Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
File: 2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa (raw, json)
Hash identifier: uWSavWOcAyVxgSZNrDrhYqlk6nUHF1XmZxMyL5BTHZc=
Subject key identifier: 78:AD:03:81:30:95:FE:AF:FC:B6:E0:B2:60:90:58:23:62:C6:55:D2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 78E87E5F9BC6B8E6BAD23E3712AEBA4F6EAD1114
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
Signing time: Mon 27 Jul 2026 03:20:05 +0000
ROA not before: Mon 27 Jul 2026 03:20:05 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e8:7e:5f:9b:c6:b8:e6:ba:d2:3e:37:12:ae:ba:4f:6e:ad:11:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:05 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=bc79fc871ab55b9c742e4ca5e71a2443ac3bdda94ce5f7dbe6e39e95b62149d8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:53:d2:d6:64:73:cf:ba:cc:dc:b3:77:96:
33:84:54:18:ad:0a:0b:6b:6a:e0:39:6e:9f:df:83:
91:53:12:83:fe:3f:03:19:1c:df:57:99:d1:7f:ed:
6f:5f:f3:a4:e0:06:71:94:17:4a:d6:4c:ef:90:71:
7a:ee:e4:25:55:55:3e:0f:44:8c:70:bb:5f:dd:9b:
23:e7:13:72:0b:00:83:46:0d:ed:3e:c3:2e:98:df:
fd:02:98:7b:05:5c:98:ce:36:db:28:3d:91:0f:17:
93:fd:5a:ac:de:fa:71:63:84:b7:13:24:27:1c:eb:
1b:41:af:cb:40:00:f4:f6:05:02:6f:d3:dc:61:5c:
32:fc:b3:2b:e4:dc:8b:70:4d:91:10:a8:19:95:0b:
c2:f8:bd:97:de:0c:f6:c6:ce:71:d4:98:bf:e7:25:
f4:83:d7:ae:e5:05:2b:cf:32:ec:e4:64:52:a2:88:
0b:46:90:60:3c:59:55:ba:ea:d7:f5:6e:fa:41:c9:
c6:67:c1:4e:38:29:51:2d:09:29:8d:05:e1:8e:8a:
de:90:fe:b3:e9:bd:c3:52:bf:b3:d2:69:70:e7:3f:
a1:77:6e:d1:42:e3:47:27:a2:41:43:fe:87:e7:57:
f0:b4:27:1c:e5:c9:bc:6d:ef:64:c7:f9:bb:41:64:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AD:03:81:30:95:FE:AF:FC:B6:E0:B2:60:90:58:23:62:C6:55:D2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
Signature Algorithm: sha256WithRSAEncryption
80:2a:25:34:ad:bd:64:77:60:fe:53:21:e9:bd:f8:43:67:cf:
f6:48:2c:b4:ea:84:53:86:86:e7:37:ba:e8:cc:2d:d1:17:cc:
0a:1a:5d:df:af:bf:76:2e:87:fd:8b:26:30:08:1d:d7:a5:8c:
6b:b7:45:f5:d8:96:f1:64:60:2a:6e:2a:db:d3:d3:8a:8c:1b:
36:95:fc:bf:2e:aa:d2:71:b0:8c:a2:d3:00:35:14:c3:11:da:
4f:11:f3:e4:ea:1b:28:43:44:eb:59:05:fa:78:58:74:f1:a0:
9c:75:db:94:5a:a7:e5:79:a6:9e:27:df:10:c1:ba:d0:77:6e:
2c:33:fb:fc:27:79:5f:46:50:a0:2c:d0:8c:4f:3a:59:6f:45:
97:b1:7b:5d:0b:3a:73:38:1e:a1:54:3e:23:ea:d4:94:c9:7d:
ea:40:6d:f0:80:4e:8a:ea:55:7c:f2:ab:01:31:39:6e:cc:ab:
14:6d:2a:c8:f1:6a:49:6b:c0:c7:70:b2:3f:6c:7b:b1:14:59:
e8:9d:0e:69:4b:43:e8:a9:8a:2d:95:29:a4:ac:0c:e4:3b:d6:
29:43:3d:e9:df:8a:73:ed:65:54:72:5b:3e:f3:b5:32:e2:65:
e0:19:1f:41:0b:a1:1c:dc:92:69:69:6e:5f:2c:4c:c3:5a:7b:
cc:74:6b:29
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUeOh+X5vGuOa60j43Eq66T26tERQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjcwMzIwMDVaFw0yNjEwMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGJjNzlmYzg3MWFiNTViOWM3NDJlNGNhNWU3MWEyNDQzYWMzYmRkYTk0Y2U1
ZjdkYmU2ZTM5ZTk1YjYyMTQ5ZDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKDCU9LWZHPPuszcs3eWM4RUGK0KC2tq4Dlun9+DkVMSg/4/Axkc31eZ0X/t
b1/zpOAGcZQXStZM75Bxeu7kJVVVPg9EjHC7X92bI+cTcgsAg0YN7T7DLpjf/QKY
ewVcmM422yg9kQ8Xk/1arN76cWOEtxMkJxzrG0Gvy0AA9PYFAm/T3GFcMvyzK+Tc
i3BNkRCoGZULwvi9l94M9sbOcdSYv+cl9IPXruUFK88y7ORkUqKIC0aQYDxZVbrq
1/Vu+kHJxmfBTjgpUS0JKY0F4Y6K3pD+s+m9w1K/s9JpcOc/oXdu0ULjRyeiQUP+
h+dX8LQnHOXJvG3vZMf5u0FkHE0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR4rQOB
MJX+r/y24LJgkFgjYsZV0jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MmZjMDE4YzgtZGI4Yi00YjA0LThmOTAtM2JhZjgyNmZjMTBiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBy4zgDAN
BgkqhkiG9w0BAQsFAAOCAQEAgColNK29ZHdg/lMh6b34Q2fP9kgstOqEU4aG5ze6
6Mwt0RfMChpd36+/di6H/YsmMAgd16WMa7dF9diW8WRgKm4q29PTiowbNpX8vy6q
0nGwjKLTADUUwxHaTxHz5OobKENE61kF+nhYdPGgnHXblFqn5XmmniffEMG60Hdu
LDP7/Cd5X0ZQoCzQjE86WW9Fl7F7XQs6czgeoVQ+I+rUlMl96kBt8IBOiupVfPKr
ATE5bsyrFG0qyPFqSWvAx3CyP2x7sRRZ6J0OaUtD6KmKLZUppKwM5DvWKUM96d+K
c+1lVHJbPvO1MuJl4BkfQQuhHNySaWluXyxMw1p7zHRrKQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:28:53 2026 by rpki-client