Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e91c1f40-9f81-4796-b5cc-2c1fe9202cdf.roa
File: e91c1f40-9f81-4796-b5cc-2c1fe9202cdf.roa (raw, json)
Hash identifier: BgZ0lPNZUWPZQ3XqXuee4g9leyoDnz5XV+Oxlz8sXHE=
Subject key identifier: B9:85:09:32:61:33:3E:5E:75:7E:6A:37:01:04:82:D8:24:B6:65:EF
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 48F4C7980AAE415502BA8910D6907E914C32BB20
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e91c1f40-9f81-4796-b5cc-2c1fe9202cdf.roa
Signing time: Fri 13 Feb 2026 15:30:11 +0000
ROA not before: Fri 13 Feb 2026 15:30:11 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 62.230.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f4:c7:98:0a:ae:41:55:02:ba:89:10:d6:90:7e:91:4c:32:bb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Feb 13 15:30:11 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=8492c290bb7d0628fddb551a9b7c67cf46a3acb35982e8f4e7e260ac77167cfa, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:6c:0e:cf:ea:61:20:b7:ff:91:cf:a5:0a:
b4:5d:6b:c8:56:05:04:78:4a:27:90:18:8b:da:1e:
ff:37:00:2f:15:aa:7a:27:92:79:5c:2c:73:a4:3c:
62:06:23:11:30:92:f1:47:9e:b2:d8:23:b5:e6:f1:
5c:08:c9:ee:fc:b8:9d:ae:06:3d:43:52:99:de:eb:
d3:91:63:5b:d2:56:9d:9f:36:0e:72:a8:56:e4:e9:
bd:96:00:b6:5e:bf:80:72:5f:5e:dc:24:8a:8a:a1:
45:b8:9d:7f:e2:29:3d:6c:d8:da:a8:52:9c:90:95:
85:81:e2:75:6e:63:9e:21:a6:d9:aa:9c:08:c1:c4:
8b:f4:4b:f4:05:5d:38:af:32:18:86:9e:d2:c9:62:
c0:ed:ff:f2:42:12:dc:22:ed:35:d9:70:d7:40:45:
96:05:a9:d6:b9:91:13:7e:1f:81:6c:04:34:2d:49:
38:b5:1d:34:f0:d5:4c:ef:c5:3c:7b:5d:89:74:56:
c5:93:48:e1:ec:35:8f:1a:74:e0:5b:18:89:e9:d8:
ca:97:fc:27:6a:6c:7f:8b:3e:01:fe:ca:04:f8:c6:
f9:59:8f:56:a0:8a:1f:28:f4:df:27:b6:d2:96:4c:
46:82:79:e2:1b:a8:ff:fd:b6:ec:3e:c7:9b:f2:36:
40:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:85:09:32:61:33:3E:5E:75:7E:6A:37:01:04:82:D8:24:B6:65:EF
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e91c1f40-9f81-4796-b5cc-2c1fe9202cdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.230.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:b9:9e:87:01:50:5e:a4:62:85:bf:f8:fc:24:f3:08:43:f7:
21:a0:e3:1d:61:f7:31:3a:e1:d2:1d:b7:c2:78:9a:a8:50:c5:
1f:4d:f6:bb:45:08:59:01:50:5b:ae:2d:69:7a:26:68:7b:2d:
cd:1a:ca:ee:54:b8:c6:e4:ac:45:ce:22:2e:a7:fb:c0:34:56:
7d:c6:14:d7:ed:6c:9d:9c:22:28:83:07:13:29:07:70:6a:63:
99:bd:5c:f9:4f:8a:17:67:a4:91:12:50:aa:55:85:a3:d3:a0:
60:79:15:7f:81:ca:48:29:3f:0e:88:48:15:ad:eb:f7:b9:97:
ce:26:cc:02:2b:21:e8:1a:0e:43:61:4b:63:a3:76:78:27:bb:
e4:17:6f:13:a6:8b:1b:5c:4e:a4:b1:c7:88:bf:fa:70:b0:5e:
9b:64:04:db:97:36:57:7c:8d:b9:d0:77:e7:5a:d8:0c:c5:54:
62:eb:c7:ed:1f:bc:14:27:3e:0f:58:85:aa:06:cc:f4:9e:4a:
7a:39:c2:06:57:bd:4e:bc:74:79:6c:21:b4:8f:96:10:3e:6a:
a9:e8:5b:be:cc:b5:72:49:e9:88:da:1d:e1:f6:6c:54:54:1a:
e9:c8:7c:a3:90:0c:96:f8:e1:00:32:af:8e:20:58:71:29:a8:
d6:48:df:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:07:21 2026 by rpki-client