Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
File: 2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa (raw, json)
Hash identifier: HSgJLCavoZjp8exstjeHAScpI0fzYy9inV1CSW4MywE=
Subject key identifier: 79:43:0B:88:45:48:30:E4:29:13:CF:D0:11:4B:04:CE:F6:D6:55:7B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2570DF12E64EF7FF4DDD0F7063D086C64D8C7EC3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
Signing time: Tue 17 Feb 2026 03:00:49 +0000
ROA not before: Tue 17 Feb 2026 03:00:49 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:70:df:12:e6:4e:f7:ff:4d:dd:0f:70:63:d0:86:c6:4d:8c:7e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 17 03:00:49 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=8581a5f0e08ff04668c9259b1665709cf8146a9d5b5510cc157ddc3a956c0b48, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:d0:1f:b5:b9:7a:cc:e7:1b:c2:6b:99:7d:
f0:40:46:d5:00:49:87:40:a3:d2:98:4e:14:d4:48:
54:d1:46:0d:85:f3:59:e4:4a:39:84:e4:97:88:31:
b9:6e:66:dc:13:25:47:4e:dc:8c:de:a4:db:8b:88:
a3:ae:0b:f6:54:a7:8d:74:36:45:77:3a:54:13:8f:
40:dd:ad:33:d8:c3:49:5f:9b:70:2c:6c:5f:44:4d:
17:81:69:1d:12:5f:d7:09:f7:8a:17:8b:6b:ed:8d:
c7:96:7c:cd:a7:19:ac:c1:d0:88:42:5a:9b:08:04:
c3:70:a2:43:82:41:11:34:39:6d:b4:6c:1c:1b:15:
a0:5f:19:fa:70:24:6d:ea:f4:00:5b:0d:36:4d:46:
d4:a9:ec:88:99:43:73:7b:b0:d2:29:97:5b:8a:68:
19:76:51:51:07:48:95:b8:4f:07:fd:f5:20:13:32:
53:cd:2c:51:68:a3:b4:6c:cc:1c:a9:df:39:f2:b9:
c7:2d:69:f3:93:f0:86:65:7d:b6:24:d6:84:b8:99:
63:da:6d:b6:76:a2:a5:f6:c5:74:cc:c8:dc:e6:8e:
7f:a1:8e:c4:93:ac:b7:f7:14:0b:4a:63:4d:b2:42:
00:7e:1d:71:b3:b9:ec:50:a0:b5:8b:4e:11:81:99:
0e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:43:0B:88:45:48:30:E4:29:13:CF:D0:11:4B:04:CE:F6:D6:55:7B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.224.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:06:bd:b2:e5:4e:95:26:22:a8:59:47:fa:5f:9a:69:4f:9c:
af:04:a9:d4:fd:e7:94:52:2b:7a:6e:dc:de:cd:bd:7e:38:61:
24:93:41:31:61:c7:f6:89:b3:c6:fd:61:4b:f7:04:52:18:04:
d1:5f:61:20:6f:ad:68:92:6a:29:d7:c8:51:8a:f0:40:19:93:
8d:84:e6:e0:78:29:c1:e4:80:f8:34:5a:07:a1:15:35:10:1e:
71:1f:a5:9f:27:65:ba:a0:ec:e7:9f:8c:d5:57:86:0d:dd:66:
b1:d2:d2:5d:85:1b:f4:d1:b3:0a:7c:20:73:86:a5:6c:8b:93:
57:f7:88:e3:a8:71:1c:27:95:a2:31:1c:80:ae:33:c2:20:3a:
e2:e1:3b:a5:18:cb:bc:43:42:a8:a3:79:7f:73:2b:41:80:18:
52:c6:9d:bc:a2:52:e1:92:33:c3:9f:a1:68:1d:ec:3b:c1:3c:
3b:df:a8:75:56:bb:a4:ff:d6:f4:fd:01:bc:e0:a8:b3:d0:b8:
bf:7c:6c:19:d1:0b:ac:68:c7:5e:b9:81:45:05:f7:89:d7:bd:
9e:99:79:8b:2b:6a:e0:25:d8:3b:7d:e3:7d:3f:b7:99:fe:4e:
63:0d:3e:3e:39:1e:59:6a:94:19:a6:fe:5e:ac:56:69:a0:01:
0f:9d:6c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:49:23 2026 by rpki-client