Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/99e8f5be-1b23-4286-ba1e-6761d2b97b44.roa
File: 99e8f5be-1b23-4286-ba1e-6761d2b97b44.roa (raw, json)
Hash identifier: XC6HSkewGDNYrV5t+0w941NmynNajQ8eTcF/ylm5aQU=
Subject key identifier: 35:6F:ED:36:5B:93:8F:61:51:D1:79:29:AA:72:10:B6:C2:FB:27:D9
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 39E4830E932D904FA5C7E7B5457A4397D6DC660D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/99e8f5be-1b23-4286-ba1e-6761d2b97b44.roa
Signing time: Mon 27 Jul 2026 18:47:18 +0000
ROA not before: Mon 27 Jul 2026 18:47:18 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:e4:83:0e:93:2d:90:4f:a5:c7:e7:b5:45:7a:43:97:d6:dc:66:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 27 18:47:18 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=e83a6af9529b1a3c5c5a750a0b918691662f8959480445b41fae01648bc0d5b8, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:60:6b:0e:97:26:06:e0:b5:60:0b:9f:f1:c3:
f2:a8:93:2d:f9:25:2b:59:69:0e:30:50:41:17:ce:
2f:4d:1d:38:c4:77:df:f5:a2:5e:ff:bf:e0:6f:fc:
43:56:2d:1b:bf:66:97:d1:30:b1:74:ed:65:2e:6c:
69:ad:c1:74:a1:2f:fe:48:8b:1a:ab:a7:6c:12:ed:
cb:f3:14:4e:95:c1:71:07:bc:84:78:38:27:ea:df:
bd:9f:2c:70:e5:87:37:1b:0b:e9:9a:22:00:7e:b7:
45:ad:d9:d6:bd:d9:7f:72:56:42:49:82:97:c0:fc:
ac:db:9f:50:e4:61:f9:d5:f7:c6:d4:8d:8f:a1:45:
7f:fc:a3:ba:6e:be:04:0d:3c:17:02:b7:7f:55:e3:
43:29:0b:0b:e6:f4:4c:7b:53:75:60:a2:65:f5:04:
52:15:21:f3:50:ba:d1:c4:9f:00:d6:5c:4f:b7:da:
f6:21:2d:3e:9c:2c:4e:a4:b3:6d:9d:8e:8c:cc:0f:
70:6f:3b:a8:1a:39:f5:c0:c5:22:2f:68:91:ad:eb:
c0:90:6d:68:96:ff:1c:68:2a:26:7f:ea:19:30:8e:
a1:55:83:c4:78:12:bf:94:18:35:11:93:ac:7f:64:
4a:28:f7:96:08:b7:bb:7e:14:6d:45:e5:7a:2b:3b:
eb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6F:ED:36:5B:93:8F:61:51:D1:79:29:AA:72:10:B6:C2:FB:27:D9
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/99e8f5be-1b23-4286-ba1e-6761d2b97b44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.64.0/18
Signature Algorithm: sha256WithRSAEncryption
37:9c:81:84:e2:e3:94:4d:a8:b1:92:2d:c1:fd:74:84:97:7b:
59:dc:43:36:05:b6:fd:a5:8c:50:53:87:6d:26:6e:b8:67:77:
ab:e4:bc:ae:b7:9d:0f:4a:57:22:17:6e:ec:4a:5e:1a:92:d1:
8a:47:19:b5:3c:8d:96:cc:c0:7b:a7:6c:a5:58:0c:b9:16:7e:
c7:ad:21:84:2a:7f:cf:1f:b4:04:b3:7c:c3:28:38:bf:be:5b:
32:c0:2f:99:b6:7d:d8:9a:dd:61:57:98:c0:ef:4e:5d:6a:c3:
f6:cb:2f:50:82:70:04:98:7a:8a:75:05:01:cb:12:eb:e8:ea:
80:33:50:4a:79:a3:bd:3c:92:ca:dd:7e:a4:bd:33:01:1a:90:
95:b4:eb:96:c9:de:98:be:78:57:c5:48:58:6b:44:5b:58:8c:
a6:5f:85:21:9d:04:66:dd:92:3f:0f:16:de:fe:65:8b:3a:b3:
5a:5e:04:40:e1:42:16:e1:83:16:20:97:d5:b6:0b:3e:f4:b0:
c9:d9:c9:f7:b5:f1:89:83:71:7e:3d:86:6a:33:27:ec:31:93:
4e:c1:19:ed:bf:53:e9:9f:e5:a3:9e:66:3c:11:00:6f:cf:bc:
3d:23:8c:70:3f:0d:1e:30:1c:5f:7e:ac:19:f1:d4:1f:68:22:
a7:b2:c7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:54:13 2026 by rpki-client