Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01bbf67c-f7ae-457c-80b3-728a951b236a.roa
File: 01bbf67c-f7ae-457c-80b3-728a951b236a.roa (raw, json)
Hash identifier: iO9ImvzVZ9M1EuSRGe3+wgkr4qxz3Q7O10CZp2j4yWM=
Subject key identifier: 7D:9C:C0:4B:36:7F:86:42:85:32:AA:41:0E:0D:52:1A:94:A6:FF:43
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0FBC33ECF4686FC6592ECC62DBE3AEDEF45E220F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01bbf67c-f7ae-457c-80b3-728a951b236a.roa
Signing time: Mon 27 Jul 2026 03:20:40 +0000
ROA not before: Mon 27 Jul 2026 03:20:40 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:bc:33:ec:f4:68:6f:c6:59:2e:cc:62:db:e3:ae:de:f4:5e:22:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:40 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=0e6ea19fe2c545b59750253d5738c38f858d4412b102c148ee29a8bf29e7ca21, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:be:8a:ff:fd:cf:6f:95:0e:50:fd:7e:ad:0e:
2a:93:2f:d9:62:46:35:4e:e5:94:e8:22:5e:c0:06:
a5:84:e1:a5:fa:fd:c6:87:c0:e0:7e:70:a8:79:70:
93:d5:36:b8:a3:ce:27:99:0b:00:8d:c4:f4:08:42:
2c:5d:46:65:78:78:dd:18:bb:02:d4:e5:7c:86:6c:
6e:72:cb:7d:2e:62:9e:91:d8:9d:68:b2:01:09:86:
64:6d:3c:aa:39:c6:cf:c4:f3:cd:40:e4:80:02:d8:
7c:c2:e7:1b:f4:d0:36:0c:b5:07:6a:f2:35:aa:b9:
02:26:24:2e:64:66:4d:4e:14:a4:5f:e1:cb:66:f9:
2f:f3:1c:95:b7:49:21:6c:47:4d:44:91:e1:4b:70:
eb:de:27:6a:c0:11:dc:01:64:0b:ff:93:e6:7d:b4:
d3:a0:dc:b7:ed:de:a5:64:f1:bd:42:97:d0:8b:76:
5d:ff:dd:0f:39:af:a0:eb:5e:9c:52:1a:8a:2b:2f:
35:f6:59:09:2e:52:5c:65:18:0c:08:b8:10:3a:09:
73:9e:e8:6b:b1:84:07:95:38:cc:09:31:74:70:2f:
0b:b3:2a:ec:68:51:a3:66:df:e9:c6:d8:3e:43:10:
4c:b1:76:15:43:87:16:1a:3a:98:57:e9:d6:04:a4:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9C:C0:4B:36:7F:86:42:85:32:AA:41:0E:0D:52:1A:94:A6:FF:43
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01bbf67c-f7ae-457c-80b3-728a951b236a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.128.0/18
Signature Algorithm: sha256WithRSAEncryption
ac:de:ef:d9:bf:cd:f4:19:99:03:43:55:30:10:03:bb:14:02:
29:c4:cc:a7:4f:46:3f:b1:cd:dd:0d:d8:51:9f:c0:d4:84:fe:
64:5c:18:d2:68:a3:6f:38:81:63:26:96:ca:92:64:5c:d2:84:
09:bd:d4:0a:15:bf:58:a4:2c:0c:c6:7f:15:fb:b0:00:6c:20:
4c:65:c4:33:ca:6f:47:93:cb:2c:48:89:41:12:03:7e:cc:df:
fc:3b:d9:3b:7a:f0:8c:a1:5b:d3:54:6b:0f:79:49:06:9d:fd:
45:ec:ab:12:1a:bd:10:00:d5:16:b2:53:df:f3:e5:98:fc:f0:
d8:27:ed:c9:86:46:cc:f6:f9:b4:03:df:0f:16:40:c8:d1:e2:
1b:da:af:f6:01:0a:29:ae:ff:21:b9:69:bb:4d:e8:c3:5f:f2:
1c:ae:35:08:f7:97:20:03:e2:5f:ad:ab:80:b4:91:a9:8d:e7:
2e:5a:3f:e2:63:e3:2d:57:08:0b:e6:da:e3:5a:fb:8d:c8:89:
c6:a7:c5:a7:18:96:cc:bf:d1:03:f1:29:28:52:ee:3d:2b:6a:
2e:eb:02:13:17:f8:70:5f:02:2d:a5:cd:f7:f0:d8:9a:95:a8:
88:30:ea:14:ac:69:52:09:7b:58:62:fa:79:7d:d7:be:7c:73:
bd:d5:11:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:28:55 2026 by rpki-client