Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/971d110a-753d-40c9-8ca6-28f0090c8f7e.roa
File: 971d110a-753d-40c9-8ca6-28f0090c8f7e.roa (raw, json)
Hash identifier: QEziiJv/rJSfjHJig+YYkvx+qROs5HyWcicwZLjVgk8=
Subject key identifier: 40:1E:33:45:76:07:66:8E:50:79:F9:77:80:22:2F:82:0A:30:BD:74
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4934A342A2F8F9A83E6871EC35BF6718F1637F37
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/971d110a-753d-40c9-8ca6-28f0090c8f7e.roa
Signing time: Thu 17 Sep 2026 00:00:06 +0000
ROA not before: Thu 17 Sep 2026 00:00:06 +0000
ROA not after: Wed 16 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 57.87.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:34:a3:42:a2:f8:f9:a8:3e:68:71:ec:35:bf:67:18:f1:63:7f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 17 00:00:06 2026 GMT
Not After : Dec 16 23:59:59 2026 GMT
Subject: serialNumber=8e0b32114c2a4b2b59ee015436da44a984b8e6786b9094f69a22b808da9d5ebd, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:22:34:9b:4f:92:75:8b:68:34:ca:e7:7d:
c1:f2:4d:a3:f5:91:e7:c2:c0:b1:48:64:ee:a9:b9:
0d:32:d2:d8:9d:ab:e2:68:37:32:24:cf:54:55:aa:
5e:3a:87:96:52:ce:2b:a1:04:66:b4:9a:c2:99:91:
99:ae:59:97:1d:f4:c1:ed:04:7a:90:82:33:81:3f:
5e:8b:55:a5:c9:f6:5c:2f:d4:bd:1e:fd:c5:cf:09:
56:3c:28:ac:68:e4:0c:c6:d0:3f:54:2a:28:5f:76:
7c:17:c6:db:15:83:96:18:6e:37:c7:b8:4c:b9:0b:
05:92:d6:4e:4b:93:95:a1:8a:9d:d0:59:e6:bd:22:
f8:0e:40:e9:ef:4c:25:d6:50:95:48:84:f0:bc:82:
d4:57:53:c6:cc:72:9d:47:67:3e:8c:aa:e9:fb:b1:
f7:76:24:eb:5c:1e:1c:64:89:17:6c:0c:4c:68:62:
2b:ea:57:29:b7:75:44:85:a3:fe:a9:1f:82:fe:0b:
86:e8:90:a4:c2:d7:85:9c:52:29:b3:c2:56:b6:1d:
e1:85:26:b2:d0:60:8e:e4:33:e7:fa:62:d7:f0:c4:
82:df:06:78:38:24:7f:f0:64:3f:f4:50:19:9f:36:
13:5c:31:fd:d3:b6:64:7e:f9:60:ef:fe:94:9c:57:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1E:33:45:76:07:66:8E:50:79:F9:77:80:22:2F:82:0A:30:BD:74
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/971d110a-753d-40c9-8ca6-28f0090c8f7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.87.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:06:62:b1:b4:4b:c1:d4:de:0c:11:0d:14:83:f6:74:de:09:
0d:25:9a:a3:58:05:b0:31:eb:3e:bd:8b:75:04:6f:43:17:2b:
7e:ce:a9:08:dd:18:7f:69:b8:17:9a:4d:09:bb:47:af:41:46:
bb:38:2d:65:f2:70:0e:07:7a:d9:d5:1e:ab:98:7a:0a:f4:21:
5d:e4:90:a9:a5:30:f4:4c:4a:8a:d5:8c:fa:74:e3:80:0c:ae:
00:67:b2:5e:06:9d:6b:27:0f:4e:a4:5a:48:3a:2b:c6:7c:d4:
f4:f5:9c:4c:47:9a:5d:86:d6:e7:41:06:d8:bf:02:dd:af:c8:
96:ef:3f:93:e3:61:dc:2f:b5:3c:c2:54:2f:c6:f1:9f:ff:32:
a1:d3:02:44:88:7e:d1:f0:91:7a:c2:02:b4:a2:a3:a1:4b:f4:
d8:b3:6e:9e:bd:94:93:e6:9c:c2:78:da:8f:b1:6f:c0:e7:fb:
db:37:4c:9c:a5:ac:a2:34:90:de:0f:5f:56:52:01:d4:f1:fd:
42:6c:b0:3f:06:50:61:eb:2a:35:bf:a1:c7:d2:f5:41:53:a6:
b9:99:0e:07:27:8d:b5:b2:0b:30:8f:8e:b7:fe:44:82:7c:78:
f5:5d:45:aa:b8:79:79:3c:04:49:39:11:56:a6:3b:2a:bc:0b:
4d:b5:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:01:51 2026 by rpki-client