Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e680ffe7-d77c-4433-81f9-ffbf76a45a6d.roa
File: e680ffe7-d77c-4433-81f9-ffbf76a45a6d.roa (raw, json)
Hash identifier: ygi1H60jXyvmsvixCZqGmZa3qeP4AY8MiNJPn1ooTQw=
Subject key identifier: 6F:D9:89:DB:CB:37:75:78:9D:31:09:72:D1:1C:50:6A:47:0E:E3:4F
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 2D65A1CD19781E14472AFC8A58ECA11A70AE332B
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e680ffe7-d77c-4433-81f9-ffbf76a45a6d.roa
Signing time: Mon 26 Oct 2026 05:50:26 +0000
ROA not before: Mon 26 Oct 2026 05:50:26 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 193.57.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:65:a1:cd:19:78:1e:14:47:2a:fc:8a:58:ec:a1:1a:70:ae:33:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:50:26 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=364138c5290253de84d8255c51e692142c476d7efa5aeaa13bbe421ea24dcdc3, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:0d:d3:47:94:02:2b:44:18:36:ba:f4:11:
25:58:6c:2b:94:bb:a7:b2:10:15:c3:6d:31:f0:d6:
13:57:64:71:eb:38:69:68:fd:ee:73:24:53:c0:f8:
08:f0:91:2e:8b:6b:47:ec:ef:b5:1a:78:13:b8:ed:
18:cc:43:7a:de:39:3a:54:e7:c1:ef:82:06:d9:c6:
4e:ae:68:85:54:23:25:21:e9:cf:b6:b5:0f:cc:a6:
df:06:8f:0f:d8:c9:b1:fc:c1:2c:ed:2b:d9:f6:7a:
e9:9a:a5:d8:4a:f9:9a:0b:0b:ce:ca:ec:92:86:b9:
60:b7:a7:5a:c6:c7:5d:b5:9e:c0:2c:8f:78:fa:d0:
ad:dc:51:b5:f6:d9:e4:63:0d:f2:07:0d:6b:23:b0:
91:d2:e1:23:42:61:2f:b5:8d:61:15:e2:70:32:90:
cb:e1:6d:67:5f:5a:21:20:fe:b8:c5:45:66:ed:21:
67:7b:d7:2d:65:3a:9f:e8:3d:4a:96:50:27:dc:c9:
0e:49:82:10:22:5e:4d:e7:11:69:4e:03:d9:fc:23:
0d:49:48:c0:be:bb:41:43:0d:c9:60:0a:a4:86:fc:
17:4b:d3:50:77:c4:67:d2:87:dc:92:c9:7f:5a:73:
6a:83:b2:71:bc:22:a2:5d:22:ae:57:95:16:75:29:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D9:89:DB:CB:37:75:78:9D:31:09:72:D1:1C:50:6A:47:0E:E3:4F
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e680ffe7-d77c-4433-81f9-ffbf76a45a6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.181.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:44:1e:e4:30:3b:78:b8:7f:8b:d8:e9:40:b3:a1:ec:77:71:
da:b9:53:57:c7:60:9f:c3:d3:28:78:d0:0e:74:99:fb:70:e6:
b1:e7:5e:74:9c:d8:04:26:6b:77:eb:3a:6b:ee:10:be:7c:76:
f5:8a:d6:4d:89:67:c5:30:28:32:39:ad:d3:cb:16:45:70:af:
32:0f:6e:a7:e2:de:e6:2b:fe:db:5b:64:6a:2a:e8:95:17:ba:
bd:19:9b:a0:e2:cc:22:fa:42:66:3e:d8:d6:f4:4f:60:47:21:
79:4b:5e:3a:29:0c:6e:30:77:f3:ee:a8:45:e2:2c:cc:d6:09:
6e:c2:11:df:56:69:d4:c0:84:a7:ec:73:d2:28:91:94:ac:38:
ab:57:b8:97:5a:db:8c:12:83:db:80:fc:ac:68:85:b3:c9:63:
0c:e2:b2:fa:74:14:f2:36:32:86:0b:db:a3:90:b4:49:19:a2:
5e:1a:07:d5:8e:2d:55:9b:b2:ec:56:93:60:a7:bc:c8:1c:72:
63:cf:0c:a7:be:1a:bf:18:13:c8:de:6f:b5:12:9f:36:eb:ec:
d6:5a:d6:95:48:cf:31:33:12:d4:e0:8e:f2:bf:5d:f3:10:d3:
91:3d:1e:d1:98:bd:15:83:18:c0:cf:fe:40:59:46:44:89:9a:
8e:64:67:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:28:39 2026 by rpki-client