Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
File: 8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa (raw, json)
Hash identifier: JbWwKxRmo0O8b0pFxyKUGW9lVMJ1HmKZkU9DXUERsUI=
Subject key identifier: 8D:32:0F:3A:D8:C0:70:C3:DA:D4:DA:D1:DB:BF:21:69:11:5A:6C:D0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1563CC0890CDC09F35A289FD86A2A3CA634CD786
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
Signing time: Mon 27 Jul 2026 03:20:30 +0000
ROA not before: Mon 27 Jul 2026 03:20:30 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:63:cc:08:90:cd:c0:9f:35:a2:89:fd:86:a2:a3:ca:63:4c:d7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:30 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=a59c32730ab66251ed216c027f5a380d4d2c42153b8238b848bc59ca6f55774d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:ac:46:0f:0a:6c:c3:dd:0c:ed:dc:d8:10:
5b:aa:64:70:b7:99:43:12:0e:c9:06:b1:29:f0:c3:
6a:45:66:f8:15:d4:a1:16:f5:c7:21:71:fc:4e:fd:
a3:68:eb:b0:0a:27:63:bd:49:f8:78:e4:cb:ee:5c:
7f:da:9d:93:03:5e:9e:dd:55:59:1e:a7:82:44:43:
46:66:bd:c2:af:b0:d6:ab:8c:4b:7a:cf:17:1e:69:
87:2f:4f:70:e7:36:3b:1a:81:04:b1:e7:b0:fe:fd:
9c:6f:57:c9:39:d0:2d:81:4b:05:fa:59:fd:e3:a1:
16:48:99:c6:d1:9f:cc:43:18:f4:11:7f:98:6f:7e:
5b:27:e3:a2:7c:0c:c3:01:cf:d3:08:ab:1e:1d:de:
4b:11:72:b4:63:b2:8d:0b:d3:f5:5c:91:31:3b:79:
46:cc:19:9b:eb:d3:c9:30:c2:d3:fd:b0:ab:58:99:
82:9e:ce:24:04:10:ba:0e:d1:e9:d5:22:4c:77:d5:
b1:7a:14:96:c9:fe:09:a3:e4:a4:95:80:60:53:7d:
c1:0f:5b:5e:7b:69:e7:42:a6:3d:41:c5:e3:ce:46:
11:d3:06:54:6f:19:af:6b:b4:51:5a:f9:27:97:f9:
17:c0:05:72:bd:c1:be:ad:7b:f2:81:83:dc:a7:2b:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:32:0F:3A:D8:C0:70:C3:DA:D4:DA:D1:DB:BF:21:69:11:5A:6C:D0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.192.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:8b:65:8c:d4:ba:34:18:70:84:ff:b9:3b:77:37:66:67:6e:
94:4a:f0:57:ea:17:70:3e:d7:92:16:5b:3d:40:b1:0e:ae:84:
6f:d5:13:9a:95:de:e9:e4:99:21:65:bd:67:f4:46:ee:26:80:
b2:d4:10:7e:2d:a2:d5:e6:aa:84:3c:af:7d:3d:04:c4:04:e1:
43:fa:aa:7b:0f:e6:7a:35:c5:0a:4d:d2:82:1f:16:a1:c8:ae:
0f:2f:cd:6f:69:d4:55:ee:06:6a:86:1c:25:8c:2d:29:41:a3:
22:ba:47:d3:1e:cb:a4:50:eb:b3:0a:f9:71:db:c0:41:38:d7:
0c:b2:97:8e:d2:e5:6a:32:d8:c4:27:44:53:2c:57:1e:95:25:
f9:a6:3f:14:7e:31:b1:f8:7c:f5:50:f5:0e:80:5a:d5:28:11:
81:df:69:c5:da:d0:46:35:0a:a7:a4:e3:71:5f:b3:48:59:9d:
ea:0d:62:3d:b8:0e:a6:eb:a3:8a:37:25:65:8b:2a:f8:69:e2:
63:08:d3:04:2d:29:c7:6d:98:81:57:85:b7:91:7e:ef:ce:ad:
5a:37:41:e5:d9:0d:8c:3c:ac:e3:00:11:69:a1:93:54:b7:99:
17:67:39:48:cf:bf:2e:dd:1b:e1:4e:ed:56:41:e1:af:e4:84:
6c:4d:6f:17
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUFWPMCJDNwJ81oon9hqKjymNM14YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjcwMzIwMzBaFw0yNjEwMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGE1OWMzMjczMGFiNjYyNTFlZDIxNmMwMjdmNWEzODBkNGQyYzQyMTUzYjgy
MzhiODQ4YmM1OWNhNmY1NTc3NGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALdprEYPCmzD3Qzt3NgQW6pkcLeZQxIOyQaxKfDDakVm+BXUoRb1xyFx/E79
o2jrsAonY71J+Hjky+5cf9qdkwNent1VWR6ngkRDRma9wq+w1quMS3rPFx5phy9P
cOc2OxqBBLHnsP79nG9XyTnQLYFLBfpZ/eOhFkiZxtGfzEMY9BF/mG9+WyfjonwM
wwHP0wirHh3eSxFytGOyjQvT9VyRMTt5RswZm+vTyTDC0/2wq1iZgp7OJAQQug7R
6dUiTHfVsXoUlsn+CaPkpJWAYFN9wQ9bXntp50KmPUHF485GEdMGVG8Zr2u0UVr5
J5f5F8AFcr3Bvq178oGD3Kcr47ECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSNMg86
2MBww9rU2tHbvyFpEVps0DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGFiOTMwODMtMDBmNy00ODQxLThjZWYtNmI1OTI2YjZlM2Y2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC4zwDAN
BgkqhkiG9w0BAQsFAAOCAQEAoYtljNS6NBhwhP+5O3c3ZmdulErwV+oXcD7XkhZb
PUCxDq6Eb9UTmpXe6eSZIWW9Z/RG7iaAstQQfi2i1eaqhDyvfT0ExAThQ/qqew/m
ejXFCk3Sgh8WociuDy/Nb2nUVe4GaoYcJYwtKUGjIrpH0x7LpFDrswr5cdvAQTjX
DLKXjtLlajLYxCdEUyxXHpUl+aY/FH4xsfh89VD1DoBa1SgRgd9pxdrQRjUKp6Tj
cV+zSFmd6g1iPbgOpuujijclZYsq+GniYwjTBC0px22YgVeFt5F+786tWjdB5dkN
jDys4wARaaGTVLeZF2c5SM+/Lt0b4U7tVkHhr+SEbE1vFw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:59:23 2026 by rpki-client