Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
File: c0cc077c-c457-49fe-8373-08e978cb64fd.roa (raw, json)
Hash identifier: 4ZBzdZ1tE2aOOyao9/Ysbhu9gbTnAj3mO1f1NJBHBBg=
Subject key identifier: BA:A1:58:5E:1A:18:1C:AD:42:99:10:B4:75:74:7A:F3:76:52:B7:93
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 65032E8FB36ADFF63A033DC0825EB247F2F3C27A
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
Signing time: Tue 19 May 2026 06:00:49 +0000
ROA not before: Tue 19 May 2026 06:00:49 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 195.254.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:03:2e:8f:b3:6a:df:f6:3a:03:3d:c0:82:5e:b2:47:f2:f3:c2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: May 19 06:00:49 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=493b52c1688e870e42b2c871b5c920550cfbe83b84a03ad5aa7953531a3ecdfe, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9b:00:14:20:c8:5e:b6:2e:67:be:08:06:92:
2a:b5:b1:29:77:b3:42:bf:c2:ff:60:53:c2:3e:00:
a4:b0:9e:ba:78:07:06:62:ea:c6:c7:4c:e4:87:00:
24:2d:3c:c1:8b:76:1d:5c:bd:97:d4:96:83:bb:cd:
35:76:36:7c:70:f5:cf:15:13:1b:f4:28:00:84:b8:
31:ed:4b:0b:9c:91:9c:96:47:2f:b6:76:33:62:94:
10:f6:9a:97:d3:a1:a9:2a:4f:0a:97:8f:60:78:3e:
2e:36:57:c3:f3:97:23:89:6d:ce:64:0b:62:b2:6f:
29:97:9d:41:6f:ff:54:43:0e:4d:2c:7d:dc:3a:6a:
f9:69:38:27:e2:8e:ed:e0:5d:a6:c7:77:f1:e6:72:
ce:b0:2f:f3:d8:64:c8:0d:11:56:28:aa:bc:fc:8d:
ff:5d:72:8e:74:1f:27:c4:76:8a:1b:11:6a:1a:06:
31:c9:c1:5b:58:cb:81:77:34:ce:6a:9a:42:e6:8b:
4b:05:13:3f:78:5f:fc:85:ec:d4:17:1f:eb:bb:ba:
d0:9f:5c:6a:18:45:c2:df:8e:05:32:bd:b6:0a:16:
fb:95:7e:73:59:14:37:10:15:79:13:84:91:4b:61:
3b:63:5e:95:84:76:23:5f:d8:f7:c0:b5:a2:ba:c3:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A1:58:5E:1A:18:1C:AD:42:99:10:B4:75:74:7A:F3:76:52:B7:93
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.0.0/17
Signature Algorithm: sha256WithRSAEncryption
59:65:29:9e:f9:37:26:6c:ee:b7:5e:38:df:1b:ed:ec:3f:c6:
c6:cf:d3:4b:ea:dc:eb:0b:f3:df:77:87:02:61:4e:7a:7a:8a:
17:ea:97:c5:89:95:8c:be:a4:d6:db:24:a3:bf:f4:8d:f0:43:
bf:20:38:fb:82:c7:5c:a2:1e:a3:e7:88:1f:4e:66:ca:30:d2:
1b:2c:be:8a:53:62:74:9b:e1:d1:ec:f7:52:d7:32:18:29:e0:
1c:91:d3:62:b1:ea:80:82:90:f5:9a:85:d1:df:75:f8:d4:3b:
1d:d7:b1:e7:10:6c:70:39:06:a3:39:36:5f:78:67:87:21:4c:
2b:fa:f3:df:3f:bd:51:95:64:33:4f:f9:28:f7:88:2d:4b:5b:
a9:47:74:d3:d4:91:3c:c3:db:97:e2:73:a1:07:cd:82:8e:c1:
91:28:f4:63:ac:82:47:80:78:22:30:b2:05:e4:f6:bc:65:6b:
ee:87:7f:38:06:3b:57:4d:a4:c5:50:23:56:86:f9:0e:ff:3f:
ba:dd:b8:0b:fe:3d:e0:7b:2c:25:f1:ed:2d:17:27:26:39:27:
ab:68:9f:50:a0:15:92:01:9a:9e:a6:6f:cd:0a:de:84:1a:bc:
49:f9:9f:ed:c4:27:f4:a5:23:34:88:bd:e2:43:22:63:60:37:
75:f9:84:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:00:32 2026 by rpki-client