY98LL99fUCo6j2iZnypmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjA4MDcwNjAwMjNaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDczMjhjYTY0NzI4NzdiOTdlMjJmNjRkMGQwNDU3ZTVhMjZiOTM2ZWVkMjJk
NTk4ZGY0MjFjNWZkOWU0ZmRiMjIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPCjMf9bL7FsvMXIHNy4gfCFN0jiKn7b/WwAwQLK3sy7shc0J79o/ehaFJlG
93IBgygbhSi0kGrGc6QUiEfcguCs1m2Dr2UBXIAQEkd6WP0/wMyKJ4+MZtJqu0Mb
p62Do28Z9MiXJsjmHPy7xjsOPelwCn14inlYIV9RA3GqZZJSNFk4lHhRl+sb1Gbi
UkiSYl46o+cSDe2/19+EcEEonQ/xKTy4DME2MptouwPLecNGy5sB3jLn2Uj6VbbJ
6HZQxIRP7z6bU8W0CZdzJWpKQcs3rNqRoQ2/tI9xo5IpkA09BIH35sjwb4dJB/GM
IBsMemn9bWXSnxJLbvxFS1dTmx0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR05eUn
Hc1qpWmByhJybDl66QWPxzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ODNhM2RiZDUtMDU5YS00Zjk1LWI1NWItMjZjNzg2ZjkxZTNiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9VIADAN
BgkqhkiG9w0BAQsFAAOCAQEAeEy4GHPzd8WcXVb3heHGXZUUA2u5T3sqNPv8daDx
ADwO2K9jamqgQAaWq8BhCh6YcBRuT+BJQcqmOg9Hl1eiMEPhDTsJkB2xDEOVXvQS
PDhZ9doU09FbIpGNhqQ70C0uNJU+vi9++qzyUjvoh5MkucoF3hYqIMtfa05/lH4v
g+dSwPxJFVPZQdt27IqcGUqvIfg8A6zDcWulTg2uS8a4gUeRprtjzLd4HKMqS7ei
Ss/9P94W8+CksK+GVRy+EJqpwiOYp5Qdw0GFbWaW4Qh2O9DPGvW5FXLsyicIw615
uitre5mb6wnZwpV+51pnYZaL1dv43cPW94aSgwNS6C2joQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:33:34 2026 by rpki-client