Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
File: fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa (raw, json)
Hash identifier: 0/+bVt/Ompx50cQxpfPt/k2elMLCqAFE8FvcnAq+Jtc=
Subject key identifier: 5C:9B:80:CF:84:4D:9A:B0:9F:28:57:88:05:9B:15:5F:D6:E7:8D:06
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 13CADE22AF0F2CA2E56EAE26480CF1427B647D66
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
Signing time: Fri 07 Aug 2026 05:00:12 +0000
ROA not before: Fri 07 Aug 2026 05:00:12 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 57.95.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:ca:de:22:af:0f:2c:a2:e5:6e:ae:26:48:0c:f1:42:7b:64:7d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 7 05:00:12 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=574128d3063f9f4ec8f75033a3b6bfceee093feb9f4633daeab5f27ccd70d40a, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:16:4d:0c:65:f6:8a:98:0c:a7:b1:7a:68:a9:
69:dc:b4:d4:08:ec:ae:c9:4f:26:6a:5a:fe:6f:de:
81:db:33:fe:80:59:74:3f:d8:26:15:57:cf:44:17:
bd:2c:be:86:84:c6:4a:8a:ac:7a:4c:b9:ba:ac:de:
6d:71:01:ab:8d:64:ca:86:11:c0:29:83:4f:88:c2:
61:eb:1a:aa:82:53:93:96:f6:e0:d5:74:4a:f0:12:
31:60:ff:59:64:25:92:47:0a:fc:ce:cf:cf:8c:c7:
33:bc:b4:47:4a:1a:c4:24:21:eb:59:e4:81:35:76:
71:3f:c9:94:fa:50:16:f7:02:59:65:41:14:f2:79:
6f:84:0e:e3:dc:1a:88:c3:d7:51:9b:3c:fd:27:38:
c5:7d:4e:c1:11:10:54:e1:0a:98:61:d8:f7:b0:4e:
78:29:fd:04:c3:a0:c5:0e:62:83:a9:e8:fe:1b:a3:
af:67:ac:ec:8f:33:57:bd:c4:84:b0:42:8a:d4:3a:
62:fd:59:7a:a0:af:84:be:12:01:c0:54:bd:fa:d2:
d5:01:0b:53:59:06:91:3c:18:b1:fd:aa:d5:d6:f2:
7e:b0:ee:ef:12:61:c9:a6:f3:25:8f:e0:4b:51:9b:
83:00:3a:9b:bb:f3:d5:7d:f7:c5:78:57:02:ec:68:
c6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9B:80:CF:84:4D:9A:B0:9F:28:57:88:05:9B:15:5F:D6:E7:8D:06
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.95.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:f3:3e:23:db:f5:7f:60:1d:11:f6:0e:bd:6d:28:9b:7b:21:
16:1a:ef:25:6b:45:f2:8e:13:d6:8f:f2:13:bc:d9:82:1c:9c:
57:2d:ed:19:40:7d:8d:c3:ef:e6:7c:ce:a3:df:cb:3a:dc:b3:
ea:88:33:ee:32:88:e4:4f:e4:c7:b2:cb:77:d3:b8:c8:27:13:
ac:0f:1b:30:45:ec:be:64:4e:7f:c2:cb:12:ad:84:fc:22:59:
18:06:6c:49:cf:59:f0:ad:a8:42:31:12:05:7b:a6:b0:00:15:
20:05:66:5c:dd:8e:33:1e:ad:cb:af:63:84:87:9c:cf:5f:62:
99:8c:a9:c1:ab:db:1a:a3:94:4d:4b:81:e0:1e:c6:17:c9:53:
02:3e:07:48:cf:b3:08:b5:17:79:cd:2d:3b:2a:8a:9d:83:84:
88:f8:ea:58:53:8d:61:f1:37:e6:61:15:f3:d8:4b:db:52:8a:
68:52:74:09:31:5c:51:26:9f:f7:fe:30:86:be:34:da:30:a5:
bb:9f:fc:bf:0f:18:42:9f:25:35:70:3e:c7:8f:18:41:f9:10:
2a:04:72:39:e6:4d:30:77:c6:bb:9a:ea:57:8c:92:83:37:d4:
87:4a:fe:a5:90:21:13:cb:5c:e6:8e:9a:b0:c1:78:8c:9c:e2:
25:95:88:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:30:40 2026 by rpki-client