Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
File: f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa (raw, json)
Hash identifier: UE9RcSPay6z6WpO6osPe6NEmccDGanRq3mWH9+tWcpw=
Subject key identifier: 5A:BF:5B:FB:BF:14:CD:42:86:BA:9C:8B:9B:86:89:75:6E:8F:B1:17
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5186228ACE3FD1B5D772F20398B6097640FEC95D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
Signing time: Mon 26 Oct 2026 05:40:33 +0000
ROA not before: Mon 26 Oct 2026 05:40:33 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 193.26.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:86:22:8a:ce:3f:d1:b5:d7:72:f2:03:98:b6:09:76:40:fe:c9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 26 05:40:33 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=039dcb8f5073dc71964b51140e16aedad24062339d4c26e0965a05fe501ec9cd, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:c0:12:e6:1d:93:73:31:b0:34:fd:aa:38:
ab:02:44:34:e8:8e:e4:82:6e:45:1c:0f:96:46:2b:
04:1d:1e:22:88:8e:5b:c9:f7:30:6b:df:13:a5:7b:
f2:24:a8:6b:27:47:52:8e:15:c8:07:9d:44:bd:cc:
6d:c6:3a:65:d9:97:ba:c6:dd:c5:47:c8:e5:3a:bf:
5a:2e:d0:63:ec:1e:a5:0c:52:dc:d8:80:7f:c1:49:
bf:63:3b:8c:5a:5a:94:bb:e4:2b:3d:09:c1:85:95:
62:27:d9:69:68:e6:07:aa:c3:2e:a6:79:6b:09:ab:
d1:74:44:38:87:8e:df:f1:14:11:85:bf:25:0f:f7:
8a:80:e0:40:87:cf:e0:16:95:9f:18:89:7d:a2:68:
47:6a:00:61:05:09:84:ca:07:c2:b8:38:5f:5d:f0:
b2:f1:6c:37:51:1b:6b:f1:53:9a:76:78:be:ed:05:
d1:f0:35:b7:77:54:e0:b8:62:0d:64:fb:06:d1:bd:
09:0d:25:36:7a:92:55:57:49:ae:e6:e4:9e:82:2c:
db:a7:cc:ec:7f:9c:73:e8:f4:40:62:3c:78:b3:97:
c3:fd:e4:9c:12:d0:b8:0b:43:50:02:85:ce:75:30:
53:02:7b:2f:67:d3:04:30:2c:72:3e:57:55:f0:72:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BF:5B:FB:BF:14:CD:42:86:BA:9C:8B:9B:86:89:75:6E:8F:B1:17
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.64.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:47:62:61:77:a2:3b:e3:7d:e0:8b:97:3c:10:89:6f:09:0b:
90:4e:30:2e:a0:28:93:ea:75:99:3e:70:07:e1:8e:a8:87:da:
86:55:68:40:9a:66:c0:16:ab:44:85:9d:5d:6b:35:11:c8:7d:
9a:ca:19:19:d2:94:54:5c:03:72:d0:9a:99:a0:e4:f4:8b:92:
5a:25:a9:20:bd:75:7e:f7:ab:80:b3:fe:40:c0:58:94:90:d5:
5d:02:79:4a:9d:c4:1a:64:99:4c:f4:58:73:23:d2:82:9f:1f:
40:2c:32:c4:4b:40:42:af:00:bd:9f:4e:63:46:2a:d9:27:da:
18:df:6b:7a:95:e7:44:36:e7:f4:72:b7:a8:2b:1e:cf:ee:57:
5b:8d:91:b9:b8:cb:a5:fd:ee:c2:a2:17:a9:bf:9c:6a:b0:ba:
99:2d:e1:2a:e4:59:06:f1:12:2c:26:dd:77:fe:26:ff:f2:ba:
58:65:e0:d7:1d:0b:b9:a7:53:16:ad:59:0d:d5:9a:50:ac:a6:
cb:ec:ee:d8:b5:32:c2:ef:e8:e5:51:7b:78:f7:71:55:5c:3a:
99:a3:4b:c6:24:bd:d5:96:d1:c8:a7:d4:74:b7:68:6b:3f:9f:
b8:e4:b2:40:69:ca:21:79:1c:78:4c:86:30:53:a9:7a:9c:03:
0c:2c:22:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:20:30 2026 by rpki-client