Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fdb81a1b-3eea-4c1a-97f6-940966a0bde0.roa
File: fdb81a1b-3eea-4c1a-97f6-940966a0bde0.roa (raw, json)
Hash identifier: IHz0vISyTojP6ksnoZnIj78sQScTph5IOAgc0jeJNus=
Subject key identifier: 09:7C:AD:A4:F6:A0:26:9F:EE:D3:5E:31:40:AB:86:4C:DA:92:0D:9C
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 69B929F3C15ABB53B3F5A319DE71F2AE838D777E
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fdb81a1b-3eea-4c1a-97f6-940966a0bde0.roa
Signing time: Mon 27 Jul 2026 00:20:08 +0000
ROA not before: Mon 27 Jul 2026 00:20:08 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 83.119.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:b9:29:f3:c1:5a:bb:53:b3:f5:a3:19:de:71:f2:ae:83:8d:77:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jul 27 00:20:08 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=8cec36f69e9bf8059df35430cc286a387d9d904344c49e2b0512f82e4dabf2b5, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:b5:92:21:ec:94:21:83:25:e0:e7:ed:07:
3c:73:6a:30:c0:61:72:26:ec:6d:c8:57:0a:39:5f:
c5:c2:99:7a:1f:c2:c5:6a:36:1a:57:5c:49:c5:91:
b1:db:71:5f:65:e2:b0:a8:d6:0b:d8:1e:25:ec:86:
d7:8e:54:e6:fc:ad:81:e8:21:04:51:93:78:f6:22:
a9:f5:b4:29:38:9a:a3:d9:c1:cd:5a:76:79:e9:a6:
43:d2:4f:89:95:c9:6f:2e:a7:63:c2:ca:bd:bf:63:
13:74:e5:ca:de:77:d9:44:3f:a7:03:19:c8:d2:cd:
a1:e9:a3:58:31:fd:54:16:42:c6:bf:72:51:b5:2a:
97:0c:8d:c7:ec:bd:5f:1e:c4:a8:4b:78:0b:bb:a2:
9d:3d:4f:9d:01:b9:07:6e:4e:e5:82:58:94:8b:92:
cd:d9:de:67:e5:8d:68:00:9e:39:36:a8:98:ce:65:
f5:d5:8d:05:f8:82:a5:b1:57:84:a3:13:4b:ba:4f:
25:ba:cd:6a:70:6e:30:06:26:58:70:d0:a7:38:3a:
23:bf:4b:dd:ee:69:f9:6d:33:69:88:29:f7:85:2c:
5b:75:8b:fa:85:a1:fb:9c:64:11:23:d5:20:4e:ae:
7b:28:4a:cd:b6:ea:e7:aa:36:7b:4d:b3:42:a5:9a:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7C:AD:A4:F6:A0:26:9F:EE:D3:5E:31:40:AB:86:4C:DA:92:0D:9C
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fdb81a1b-3eea-4c1a-97f6-940966a0bde0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.128.0/19
Signature Algorithm: sha256WithRSAEncryption
d0:4b:62:60:a1:64:ec:29:50:13:e7:cd:6f:b5:88:11:2e:92:
79:59:45:66:da:25:93:7c:74:bb:3f:fa:d4:7c:4f:a3:39:4e:
ad:b1:7d:7c:06:d5:5f:72:1d:e9:34:ff:43:48:f9:32:e2:98:
e6:50:7d:4c:77:da:c7:67:40:2c:40:b5:d6:76:df:42:3a:0e:
79:ff:39:60:90:14:57:42:0c:ed:63:62:37:a3:9f:a7:82:72:
ba:72:8f:d4:bc:8b:cb:6d:55:04:11:c8:d2:60:f0:07:81:08:
f4:e6:be:4b:36:a1:d7:61:49:c4:2a:28:9d:b1:e7:24:28:38:
d5:cc:1b:e1:87:d2:84:1a:f2:3d:af:a7:d8:ff:59:29:1f:e1:
f7:80:43:f3:ba:c8:4e:8d:c0:5c:ef:34:d6:2f:a5:4a:53:24:
de:8e:3d:17:0a:1b:5a:25:34:af:a0:36:9c:cb:d5:f1:70:e5:
7e:6f:68:41:f4:5d:6b:e5:b4:04:1b:2f:d2:0b:b2:96:c2:2f:
c2:fc:bf:2c:1b:58:6f:ae:3c:81:7b:64:5a:ea:68:33:23:85:
ca:6c:86:99:31:e3:b6:9a:5e:a3:1c:cf:58:26:67:42:03:3f:
83:e6:47:04:e3:53:e7:2a:88:e8:73:4c:f7:ff:f7:2c:35:3e:
0d:69:52:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:59:36 2026 by rpki-client