Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e91c1f40-9f81-4796-b5cc-2c1fe9202cdf.roa
File: e91c1f40-9f81-4796-b5cc-2c1fe9202cdf.roa (raw, json)
Hash identifier: 3F78yl5qTwc7QCdTPn2YgQxWTtn6GrhxHkP9oCYR3ek=
Subject key identifier: F7:1A:E3:9D:BC:38:30:51:87:BF:4F:7D:91:00:41:65:CA:0F:61:FF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 3FC92392E6E1CF817131AE4286D959449F9C80DC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e91c1f40-9f81-4796-b5cc-2c1fe9202cdf.roa
Signing time: Sun 11 Oct 2026 15:20:20 +0000
ROA not before: Sun 11 Oct 2026 15:20:20 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 62.230.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c9:23:92:e6:e1:cf:81:71:31:ae:42:86:d9:59:44:9f:9c:80:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 11 15:20:20 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=5f29483bc9a24cb10a76c274cf6132e54fdb81b7ab8d10cb2438cbf522308cc5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8c:14:03:b0:ec:c0:1f:62:c4:31:50:df:9e:
c1:60:25:b7:03:7e:27:33:2d:10:09:66:38:10:44:
63:fb:f1:50:cb:bb:ad:27:c4:55:df:5b:ad:e3:a6:
79:11:41:79:fe:83:ca:da:73:a4:9a:b6:ec:5a:5c:
ad:5e:3a:74:1c:92:23:c2:8e:21:07:1b:ad:03:b6:
2d:9c:85:35:88:9b:23:c6:e0:e3:9a:83:67:9c:e6:
92:7b:6a:55:47:d6:31:f3:04:32:72:63:72:f3:1a:
27:12:8b:ed:e2:ec:35:c9:bb:db:61:5d:b5:f1:62:
76:b3:02:4d:92:93:81:11:24:e0:4d:a8:1b:f7:63:
00:09:86:76:f4:72:3d:22:c4:de:98:ee:0f:42:2e:
fb:35:bb:4c:39:f5:1f:eb:e2:80:69:6c:f8:8e:c4:
34:f2:b2:f8:fe:52:a7:8c:72:48:47:83:b4:6f:ce:
de:4f:61:31:95:72:47:bf:27:12:08:3d:d2:27:84:
cb:f9:f1:3f:c1:0d:97:87:11:1d:1f:ed:02:9f:94:
fb:6f:45:7f:e8:20:3e:13:91:05:14:a4:15:49:f5:
33:01:33:77:03:e6:90:9a:26:a3:58:6b:60:a1:9f:
4f:7d:40:c7:c3:87:1f:31:56:d7:ca:2b:f8:39:e7:
40:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1A:E3:9D:BC:38:30:51:87:BF:4F:7D:91:00:41:65:CA:0F:61:FF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e91c1f40-9f81-4796-b5cc-2c1fe9202cdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.230.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:55:af:87:af:1d:d8:8a:9e:e6:94:9e:b9:60:86:f1:05:9b:
69:9c:23:69:a1:65:3b:62:40:05:1e:ad:fd:fa:ea:ea:4e:5c:
26:99:93:86:ea:04:e5:e7:0b:e5:5d:9f:3f:d9:98:ff:9d:e2:
a7:da:a0:ad:f2:dc:e9:68:e0:b3:2b:91:ac:11:e3:45:b3:fe:
d0:92:9f:22:fe:a0:2f:04:ad:42:97:e4:bb:77:f3:28:2f:f2:
cf:99:26:6d:ea:28:d0:11:00:75:63:fc:f3:14:a9:1b:c5:88:
e6:9d:06:56:61:04:2d:d0:d6:01:1a:1e:eb:e1:87:d3:e6:15:
11:c0:e4:cd:56:41:4b:04:c0:6c:cb:cb:88:43:59:e9:52:29:
78:e5:17:17:9f:34:f1:e3:bf:8b:6e:48:e7:aa:41:3b:ce:51:
5e:53:5f:88:2f:d6:0c:08:7c:96:43:67:b9:e5:03:76:4b:be:
44:90:d5:3b:32:7c:40:b7:fb:0f:39:f5:5c:26:bf:b6:d4:4d:
83:83:53:81:e4:2f:27:27:1d:49:c6:79:8a:65:c7:8a:d9:c6:
9b:9a:31:a3:82:8f:1c:fa:33:a3:81:dc:fd:71:ba:9e:3d:40:
c3:87:f3:15:63:85:bb:88:2e:ec:d7:ba:cc:3c:00:7a:4b:29:
d4:40:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:23:37 2026 by rpki-client