Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e398b47e-9867-4e71-96db-760f9102a39f.roa
File: e398b47e-9867-4e71-96db-760f9102a39f.roa (raw, json)
Hash identifier: uazbSAgNbdSaYDY6nxgrCyRntyympYjw68RKTvAyFVU=
Subject key identifier: 8C:35:80:91:EF:5B:12:6F:F6:C0:02:39:CC:3E:EE:E4:2C:5D:9D:22
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 62067B520F1F147672F54853437D308D0A864D64
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e398b47e-9867-4e71-96db-760f9102a39f.roa
Signing time: Mon 26 Oct 2026 05:40:06 +0000
ROA not before: Mon 26 Oct 2026 05:40:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 62785
IP address blocks: 193.57.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:06:7b:52:0f:1f:14:76:72:f5:48:53:43:7d:30:8d:0a:86:4d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=23ec16a99be61e0cc5126296cde8737e48442387d3fc55dcf7536f9aa73d5c3a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c7:81:1f:2b:1a:ce:08:44:05:b1:f2:c6:69:
a5:bf:3f:8d:63:7e:84:3b:68:29:55:2e:d3:99:53:
5c:dc:8c:29:b1:b0:6a:a7:81:fd:84:be:09:ca:51:
43:89:dd:76:5a:c8:f9:e9:10:aa:25:f4:58:4c:81:
71:e7:00:15:d9:6a:e5:36:fa:44:bd:de:db:2c:08:
dc:7c:cc:02:ac:c7:93:60:cf:32:ac:47:2f:12:4a:
69:f7:7e:2d:c5:e8:00:81:ef:d5:ee:45:85:e4:fd:
79:0e:e9:10:6b:e3:f3:8e:45:d4:12:60:01:4f:78:
9b:45:27:0b:62:56:34:8b:77:b1:c0:24:44:58:94:
0a:f0:34:b0:d0:aa:35:c7:82:9c:d8:85:37:77:75:
a7:1e:9c:9b:8e:62:fa:54:9f:d8:89:ac:59:e7:54:
ea:a8:cc:1c:94:5e:53:48:5a:3e:50:e0:dc:bf:7e:
27:1f:a3:60:65:9a:d4:17:56:1a:fa:26:31:01:84:
8f:4a:3f:6a:9b:33:a1:7f:07:78:6c:ed:4f:40:8e:
91:7b:ee:17:3d:0b:9d:d6:89:59:02:db:74:1a:8d:
10:77:80:da:b5:62:be:54:93:00:6e:25:36:1e:0e:
ea:06:3f:2f:1d:88:4a:13:40:d9:a1:ce:da:72:07:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:35:80:91:EF:5B:12:6F:F6:C0:02:39:CC:3E:EE:E4:2C:5D:9D:22
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e398b47e-9867-4e71-96db-760f9102a39f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.182.0/23
Signature Algorithm: sha256WithRSAEncryption
74:4d:b4:f1:45:71:7f:05:44:8d:19:62:c7:18:2e:37:04:65:
81:2b:ca:53:15:f6:46:69:bf:66:35:7f:f5:23:a5:33:7b:c6:
c6:af:54:44:f1:4b:3e:11:df:18:09:19:42:8b:44:f6:28:0f:
42:a9:a7:83:91:6c:2f:7f:fa:47:73:a1:05:b5:c9:48:24:a7:
12:e6:52:81:67:65:a7:b0:29:39:d4:0e:6a:1f:1a:3d:81:3a:
c2:c5:00:26:c1:6d:28:33:7c:6d:25:38:5a:d1:c1:35:3d:25:
6e:ab:2c:35:36:80:0b:47:96:d7:84:2d:82:b8:5a:2a:02:85:
83:9b:89:24:56:9b:bb:9c:71:77:92:a6:94:94:51:36:35:ba:
79:bc:a5:d1:25:28:dd:a6:26:28:f9:55:96:5c:43:48:67:72:
88:77:9d:51:b2:f9:5e:d6:cf:e2:81:cb:3e:16:45:a1:7c:5c:
28:d2:9a:94:86:1d:98:d5:77:df:0d:31:6d:85:b4:59:0a:d7:
9c:f2:41:a2:a6:14:6f:32:ed:1e:f3:ab:61:1e:98:e7:cb:04:
dd:b7:b2:76:a1:a6:2e:71:60:2b:f5:93:8c:97:4b:b0:72:73:
29:52:ea:36:ad:3e:cf:73:df:a9:14:0e:33:af:0b:51:d2:51:
ce:59:a1:73
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUYgZ7Ug8fFHZy9UhTQ30wjQqGTWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjEwMjYwNTQwMDZaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDIzZWMxNmE5OWJlNjFlMGNjNTEyNjI5NmNkZTg3MzdlNDg0NDIzODdkM2Zj
NTVkY2Y3NTM2ZjlhYTczZDVjM2ExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOHHgR8rGs4IRAWx8sZppb8/jWN+hDtoKVUu05lTXNyMKbGwaqeB/YS+CcpR
Q4nddlrI+ekQqiX0WEyBcecAFdlq5Tb6RL3e2ywI3HzMAqzHk2DPMqxHLxJKafd+
LcXoAIHv1e5FheT9eQ7pEGvj845F1BJgAU94m0UnC2JWNIt3scAkRFiUCvA0sNCq
NceCnNiFN3d1px6cm45i+lSf2ImsWedU6qjMHJReU0haPlDg3L9+Jx+jYGWa1BdW
GvomMQGEj0o/apszoX8HeGztT0COkXvuFz0LndaJWQLbdBqNEHeA2rVivlSTAG4l
Nh4O6gY/Lx2IShNA2aHO2nIH/X0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSMNYCR
71sSb/bAAjnMPu7kLF2dIjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZTM5OGI0N2UtOTg2Ny00ZTcxLTk2ZGItNzYwZjkxMDJhMzlmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcE5tjAN
BgkqhkiG9w0BAQsFAAOCAQEAdE208UVxfwVEjRlixxguNwRlgSvKUxX2Rmm/ZjV/
9SOlM3vGxq9URPFLPhHfGAkZQotE9igPQqmng5FsL3/6R3OhBbXJSCSnEuZSgWdl
p7ApOdQOah8aPYE6wsUAJsFtKDN8bSU4WtHBNT0lbqssNTaAC0eW14QtgrhaKgKF
g5uJJFabu5xxd5KmlJRRNjW6ebyl0SUo3aYmKPlVllxDSGdyiHedUbL5XtbP4oHL
PhZFoXxcKNKalIYdmNV33w0xbYW0WQrXnPJBoqYUbzLtHvOrYR6Y58sE3beydqGm
LnFgK/WTjJdLsHJzKVLqNq0+z3PfqRQOM68LUdJRzlmhcw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:59:58 2026 by rpki-client