Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9834a12a-a5d9-4caa-ae09-b1e3323596bd.roa
File: 9834a12a-a5d9-4caa-ae09-b1e3323596bd.roa (raw, json)
Hash identifier: aJryvcU3dMjOsn4DzRWyL1m3hKmLQb6zO+gPOWrGtDM=
Subject key identifier: 50:68:AA:4F:A4:D3:9A:20:A3:E4:44:80:1F:38:62:8D:91:A8:91:4E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5B46183BE39E12D83A6F957BB7F233E308824F06
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9834a12a-a5d9-4caa-ae09-b1e3323596bd.roa
Signing time: Mon 27 Jul 2026 03:20:29 +0000
ROA not before: Mon 27 Jul 2026 03:20:29 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:46:18:3b:e3:9e:12:d8:3a:6f:95:7b:b7:f2:33:e3:08:82:4f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:29 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=65c0bbc22e729867b5b1c22f365ec70ec7f82e14418e6289cc2d2c3bbb9bb704, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:38:e8:b0:d1:21:a6:bf:88:a9:e7:b8:11:
9d:46:d1:58:0e:f9:2c:3d:cc:62:81:37:0a:1e:76:
49:38:99:67:a3:38:ac:91:0a:45:5e:e4:4f:09:44:
11:13:14:84:0a:4d:60:9a:90:e2:f8:61:c4:ed:6a:
29:c9:a8:56:89:a0:84:2b:bb:52:38:f9:73:63:84:
62:cc:2f:89:14:94:40:c4:6f:15:30:34:f2:90:16:
46:29:a1:24:4d:fa:d5:69:c0:34:82:50:53:42:81:
d0:a5:f3:d2:a8:c6:ea:0c:d3:88:ee:47:1d:62:3b:
53:01:54:78:d3:e4:1b:db:d5:41:48:c3:5f:98:37:
f7:e0:f4:74:b4:ef:c8:42:48:c4:28:45:9a:0f:d0:
b6:ce:34:91:17:d2:8e:5b:cc:3b:75:4a:83:4c:26:
05:c7:53:0e:34:2b:ba:33:80:a5:4c:96:04:dc:0b:
61:f2:b8:3b:d2:82:22:01:18:df:08:77:4a:f4:30:
2e:5f:a4:b3:cc:cc:50:b9:f7:29:6d:82:a3:08:aa:
db:2d:1c:73:77:f9:da:e9:a9:03:f1:71:70:2b:25:
39:a3:e7:c1:21:83:73:2f:42:70:25:30:c4:9a:0a:
1f:19:ca:b5:04:92:9d:42:d6:33:ec:46:e6:6c:fe:
8f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:68:AA:4F:A4:D3:9A:20:A3:E4:44:80:1F:38:62:8D:91:A8:91:4E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9834a12a-a5d9-4caa-ae09-b1e3323596bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.192.0/21
Signature Algorithm: sha256WithRSAEncryption
17:f7:d3:ad:8f:33:0a:95:02:0b:f6:c8:1b:99:89:c5:8d:ed:
74:62:52:13:17:43:e2:47:15:f7:d8:61:07:b7:40:e1:c4:c8:
7c:e1:6d:1b:b3:b5:98:a6:00:66:11:8f:73:58:fb:aa:dd:57:
90:c0:79:b2:ac:64:12:fd:df:d2:d1:bd:d2:ff:72:3a:4e:b4:
23:b9:45:1d:07:53:4a:35:cf:fc:17:f3:e5:14:cc:db:08:4e:
be:20:df:42:a3:73:b3:9e:ee:4e:a7:d8:83:3b:33:32:8e:1d:
51:36:76:5e:22:53:89:54:3e:ee:ce:54:00:5e:78:a0:2e:db:
6d:d8:c5:d3:52:0c:98:9e:49:c5:e1:72:6c:c2:33:93:fa:63:
d8:bd:f8:0d:40:2e:14:79:38:79:1f:f7:09:e7:f2:4a:b9:0e:
57:bf:6e:71:07:e6:9a:79:45:5a:2c:2b:bf:08:b0:e3:72:49:
19:01:dc:02:68:4b:43:2d:29:2d:7c:89:04:42:36:31:99:fb:
c3:90:b8:0c:40:7b:1e:32:df:72:cd:09:79:ed:3e:73:21:79:
73:a1:d6:fa:f4:27:d4:5a:bc:6d:1b:1c:49:22:e2:e5:bd:c0:
9b:15:75:b5:ea:f6:8b:10:b8:bd:a3:90:36:fa:2d:d0:d2:dc:
31:9b:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:27:25 2026 by rpki-client