Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
File: c0cc077c-c457-49fe-8373-08e978cb64fd.roa (raw, json)
Hash identifier: X3VpDP+wzhnLkrd9sGKAm+FOWxKEESjS4idojvNLcII=
Subject key identifier: EE:49:DD:19:1C:B8:7B:DC:3F:7E:65:6D:07:A6:9E:CB:4A:73:D5:CE
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 428CCC630A634B778710B3E1C80446028E7B07F8
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
Signing time: Sat 28 Feb 2026 06:40:04 +0000
ROA not before: Sat 28 Feb 2026 06:40:04 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 195.254.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:8c:cc:63:0a:63:4b:77:87:10:b3:e1:c8:04:46:02:8e:7b:07:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Feb 28 06:40:04 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=22f586bc7347c57dc3bdfd36ec81c0e56b7373ed382087584b1dfcb85b583767, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:87:06:da:13:c7:39:77:55:6f:6f:45:4e:
18:d0:cc:56:8f:ee:d4:81:11:4e:2f:ed:29:d8:61:
86:27:65:50:33:ce:68:31:69:9d:ab:bd:86:57:67:
10:d4:e9:c3:93:85:8f:69:e7:29:c4:52:57:c0:b5:
94:07:02:33:36:25:ae:e4:7d:23:04:30:23:8e:ca:
7c:05:47:ba:79:8c:3a:2e:50:96:b9:2b:79:9f:2a:
97:2f:0d:cd:68:79:1f:a7:26:a4:f6:a3:09:b1:d2:
93:e5:a8:a3:42:1e:25:d8:35:de:04:a4:e3:d6:b1:
0e:90:c9:58:59:cb:d8:56:b2:0e:ec:36:5c:0e:af:
0f:0f:c2:56:f8:a4:53:1c:c7:5f:bd:96:cd:31:5f:
12:e8:92:42:e1:28:81:44:60:0b:8d:88:05:aa:a1:
bc:23:cf:c4:97:a3:13:b4:a7:40:d6:60:c0:42:b3:
b8:0a:ea:7b:dd:5a:e4:e1:88:a4:62:1e:a4:2d:9b:
dc:ed:be:6b:3b:73:d9:7f:ac:1c:48:21:90:56:5e:
32:7f:4e:d5:50:91:af:16:f3:23:4e:53:22:0a:81:
df:7f:a9:75:34:1e:f6:aa:79:96:ff:4b:a6:aa:8b:
30:e8:83:eb:84:5c:f5:ba:83:0c:bd:63:f3:97:0c:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:49:DD:19:1C:B8:7B:DC:3F:7E:65:6D:07:A6:9E:CB:4A:73:D5:CE
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/c0cc077c-c457-49fe-8373-08e978cb64fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.0.0/17
Signature Algorithm: sha256WithRSAEncryption
ad:60:85:58:bd:40:48:56:5b:ba:cd:c8:c4:d0:e4:1e:6f:c0:
b5:9d:05:6e:1d:92:5b:19:01:cb:44:9d:6a:8d:fa:a3:4f:5a:
a9:ce:79:87:be:61:fd:cc:b1:b2:f6:29:c2:db:6d:91:d6:ab:
69:2a:73:ea:8b:54:62:9e:6d:4b:35:5f:55:1b:b6:dc:51:fa:
da:4c:9a:6b:e8:a4:b0:9e:7b:89:02:a4:7d:23:75:5e:6a:5f:
d6:97:37:57:65:a2:e3:e3:b4:25:e0:65:8a:f5:6d:66:a5:8a:
bb:ba:72:de:2b:22:37:04:bf:1d:5d:ad:0d:e4:96:92:ee:40:
ec:95:2f:d2:42:fe:5f:a0:5a:ee:e9:26:27:d4:93:55:c3:e0:
3c:bc:d9:47:03:63:83:03:9b:20:3e:66:b6:77:da:9a:49:ad:
04:3e:80:ba:cf:c9:0b:65:47:44:e2:68:08:ba:ca:fa:e8:df:
41:09:75:55:e7:5d:bf:13:aa:fb:5f:e5:9d:b1:2a:e7:9b:47:
72:ae:18:e6:96:97:e7:14:63:c9:5f:9e:b9:3c:69:d3:6e:c0:
6c:35:c4:87:ff:fe:58:ea:4b:ac:88:77:72:38:fd:cb:82:03:
1b:d0:a0:49:19:4c:4d:c3:f3:f6:93:f8:fc:f3:6c:f8:15:84:
0b:aa:30:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:52:22 2026 by rpki-client