Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/842bd74b-e507-47ea-bb4e-32057136b2bd.roa
File: 842bd74b-e507-47ea-bb4e-32057136b2bd.roa (raw, json)
Hash identifier: r2TaqV6M/oHBbFfkbpM4L4eyer90D+57wD1CeOzLtiE=
Subject key identifier: E8:4D:FE:E3:DA:ED:49:A3:B5:DA:34:24:CB:06:10:59:A4:A1:51:84
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7542B570245F12B85C775CB14ADDF47675DEA19E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/842bd74b-e507-47ea-bb4e-32057136b2bd.roa
Signing time: Mon 27 Jul 2026 03:21:01 +0000
ROA not before: Mon 27 Jul 2026 03:21:01 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:42:b5:70:24:5f:12:b8:5c:77:5c:b1:4a:dd:f4:76:75:de:a1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:21:01 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=21e56431e08dbdc7998ab03851fb3e2a8e6cefbd061a1dd7959f968dcc1abe17, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:d1:45:2e:ec:db:fb:13:34:17:df:27:9c:
3d:2f:f8:ef:4f:37:c3:0a:9c:cf:4c:9a:f6:91:55:
66:0d:94:d0:e3:54:d1:8b:dd:34:c9:d9:4d:7a:c3:
18:7e:bf:66:46:e7:b0:01:95:bb:f6:b9:69:40:c0:
5d:2c:a2:f4:32:36:e4:20:8d:7a:09:ee:f2:fe:41:
76:f4:88:01:b9:7d:07:62:ed:f0:5b:ef:47:ef:65:
57:2c:82:a3:51:14:bd:ad:56:c2:75:90:60:35:73:
57:2a:ee:9c:7e:7e:e0:80:e7:76:70:bf:11:4c:f7:
b6:3d:b1:40:fc:c5:8e:9f:65:0d:c7:1e:fb:f9:33:
39:40:e8:e0:b1:f3:a9:77:8c:cc:22:0c:f9:33:c7:
57:86:2d:c1:07:3e:35:30:30:62:78:06:eb:10:66:
8d:a5:63:96:57:5b:21:50:b5:05:c4:6e:cf:18:1e:
4d:82:f1:8a:e4:1c:de:06:2e:1e:f6:21:79:1f:a1:
68:47:ce:6c:06:f5:7e:3c:25:53:c6:b1:aa:bc:98:
2a:99:51:6b:3b:a9:66:d7:ca:11:77:75:19:8b:0c:
e8:75:4e:e0:1f:ec:01:fb:7d:d5:f0:ef:a5:91:c0:
4f:73:0d:99:5c:78:de:d1:85:29:f5:48:9a:67:11:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4D:FE:E3:DA:ED:49:A3:B5:DA:34:24:CB:06:10:59:A4:A1:51:84
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/842bd74b-e507-47ea-bb4e-32057136b2bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.0.0/18
Signature Algorithm: sha256WithRSAEncryption
a2:29:61:db:a4:ef:cd:60:3f:85:b2:44:4d:08:da:85:da:49:
aa:95:fb:ab:2a:47:05:e0:13:a0:c8:f5:bd:f4:59:3d:bc:86:
9c:a8:cc:b4:86:82:7f:b5:5e:97:da:fe:c0:34:08:27:8a:56:
47:28:7d:cf:13:61:c5:69:c9:d8:01:a5:06:fd:92:81:ab:54:
82:4d:5c:c5:6e:55:34:cf:cd:88:f2:19:f3:ab:c0:89:a3:73:
20:ea:23:73:af:e9:f4:c5:d7:ce:3a:9b:58:0c:46:19:fb:0e:
a5:ef:13:03:1f:c7:d4:ab:1c:07:c7:53:dd:05:55:e1:fa:ad:
77:13:c4:64:9a:3e:4c:04:79:e9:f4:53:04:2f:f3:28:e3:5f:
80:24:ca:3e:62:89:94:fb:53:f7:71:c4:25:ce:a6:a9:4b:b3:
9a:2e:ae:3d:d2:99:5b:69:74:d7:a3:1b:cb:55:e9:b5:22:51:
1d:a2:ed:9c:b3:cb:98:59:a5:36:e2:b4:0e:fd:a3:75:c1:b4:
be:15:90:4a:34:bf:25:6f:67:fd:93:b8:e9:bb:82:bc:50:d2:
43:f1:d5:4d:4b:ce:da:4f:b1:a3:d5:53:ae:21:ab:07:b8:41:
27:94:02:bc:9e:60:32:ab:4e:ca:47:d1:cf:73:33:e6:c5:9b:
4b:3b:f0:69
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUdUK1cCRfErhcd1yxSt30dnXeoZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjcwMzIxMDFaFw0yNjEwMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDIxZTU2NDMxZTA4ZGJkYzc5OThhYjAzODUxZmIzZTJhOGU2Y2VmYmQwNjFh
MWRkNzk1OWY5NjhkY2MxYWJlMTcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK1o0UUu7Nv7EzQX3yecPS/47083wwqcz0ya9pFVZg2U0ONU0YvdNMnZTXrD
GH6/ZkbnsAGVu/a5aUDAXSyi9DI25CCNegnu8v5BdvSIAbl9B2Lt8FvvR+9lVyyC
o1EUva1WwnWQYDVzVyrunH5+4IDndnC/EUz3tj2xQPzFjp9lDcce+/kzOUDo4LHz
qXeMzCIM+TPHV4YtwQc+NTAwYngG6xBmjaVjlldbIVC1BcRuzxgeTYLxiuQc3gYu
HvYheR+haEfObAb1fjwlU8axqryYKplRazupZtfKEXd1GYsM6HVO4B/sAft91fDv
pZHAT3MNmVx43tGFKfVImmcRXwUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBToTf7j
2u1Jo7XaNCTLBhBZpKFRhDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODQyYmQ3NGItZTUwNy00N2VhLWJiNGUtMzIwNTcxMzZiMmJkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBi6JADAN
BgkqhkiG9w0BAQsFAAOCAQEAoilh26TvzWA/hbJETQjahdpJqpX7qypHBeAToMj1
vfRZPbyGnKjMtIaCf7Vel9r+wDQIJ4pWRyh9zxNhxWnJ2AGlBv2SgatUgk1cxW5V
NM/NiPIZ86vAiaNzIOojc6/p9MXXzjqbWAxGGfsOpe8TAx/H1KscB8dT3QVV4fqt
dxPEZJo+TAR56fRTBC/zKONfgCTKPmKJlPtT93HEJc6mqUuzmi6uPdKZW2l016Mb
y1XptSJRHaLtnLPLmFmlNuK0Dv2jdcG0vhWQSjS/JW9n/ZO46buCvFDSQ/HVTUvO
2k+xo9VTriGrB7hBJ5QCvJ5gMqtOykfRz3Mz5sWbSzvwaQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:26:49 2026 by rpki-client