Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad1fa1a4-44d6-4a4e-82c4-f32d315830db.roa
File: ad1fa1a4-44d6-4a4e-82c4-f32d315830db.roa (raw, json)
Hash identifier: Lzd+39y757yNw9zoZhD6zwhbdjaXcCNsNPZSFTebU+w=
Subject key identifier: 8B:E7:7A:73:9D:54:01:61:0B:B2:59:13:49:F4:25:27:6A:4B:F2:F7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 363273ADE50ECCD30C8242A99AB06DCF4172122A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad1fa1a4-44d6-4a4e-82c4-f32d315830db.roa
Signing time: Tue 17 Feb 2026 03:10:04 +0000
ROA not before: Tue 17 Feb 2026 03:10:04 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 46.51.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:32:73:ad:e5:0e:cc:d3:0c:82:42:a9:9a:b0:6d:cf:41:72:12:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 17 03:10:04 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=83baab1369d2c2e238bbd38b61532f72df33598bc14d9c22911ac071e2e71586, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:85:b6:7b:5e:2a:5c:fd:ac:c6:0b:03:ac:
2f:e8:e7:f5:03:88:a2:2a:66:31:1d:23:cc:3b:85:
17:62:2e:06:ea:32:9c:76:0b:76:8f:e3:df:da:4b:
40:a8:ec:71:25:c0:47:5a:ca:8f:f2:ae:f7:74:84:
10:87:e4:ed:86:a4:f4:4c:46:0a:b1:56:c6:8e:67:
33:4e:cc:6a:78:c9:dd:e4:70:98:dd:71:dd:e0:aa:
e6:52:28:96:51:c2:32:4e:6a:91:c2:e1:51:27:b4:
0b:f4:d8:bb:ab:b5:5d:c5:c6:a0:6f:5a:a8:b8:08:
0b:fd:c4:58:16:1f:59:43:1c:02:bd:d3:2c:cf:2d:
3b:3e:59:74:aa:01:af:8d:9b:b3:bc:3b:ec:61:40:
46:c5:33:e6:76:fd:11:53:cf:7c:a2:31:ce:61:b6:
90:89:4e:f8:46:e8:4e:88:b7:45:d8:93:b7:ec:15:
94:0c:28:4d:c9:8e:b9:d4:34:2f:07:d6:18:ac:21:
b3:81:2a:1b:d3:bd:4c:06:c0:e4:54:56:dc:78:4c:
28:07:cf:78:63:3c:b4:d8:99:cf:2d:18:b2:5c:ba:
44:46:db:eb:98:86:57:8d:31:b5:42:26:e6:a4:28:
0f:7c:8a:ef:7d:38:cb:9e:20:33:07:82:80:e2:96:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E7:7A:73:9D:54:01:61:0B:B2:59:13:49:F4:25:27:6A:4B:F2:F7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad1fa1a4-44d6-4a4e-82c4-f32d315830db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.208.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:cb:95:64:04:8f:38:54:19:4f:ff:8f:1e:6c:c5:27:3b:d2:
df:74:7f:ea:c0:f4:1d:78:2f:aa:88:9a:aa:f1:3a:29:50:cf:
c7:82:58:50:a8:76:ff:0c:71:ad:a5:72:ba:dc:41:74:fb:5d:
f4:e7:0e:7f:0c:c8:b7:a2:df:70:3d:f9:7a:77:16:f1:98:9e:
2a:2e:39:ed:1a:c4:d2:34:b1:53:be:ab:a7:5e:e7:8b:4b:55:
d3:b7:b5:7e:e2:ad:1c:27:4c:30:04:37:44:30:96:bd:db:6f:
09:e4:1e:e9:eb:56:4c:83:38:36:7b:ea:95:c0:ce:17:0b:f2:
29:1c:66:58:51:52:77:0a:dd:3b:2b:ae:24:a1:20:80:8b:0c:
01:65:ee:a3:90:de:36:cd:99:ad:f4:8b:02:ff:86:14:03:43:
07:79:c7:9d:f0:cc:ab:9b:2d:7c:5c:8e:51:62:20:94:b7:30:
45:85:c5:8b:20:d4:f7:54:42:21:83:bd:fd:50:a7:11:5e:c0:
03:5f:93:b9:57:d5:c0:73:09:2b:fb:65:1d:b8:ea:1e:47:2a:
9c:af:a1:db:2b:97:73:dc:22:8e:5c:2a:db:b8:9f:69:60:6e:
74:b2:03:be:3f:f1:79:39:93:ff:4b:40:37:4b:47:3f:74:8f:
52:57:c1:98
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUNjJzreUOzNMMgkKpmrBtz0FyEiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMTcwMzEwMDRaFw0yNjA1MTgyMzU5NTlaMHoxSTBHBgNV
BAUTQDgzYmFhYjEzNjlkMmMyZTIzOGJiZDM4YjYxNTMyZjcyZGYzMzU5OGJjMTRk
OWMyMjkxMWFjMDcxZTJlNzE1ODYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM1NhbZ7Xipc/azGCwOsL+jn9QOIoipmMR0jzDuFF2IuBuoynHYLdo/j39pL
QKjscSXAR1rKj/Ku93SEEIfk7Yak9ExGCrFWxo5nM07ManjJ3eRwmN1x3eCq5lIo
llHCMk5qkcLhUSe0C/TYu6u1XcXGoG9aqLgIC/3EWBYfWUMcAr3TLM8tOz5ZdKoB
r42bs7w77GFARsUz5nb9EVPPfKIxzmG2kIlO+EboToi3RdiTt+wVlAwoTcmOudQ0
LwfWGKwhs4EqG9O9TAbA5FRW3HhMKAfPeGM8tNiZzy0Ysly6REbb65iGV40xtUIm
5qQoD3yK7304y54gMweCgOKW1esCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSL53pz
nVQBYQuyWRNJ9CUnakvy9zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YWQxZmExYTQtNDRkNi00YTRlLTgyYzQtZjMyZDMxNTgzMGRiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi4z0DAN
BgkqhkiG9w0BAQsFAAOCAQEAi8uVZASPOFQZT/+PHmzFJzvS33R/6sD0HXgvqoia
qvE6KVDPx4JYUKh2/wxxraVyutxBdPtd9OcOfwzIt6LfcD35encW8ZieKi457RrE
0jSxU76rp17ni0tV07e1fuKtHCdMMAQ3RDCWvdtvCeQe6etWTIM4NnvqlcDOFwvy
KRxmWFFSdwrdOyuuJKEggIsMAWXuo5DeNs2ZrfSLAv+GFANDB3nHnfDMq5stfFyO
UWIglLcwRYXFiyDU91RCIYO9/VCnEV7AA1+TuVfVwHMJK/tlHbjqHkcqnK+h2yuX
c9wijlwq27ifaWBudLIDvj/xeTmT/0tAN0tHP3SPUlfBmA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:51:45 2026 by rpki-client