Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c3be55c-de0f-4901-938e-229a296fa31f.roa
File: 9c3be55c-de0f-4901-938e-229a296fa31f.roa (raw, json)
Hash identifier: awt+TBW9omXlv/e/7gjrleSSA48GtoKcpoV9nRb+aKE=
Subject key identifier: 8C:C9:BC:B7:07:CB:A6:EA:C9:3E:86:42:03:AB:1F:32:78:42:85:C2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 04F47425DEFFE94DB0AB532D468B2317A4815C47
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c3be55c-de0f-4901-938e-229a296fa31f.roa
Signing time: Mon 27 Jul 2026 03:20:13 +0000
ROA not before: Mon 27 Jul 2026 03:20:13 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:f4:74:25:de:ff:e9:4d:b0:ab:53:2d:46:8b:23:17:a4:81:5c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:13 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=08ae51cd1a698597608cd8df517fbc0792db89abd601c05e3921a1159f96d4d4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:74:22:76:44:18:94:43:6a:05:b1:f3:3d:
a6:41:37:73:2e:2b:06:1f:96:48:f0:e2:29:fe:87:
18:e1:28:89:8c:17:a1:f6:ff:69:46:bc:60:2a:b6:
e1:b8:1e:63:62:0c:40:96:8a:97:6e:c8:1f:04:36:
af:de:0f:71:6b:d2:58:74:e6:c5:0b:fe:d2:88:2d:
6f:78:ca:f8:50:09:e8:59:7e:8d:bf:00:a0:17:0d:
c6:3b:68:2b:71:05:d6:7e:44:86:6c:7b:b6:da:29:
30:41:7a:76:c2:54:89:44:fb:29:8d:f6:c6:68:d7:
62:20:db:7b:a3:2e:c9:a7:97:f9:b3:85:cf:9e:71:
59:f5:e8:14:55:b0:aa:fa:cd:8e:4f:b6:1d:d8:5b:
bc:f7:69:88:81:74:59:fb:b4:57:bf:ac:de:48:0d:
74:35:7e:9d:8f:b3:bf:8e:6c:26:18:74:92:d9:22:
b2:dc:c5:f7:c5:e0:54:2f:52:83:54:76:02:89:1f:
36:ff:3a:8a:bf:66:fe:79:6a:f2:2c:36:05:3c:55:
64:1d:85:70:0f:8d:86:12:a0:12:f4:45:d1:32:f3:
8d:99:6d:e4:06:91:27:de:3f:4b:2e:72:31:34:bc:
72:29:05:a6:6b:5e:d9:e0:5e:dd:4d:50:e7:45:7c:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C9:BC:B7:07:CB:A6:EA:C9:3E:86:42:03:AB:1F:32:78:42:85:C2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c3be55c-de0f-4901-938e-229a296fa31f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.168.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:cb:c8:58:e4:15:53:a0:4b:a9:c0:f4:3a:0b:3e:cb:07:9a:
05:0c:16:84:43:1f:16:28:f2:b6:50:c6:63:f9:d5:83:cb:d4:
18:e8:cf:18:8b:73:0d:49:12:e6:4c:de:b5:6d:16:7c:02:32:
9f:0b:f7:90:91:db:ff:eb:0d:27:05:e9:a1:56:34:cd:62:ac:
d8:35:34:2a:2e:00:32:17:2b:90:1f:50:f5:20:d4:f9:6d:e5:
04:cb:aa:04:67:7a:db:9a:3b:be:76:de:1d:5d:59:62:e8:51:
81:8a:e1:c8:f1:6f:87:79:7d:f7:42:8e:e9:d7:dd:39:8e:ed:
60:2e:36:1d:48:da:3a:b0:dd:d8:86:fa:0b:51:15:d7:be:15:
7c:69:ad:14:24:94:70:73:19:b2:87:2c:c0:18:30:c8:62:69:
83:b7:40:fc:50:0e:57:e2:4c:c7:c3:f7:29:72:09:42:94:e8:
b8:bd:2d:27:8a:e6:5c:b4:24:e0:dc:08:b5:9e:29:e7:d0:17:
04:d5:1c:ef:9c:1c:22:29:4c:11:d1:13:b3:7e:85:a2:c7:c1:
05:d9:f9:f6:7c:6e:ac:e9:47:0f:84:ce:07:bb:39:d1:e2:a4:
71:70:26:20:b4:a2:54:66:8a:16:b4:93:6c:2d:1f:49:51:d6:
e9:26:06:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:28:42 2026 by rpki-client