Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
File: 83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa (raw, json)
Hash identifier: W/EfkfhAuDHgbFuJurEg2gwvzlmTXkPlJnKde14sQLs=
Subject key identifier: A8:25:B0:6E:18:2F:0A:2E:07:50:EB:68:C4:D9:C0:AA:1E:8B:C5:AA
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 49DAC4EE733D62D7CD56976618542A4FD84327BA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
Signing time: Mon 26 Oct 2026 05:50:45 +0000
ROA not before: Mon 26 Oct 2026 05:50:45 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 213.72.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:da:c4:ee:73:3d:62:d7:cd:56:97:66:18:54:2a:4f:d8:43:27:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:45 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=90df06c48256a9e0a164e4d1b16ba4312c4da7f298c7e80bc4040c240cdb9cc2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:92:f1:df:78:04:17:51:0e:6e:fb:96:6d:
3d:b4:82:9d:92:c7:19:9b:ce:a1:73:5b:f9:9e:f8:
c5:ac:bb:aa:44:53:de:94:ee:db:3b:1f:72:d5:4a:
5a:6a:f6:7b:e7:66:ce:bd:16:db:f0:8d:a3:ac:bb:
3e:9d:18:02:a6:14:8d:e5:88:5c:02:7e:8b:b3:1b:
d6:32:fc:79:eb:fc:9d:e7:6a:a6:34:18:f7:8e:4f:
38:56:0a:f6:04:0d:06:30:3e:6d:f9:3d:ba:68:af:
7d:bf:a9:f0:b9:54:5b:d1:75:84:52:2e:de:e6:6f:
d3:3d:ae:17:f7:e7:40:b2:57:fb:7e:09:5c:dc:91:
a7:1e:33:bb:0d:d3:f6:5c:fb:51:9e:aa:96:62:96:
b4:43:9d:2a:54:a9:38:eb:12:7c:1c:34:4d:75:d2:
1b:99:82:e0:07:dc:42:c0:f6:1a:88:d3:5d:a6:62:
24:59:c6:21:c1:8d:8c:06:4b:8b:16:3d:d6:04:5c:
b2:97:3a:04:b4:12:62:79:51:b7:4b:47:41:2a:8f:
d1:0e:d4:a7:e4:92:c9:45:37:5f:c8:8a:bc:85:91:
19:51:bb:ea:26:37:2e:41:96:95:84:5e:68:33:bb:
a7:41:35:22:50:5e:ab:0a:fa:b5:43:a4:46:0f:fe:
00:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:25:B0:6E:18:2F:0A:2E:07:50:EB:68:C4:D9:C0:AA:1E:8B:C5:AA
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/83a3dbd5-059a-4f95-b55b-26c786f91e3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.72.0.0/17
Signature Algorithm: sha256WithRSAEncryption
ba:dc:90:8f:c4:de:2a:d4:12:60:0c:25:ec:1f:22:4f:28:dd:
44:ed:e5:a5:c2:a3:38:04:a9:0c:26:ee:95:1a:12:cc:7c:7c:
95:7e:b9:20:0f:eb:66:48:f2:a0:d1:3d:26:54:c1:10:79:b6:
50:09:c2:40:35:5f:5c:13:2c:aa:24:11:84:18:68:4d:cc:cb:
86:fc:86:3a:c9:41:4d:bf:11:b6:3c:02:cc:74:46:79:32:ea:
83:81:be:84:93:96:0b:3b:c1:b3:66:9d:33:54:3a:f7:c9:04:
30:19:57:81:77:08:d4:08:fc:c0:e4:48:7a:f1:36:13:dc:39:
3e:96:c8:57:33:3a:cb:8a:31:9c:14:d6:7c:dd:a0:63:50:8a:
06:09:7c:dd:e3:58:b6:aa:d3:12:e7:cc:1c:df:e5:96:4f:06:
31:96:bd:4f:fd:13:ce:a1:84:82:12:2a:c0:7d:59:32:3b:ec:
fd:7b:6c:c8:72:d7:e1:da:17:03:c3:d7:f5:f7:d2:4c:99:05:
c1:e1:25:c0:05:03:b8:0b:36:f5:90:52:0e:23:74:f2:1f:d9:
c6:11:a9:de:50:3f:29:09:98:f2:de:80:f3:82:a8:04:83:ad:
55:c6:d2:6f:2a:de:16:fb:9e:90:12:1c:d5:d6:3e:1f:f3:0d:
64:70:1d:91
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUSdrE7nM9YtfNVpdmGFQqT9hDJ7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTUwNDVaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDkwZGYwNmM0ODI1NmE5ZTBhMTY0ZTRkMWIxNmJhNDMxMmM0ZGE3ZjI5OGM3
ZTgwYmM0MDQwYzI0MGNkYjljYzIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANYhkvHfeAQXUQ5u+5ZtPbSCnZLHGZvOoXNb+Z74xay7qkRT3pTu2zsfctVK
Wmr2e+dmzr0W2/CNo6y7Pp0YAqYUjeWIXAJ+i7Mb1jL8eev8nedqpjQY945POFYK
9gQNBjA+bfk9umivfb+p8LlUW9F1hFIu3uZv0z2uF/fnQLJX+34JXNyRpx4zuw3T
9lz7UZ6qlmKWtEOdKlSpOOsSfBw0TXXSG5mC4AfcQsD2GojTXaZiJFnGIcGNjAZL
ixY91gRcspc6BLQSYnlRt0tHQSqP0Q7Up+SSyUU3X8iKvIWRGVG76iY3LkGWlYRe
aDO7p0E1IlBeqwr6tUOkRg/+AC8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSoJbBu
GC8KLgdQ62jE2cCqHovFqjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ODNhM2RiZDUtMDU5YS00Zjk1LWI1NWItMjZjNzg2ZjkxZTNiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9VIADAN
BgkqhkiG9w0BAQsFAAOCAQEAutyQj8TeKtQSYAwl7B8iTyjdRO3lpcKjOASpDCbu
lRoSzHx8lX65IA/rZkjyoNE9JlTBEHm2UAnCQDVfXBMsqiQRhBhoTczLhvyGOslB
Tb8RtjwCzHRGeTLqg4G+hJOWCzvBs2adM1Q698kEMBlXgXcI1Aj8wORIevE2E9w5
PpbIVzM6y4oxnBTWfN2gY1CKBgl83eNYtqrTEufMHN/llk8GMZa9T/0TzqGEghIq
wH1ZMjvs/XtsyHLX4doXA8PX9ffSTJkFweElwAUDuAs29ZBSDiN08h/ZxhGp3lA/
KQmY8t6A84KoBIOtVcbSbyreFvuekBIc1dY+H/MNZHAdkQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:03:58 2026 by rpki-client