Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa
File: 7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa (raw, json)
Hash identifier: 8crrPLiiitrs5YtmlHiFg8oyROLDWZPy4yC9sgRQ4rg=
Subject key identifier: 81:A4:2E:A8:81:F2:99:E8:77:84:33:AD:2C:7F:E8:25:34:E2:0C:76
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E1CC5FE9677502465647F0E87CE239E1C938723
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa
Signing time: Mon 27 Jul 2026 03:20:27 +0000
ROA not before: Mon 27 Jul 2026 03:20:27 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:1c:c5:fe:96:77:50:24:65:64:7f:0e:87:ce:23:9e:1c:93:87:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:27 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=c5eccd525a5623eb115c09733126950c1ac043354cecf063761fc8295ba434ff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1f:7f:c6:08:56:34:ec:e3:fe:07:0d:18:85:
5f:45:9f:3b:91:4f:66:96:db:7c:c9:a1:e3:f9:a5:
be:11:b9:b2:10:6c:b7:1c:c1:c4:86:5a:d7:cd:66:
db:51:b3:49:2c:df:79:ff:b4:40:13:77:bb:02:f9:
4d:14:54:70:da:a2:16:ab:27:df:ba:3d:63:2c:d7:
0c:a8:af:42:a4:23:67:65:70:ec:1f:79:65:c3:c5:
57:77:75:b0:89:34:33:01:77:01:8d:e3:0d:fd:cf:
35:2c:ef:18:07:90:ea:e2:ee:6f:4a:3e:86:ea:55:
ef:59:02:52:18:69:57:07:80:5a:ac:97:0e:15:f1:
6d:05:c0:fc:e2:b5:02:43:84:03:f3:e5:2f:c3:51:
49:ee:23:6f:1f:df:14:3d:31:e9:39:44:a2:fa:84:
ef:dc:94:66:84:66:7d:04:85:46:14:4a:a5:3c:5a:
f4:80:a9:99:b2:3d:0d:53:d9:b7:aa:d6:3f:ee:d6:
7b:67:9c:74:57:a2:b5:c6:0d:d5:0d:7b:e8:68:6c:
e2:b3:8f:6b:21:90:4e:e5:04:f7:ab:77:9a:f2:8d:
bb:79:2c:b5:19:d6:43:d0:60:cc:3c:86:2f:0d:14:
50:2b:3a:f1:13:e4:43:c0:fd:af:79:ed:e6:7f:5d:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A4:2E:A8:81:F2:99:E8:77:84:33:AD:2C:7F:E8:25:34:E2:0C:76
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/18
Signature Algorithm: sha256WithRSAEncryption
77:90:22:13:cf:ce:45:89:cc:e3:e9:c7:44:0e:46:44:e2:95:
0b:04:ef:ec:d4:06:9c:55:34:10:97:bf:ed:f1:98:ee:58:56:
f7:2e:41:ac:fb:cc:ce:5e:f4:14:e7:9f:45:a4:69:e5:10:62:
78:17:58:ae:7a:37:21:90:9c:ab:56:e5:67:fb:cb:10:7f:cd:
df:7e:cd:9c:dc:95:4f:1d:2e:b1:e0:3a:5e:82:8e:41:28:8c:
42:b1:3e:35:f4:6a:ac:2b:b6:ac:23:1d:ae:13:03:28:af:40:
00:1c:85:45:91:07:0c:a8:32:d1:8a:6e:13:be:c6:a3:8d:61:
56:74:6b:94:4b:3d:36:54:74:80:20:6b:4a:48:8d:94:14:53:
eb:86:50:c5:ba:cf:45:29:4b:e1:94:05:6e:ed:c5:ed:d7:ab:
10:2d:bf:91:46:eb:fd:36:28:6d:39:ff:10:81:90:6a:a0:f7:
3e:7e:94:c6:9c:d9:36:6c:08:14:a2:f9:ea:79:da:39:2e:49:
57:ee:05:96:d4:e6:59:3c:27:eb:61:e9:44:0d:50:34:c9:ab:
5e:fa:3d:1b:5f:ab:5d:17:c5:d2:c5:30:52:24:a9:ac:6f:65:
71:00:be:0f:95:96:75:5a:9a:e5:9d:4b:44:67:98:7b:fe:94:
8c:b4:b9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:28:10 2026 by rpki-client