Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b5ec0568-ce5c-41f8-ae3e-0c14783e4068.roa
File: b5ec0568-ce5c-41f8-ae3e-0c14783e4068.roa (raw, json)
Hash identifier: f/AQ/xZkqFr9/yWxcSTYjHbhUvSVepCo2M1gtIcab5g=
Subject key identifier: 9C:75:30:76:AC:CE:74:DB:FE:FF:13:71:9F:20:29:23:BF:31:6E:2E
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1AE7E3ACFCE4EF667EC9956D98E2EC130B0C0576
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b5ec0568-ce5c-41f8-ae3e-0c14783e4068.roa
Signing time: Fri 07 Aug 2026 05:50:37 +0000
ROA not before: Fri 07 Aug 2026 05:50:37 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 194.198.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e7:e3:ac:fc:e4:ef:66:7e:c9:95:6d:98:e2:ec:13:0b:0c:05:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:50:37 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=bf53f063e2ba90d88d3c81db9e395b5e29f59b7a869d3e5ceedd7056da6c41cc, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:df:ab:68:22:6e:5e:17:43:fc:fe:1e:b7:
15:be:fc:2c:da:b1:72:27:a5:ea:25:df:b4:b1:68:
e1:bd:91:db:9e:4c:55:95:f1:60:8a:dc:fb:2f:ab:
8a:39:08:93:91:e1:ac:c0:55:d1:48:e4:13:f2:91:
f2:33:ed:0f:ed:86:43:73:e2:11:54:30:32:f0:98:
7b:f4:e1:ae:b6:47:54:be:64:95:86:fb:3d:29:02:
ff:80:04:55:92:9d:c7:41:b9:25:48:e7:3b:ba:43:
93:6f:64:8f:e4:1b:25:6b:42:f9:f1:cf:26:b3:74:
1a:e9:bc:ad:59:8c:26:f7:4a:99:f5:83:ca:dd:dd:
63:d9:9f:c3:39:f0:03:46:ff:68:18:ea:3e:01:3a:
0e:92:91:4c:e7:a4:70:38:b9:12:2f:bc:a7:7e:af:
3e:47:b9:bd:16:81:da:20:f6:70:10:d8:c0:f7:77:
91:58:84:cd:71:4a:a0:19:e8:68:f3:ce:46:47:b1:
ac:12:12:c8:20:38:88:d9:a7:95:6f:fc:12:82:78:
9e:76:af:25:49:ba:ee:a6:5d:15:04:e2:99:d3:2b:
ce:9f:f5:12:0d:00:92:20:84:88:ec:6a:ea:58:43:
a8:62:de:8f:14:a7:c7:d2:83:f1:e5:92:f5:31:e4:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:75:30:76:AC:CE:74:DB:FE:FF:13:71:9F:20:29:23:BF:31:6E:2E
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b5ec0568-ce5c-41f8-ae3e-0c14783e4068.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:0e:43:05:b6:46:a1:b2:05:18:b7:b4:04:7a:bc:ee:73:13:
27:a7:c4:c7:76:0c:7b:b0:cb:e1:fc:cf:4e:75:b2:c8:59:ef:
e5:58:32:26:ac:03:89:8e:34:b3:46:90:0c:73:0a:82:4e:c8:
5a:ed:19:b7:5f:5e:3b:b4:87:57:47:81:36:07:4d:64:45:92:
d4:dc:45:bf:6e:6e:39:2a:38:91:57:8c:82:75:51:c3:5a:d6:
14:d5:b0:61:8b:7a:b5:aa:9c:be:dd:55:ed:33:98:3b:65:99:
62:1b:e6:55:c6:7d:ad:72:f0:e1:1d:b1:88:1d:01:df:93:e6:
b5:f4:04:7a:e0:f1:17:dd:66:06:a3:89:1b:32:d7:a4:99:c6:
7a:02:3d:b4:e5:49:d6:e7:0b:ad:9a:ee:3a:d9:04:74:ec:c0:
fe:1c:8f:82:4d:a6:67:92:5b:bf:17:a0:98:0b:42:b8:bf:89:
73:fe:30:d3:c6:30:0d:af:7b:e1:09:93:53:29:18:18:c4:4c:
d3:aa:13:21:64:bd:b5:f2:03:83:7c:67:89:78:6e:cc:8f:0e:
89:3e:31:2b:ac:7a:de:d3:0f:db:03:ea:10:3c:39:2c:2f:8b:
77:e0:9b:a3:0e:7e:70:0a:f2:80:20:0d:ea:bf:73:c1:1a:01:
1a:0d:bc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:44:14 2026 by rpki-client