Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa
File: bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa (raw, json)
Hash identifier: Qma0PXpNiLjadF8C0qgzYvyTIhfbdOejQp7HbhAhYMM=
Subject key identifier: 8A:F1:26:DC:DC:58:4A:15:7D:6C:BB:5C:AB:DE:A9:4B:31:46:93:1B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 06E46B2DAA16EA2256D1A1711C2D06F88FA75813
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa
Signing time: Sun 11 Oct 2026 15:20:09 +0000
ROA not before: Sun 11 Oct 2026 15:20:09 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 83.118.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:e4:6b:2d:aa:16:ea:22:56:d1:a1:71:1c:2d:06:f8:8f:a7:58:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 11 15:20:09 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=bfdedee8996f79719ade83467ee7be6d4607ee6c964dd35ae11a92c84f9e4cca, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:97:28:69:1a:47:39:8d:ef:8a:c1:eb:a2:
83:89:b7:31:99:9f:d3:3c:41:af:ff:c3:ee:93:d1:
a8:81:63:36:ae:93:1d:8a:69:1f:a2:fe:08:a9:76:
44:3b:2b:6b:dd:ce:55:53:bc:1d:2d:b8:72:49:96:
a2:44:ee:f5:d0:92:eb:a1:bb:4f:e7:da:e7:05:54:
92:50:85:00:d5:ab:e3:fa:a8:3b:0f:74:75:47:4c:
5d:84:64:da:0e:29:ed:cc:58:28:0f:dc:76:0a:ac:
d9:dd:88:26:9e:73:7b:de:37:7e:e9:08:80:e2:4b:
84:e7:55:96:b4:33:21:41:65:b9:64:f1:2a:5b:3d:
5a:37:08:b0:18:6a:f5:32:d6:2a:7d:22:d1:a3:7d:
8a:5a:3b:a5:50:99:d2:4a:c5:3f:7d:85:fe:f0:fb:
7d:6a:e7:b0:3f:c6:33:91:21:4e:96:8e:c5:05:9a:
3b:32:ac:ea:29:69:25:82:42:5c:dd:f6:ec:93:72:
2a:0a:17:f5:de:9f:83:ed:af:a7:13:76:ba:55:1c:
6b:f6:8d:75:ae:69:a7:82:c6:3c:7c:6c:7a:eb:30:
43:fd:b5:e0:db:e6:dc:04:5e:a3:8c:90:83:c4:da:
30:f9:6c:1f:0d:62:a2:9c:67:c7:6e:3b:b6:17:2a:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F1:26:DC:DC:58:4A:15:7D:6C:BB:5C:AB:DE:A9:4B:31:46:93:1B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.234.0/23
Signature Algorithm: sha256WithRSAEncryption
32:b0:38:dc:2e:73:c9:05:48:72:ab:dd:69:56:46:57:49:86:
de:a8:c8:2e:df:0e:3f:66:67:40:b1:44:56:df:a4:91:5c:ba:
83:94:3b:e2:40:cf:d0:25:6a:da:bf:65:3d:92:df:4c:d3:55:
c9:72:be:15:0f:6d:d7:6d:13:a4:63:cd:7d:a4:52:20:f5:39:
b5:6f:82:0a:1e:ae:73:b0:3e:a9:9b:1c:3e:aa:65:9b:30:f2:
2e:f7:1f:b8:6f:01:59:35:b2:40:d4:e8:95:e3:fb:31:bc:05:
75:95:49:65:5b:7b:e0:a9:b6:12:19:0e:57:1f:77:00:4b:7c:
19:65:72:7c:af:77:ba:ce:30:97:28:bf:26:b9:46:ee:33:94:
39:c7:6a:60:af:06:d9:de:49:f2:83:f9:4e:5f:9a:ec:d7:bf:
65:b3:9a:37:2c:e3:5b:90:9e:d3:13:40:10:e2:c5:61:84:3a:
a8:c3:d3:e2:67:46:c8:5e:6f:26:79:4e:e7:04:49:0b:75:ae:
7e:c0:76:ce:f9:a8:1b:34:94:c9:e2:53:32:9a:3a:1c:ad:51:
e1:4a:b3:1c:bb:bc:92:55:3a:4d:32:2b:23:07:dc:a2:7f:61:
52:79:51:bd:2b:ee:b2:17:d0:b0:a7:c3:27:4c:77:05:f4:48:
d0:fc:24:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:17:33 2026 by rpki-client