Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
File: fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa (raw, json)
Hash identifier: pNlj8g4v/R3sLliUIaVdlPBGVhUL4ov9ZmjjXUM1gxY=
Subject key identifier: 86:FD:2D:65:55:C6:1C:BB:4E:3F:EC:01:31:BC:96:4B:6D:D2:3E:32
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 18C5DAA93CCEB220A42B52E64C446A7708EA1F7C
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
Signing time: Sat 28 Feb 2026 06:30:57 +0000
ROA not before: Sat 28 Feb 2026 06:30:57 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 57.95.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c5:da:a9:3c:ce:b2:20:a4:2b:52:e6:4c:44:6a:77:08:ea:1f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Feb 28 06:30:57 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=234fef8bcc3f280b6726884f7e644ede4fe1b8d769d92eb0482b6976cf911c58, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:91:f7:3b:9f:d2:c2:78:14:eb:6d:51:9d:
12:b6:84:67:74:f7:21:ee:4d:6c:15:57:87:dd:1d:
4e:3d:46:da:a2:86:57:c6:f0:6a:4e:a2:75:bc:72:
9b:62:30:8e:d2:d7:b6:ac:b4:03:05:d3:3d:6a:7e:
ff:d4:50:41:df:2f:b2:75:8c:e2:a2:06:62:10:13:
61:71:55:50:59:22:67:34:55:c0:39:06:a7:a7:3f:
b6:76:3b:62:0e:0b:ce:4e:08:31:d4:1c:ff:9b:57:
e8:af:8c:27:8f:6f:82:df:76:1a:5b:08:20:29:ef:
02:43:56:0a:96:dd:d8:eb:ab:30:b9:ec:0d:cc:77:
82:a9:de:f1:30:47:10:c7:0f:7f:95:1b:54:db:51:
57:a5:d8:fd:a9:f1:33:46:04:88:43:d6:c1:6e:52:
8f:51:66:02:99:df:e9:9e:ef:95:3f:d3:27:fc:b2:
9d:fc:90:f8:d3:3c:6b:74:23:d3:66:45:27:1c:cf:
86:be:bf:54:4a:44:92:e6:5a:4c:6c:87:ad:75:67:
e8:ea:db:c2:71:61:54:bf:6b:14:3d:4d:a7:7d:da:
e5:ad:3d:e9:a0:f8:fa:ca:27:d7:9c:ae:69:28:a5:
b8:9c:0c:35:db:94:24:99:b0:09:9a:22:85:00:4c:
09:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FD:2D:65:55:C6:1C:BB:4E:3F:EC:01:31:BC:96:4B:6D:D2:3E:32
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fbc260fc-826d-4d13-a20a-3df2ec95cf1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.95.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:d3:36:f8:d7:7c:82:34:47:3a:4c:f4:08:ab:75:85:cf:b7:
3c:33:95:a9:36:35:cf:c4:16:8f:c0:4e:1e:9a:32:a7:44:5d:
ac:2e:15:fe:36:a3:f1:fa:a5:68:f1:98:ee:ee:b3:c2:a6:06:
8b:41:0b:58:90:15:9c:ba:00:98:af:c0:28:24:db:bb:07:c9:
9b:4f:8e:10:1a:1d:4f:fd:90:a1:bb:06:9e:10:7d:66:7f:11:
36:06:5d:7f:cd:ab:a4:6c:72:1f:1c:d6:98:b3:c5:1e:58:85:
fc:d0:f1:3c:28:a5:ef:1a:42:be:46:c6:a5:e0:fc:a9:d4:8d:
52:98:12:0e:fc:bd:e1:65:50:ab:21:6b:89:18:62:34:b0:b5:
a2:e6:3f:58:54:dd:4c:7c:a4:7a:39:da:1e:f6:b6:c7:8c:f3:
ae:05:62:15:c6:af:8a:45:e9:5e:86:da:ec:df:ab:74:ef:ff:
d7:b4:21:04:92:5a:e0:cb:48:3a:c2:71:15:79:13:9a:d1:59:
fa:6c:41:7b:e1:70:a4:74:fc:d2:c0:5d:f2:4b:90:07:01:2b:
0c:7a:92:bc:ce:1b:67:15:93:d5:45:b4:84:09:24:a3:18:b9:
67:9d:9e:4c:b0:2a:d2:05:60:a2:e4:cc:ef:25:f2:64:9c:77:
e1:82:e7:8c
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUGMXaqTzOsiCkK1LmTERqdwjqH3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNjAyMjgwNjMwNTdaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDIzNGZlZjhiY2MzZjI4MGI2NzI2ODg0ZjdlNjQ0ZWRlNGZlMWI4ZDc2OWQ5
MmViMDQ4MmI2OTc2Y2Y5MTFjNTgxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMGNkfc7n9LCeBTrbVGdEraEZ3T3Ie5NbBVXh90dTj1G2qKGV8bwak6idbxy
m2IwjtLXtqy0AwXTPWp+/9RQQd8vsnWM4qIGYhATYXFVUFkiZzRVwDkGp6c/tnY7
Yg4Lzk4IMdQc/5tX6K+MJ49vgt92GlsIICnvAkNWCpbd2OurMLnsDcx3gqne8TBH
EMcPf5UbVNtRV6XY/anxM0YEiEPWwW5Sj1FmApnf6Z7vlT/TJ/yynfyQ+NM8a3Qj
02ZFJxzPhr6/VEpEkuZaTGyHrXVn6OrbwnFhVL9rFD1Np33a5a096aD4+son15yu
aSiluJwMNduUJJmwCZoihQBMCXUCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSG/S1l
VcYcu04/7AExvJZLbdI+MjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
ZmJjMjYwZmMtODI2ZC00ZDEzLWEyMGEtM2RmMmVjOTVjZjFhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADlfMA0G
CSqGSIb3DQEBCwUAA4IBAQBS0zb413yCNEc6TPQIq3WFz7c8M5WpNjXPxBaPwE4e
mjKnRF2sLhX+NqPx+qVo8Zju7rPCpgaLQQtYkBWcugCYr8AoJNu7B8mbT44QGh1P
/ZChuwaeEH1mfxE2Bl1/zaukbHIfHNaYs8UeWIX80PE8KKXvGkK+Rsal4Pyp1I1S
mBIO/L3hZVCrIWuJGGI0sLWi5j9YVN1MfKR6Odoe9rbHjPOuBWIVxq+KRelehtrs
36t07//XtCEEklrgy0g6wnEVeROa0Vn6bEF74XCkdPzSwF3yS5AHASsMepK8zhtn
FZPVRbSECSSjGLlnnZ5MsCrSBWCi5MzvJfJknHfhgueM
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:07:47 2026 by rpki-client