Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b6ea2c3-c25b-492c-9547-7c5ddb75d15f.roa
File: 9b6ea2c3-c25b-492c-9547-7c5ddb75d15f.roa (raw, json)
Hash identifier: 9PySQYFM+6hk77vE32CrGu0FmEYn36eX2ChmWA9Mp/g=
Subject key identifier: B0:D2:FE:CC:A7:DA:63:54:47:8C:45:7B:FC:82:5A:ED:5A:50:FD:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 622D8A9655F64E7C99E47437B56B41442EC1BAA2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b6ea2c3-c25b-492c-9547-7c5ddb75d15f.roa
Signing time: Mon 27 Jul 2026 03:20:41 +0000
ROA not before: Mon 27 Jul 2026 03:20:41 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:2d:8a:96:55:f6:4e:7c:99:e4:74:37:b5:6b:41:44:2e:c1:ba:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:41 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=83e383e425956ea2098ae56440fe8df3785e2000e12489bcbca6f806f5455c0f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:21:12:27:75:4f:57:51:3d:c3:bb:6b:eb:
bd:7d:25:d0:c7:a9:f7:90:d8:f6:2f:7f:6b:67:c2:
1d:f2:c2:c0:0f:98:87:5f:54:4e:ed:15:6c:ad:41:
fd:6a:8a:9d:82:09:07:84:bc:cb:ff:90:c4:06:3d:
a9:f8:c7:f2:37:d6:85:4b:f0:11:b2:67:a6:14:c6:
99:43:de:80:1d:e9:a6:89:4a:ef:ba:40:73:a8:a7:
e6:33:6f:c0:7f:d8:79:4e:84:34:83:86:95:32:ef:
e9:d0:22:ca:82:49:2f:57:43:5c:a8:f1:3b:c8:45:
85:09:1b:06:c5:31:ab:c4:1d:7d:30:33:7f:5f:7c:
3e:a1:f0:e3:02:7e:e1:5c:8b:eb:0c:9a:8d:be:03:
6c:d7:f0:6b:bd:76:ec:01:4b:93:01:7f:47:50:90:
a9:5f:f3:1a:45:0e:16:a6:1d:49:cb:5d:bf:ed:61:
55:59:ad:20:f7:b9:ae:54:62:c5:11:8d:24:cd:1c:
f2:2a:0e:67:0e:88:68:ec:05:d1:5b:98:67:5a:d6:
6a:03:ac:dc:02:ef:23:61:f6:a8:aa:8e:d6:0a:79:
58:ca:cb:b4:af:35:29:72:8d:1a:07:86:c6:50:02:
16:52:52:50:e2:53:51:f1:ee:48:fb:d0:42:bd:2b:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D2:FE:CC:A7:DA:63:54:47:8C:45:7B:FC:82:5A:ED:5A:50:FD:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b6ea2c3-c25b-492c-9547-7c5ddb75d15f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:d3:43:5a:d6:0e:48:2a:82:84:96:54:c9:08:40:ff:f6:6a:
70:c7:3d:2b:e6:dd:3c:37:8e:d6:b8:4a:a3:cb:b6:4c:2d:b7:
68:ee:0c:49:c8:a7:78:5b:b8:af:c1:b3:c4:80:d1:aa:da:5d:
6c:5a:fa:c9:46:e8:3c:2a:1c:11:57:31:bd:eb:13:3a:c6:40:
63:0b:68:d1:ee:67:b6:f1:80:c3:e4:c1:7a:58:61:ca:53:18:
a5:8c:18:c8:ef:81:d4:a4:69:d9:ee:f3:78:c2:81:b8:93:e1:
2c:8c:73:82:e7:e8:76:cd:ab:18:86:24:44:68:54:31:08:43:
f2:5a:f3:91:5d:b4:f3:b2:40:39:09:43:8e:08:c5:42:bf:5e:
2d:63:02:60:62:fc:ab:87:65:61:49:87:73:21:ee:8b:81:27:
20:b3:7b:32:e6:98:28:89:58:61:83:c5:e4:ff:2b:b2:79:77:
10:99:5b:1b:69:1c:c8:ee:74:02:30:d4:a5:25:b8:b7:90:bb:
02:e1:1f:7b:0a:3d:4f:a3:68:25:28:1d:af:2c:0a:b7:c7:1e:
b9:ad:5c:01:ef:ca:36:d6:fe:9c:13:61:60:b3:3f:85:fa:84:
2f:fd:ba:da:86:cf:99:44:cc:06:c7:86:f4:3c:f1:8c:b9:98:
d6:ac:b7:16
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUYi2KllX2TnyZ5HQ3tWtBRC7BuqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjcwMzIwNDFaFw0yNjEwMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDgzZTM4M2U0MjU5NTZlYTIwOThhZTU2NDQwZmU4ZGYzNzg1ZTIwMDBlMTI0
ODliY2JjYTZmODA2ZjU0NTVjMGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANAXIRIndU9XUT3Du2vrvX0l0Mep95DY9i9/a2fCHfLCwA+Yh19UTu0VbK1B
/WqKnYIJB4S8y/+QxAY9qfjH8jfWhUvwEbJnphTGmUPegB3ppolK77pAc6in5jNv
wH/YeU6ENIOGlTLv6dAiyoJJL1dDXKjxO8hFhQkbBsUxq8QdfTAzf198PqHw4wJ+
4VyL6wyajb4DbNfwa7127AFLkwF/R1CQqV/zGkUOFqYdSctdv+1hVVmtIPe5rlRi
xRGNJM0c8ioOZw6IaOwF0VuYZ1rWagOs3ALvI2H2qKqO1gp5WMrLtK81KXKNGgeG
xlACFlJSUOJTUfHuSPvQQr0rTWECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSw0v7M
p9pjVEeMRXv8glrtWlD9VzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWI2ZWEyYzMtYzI1Yi00OTJjLTk1NDctN2M1ZGRiNzVkMTVmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi6J2DAN
BgkqhkiG9w0BAQsFAAOCAQEAf9NDWtYOSCqChJZUyQhA//ZqcMc9K+bdPDeO1rhK
o8u2TC23aO4MScineFu4r8GzxIDRqtpdbFr6yUboPCocEVcxvesTOsZAYwto0e5n
tvGAw+TBelhhylMYpYwYyO+B1KRp2e7zeMKBuJPhLIxzgufods2rGIYkRGhUMQhD
8lrzkV2087JAOQlDjgjFQr9eLWMCYGL8q4dlYUmHcyHui4EnILN7MuaYKIlYYYPF
5P8rsnl3EJlbG2kcyO50AjDUpSW4t5C7AuEfewo9T6NoJSgdrywKt8ceua1cAe/K
Ntb+nBNhYLM/hfqEL/262obPmUTMBseG9DzxjLmY1qy3Fg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:59:15 2026 by rpki-client