Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b1697edb-eb6c-486d-a5cc-c22724b14f96.roa
File: b1697edb-eb6c-486d-a5cc-c22724b14f96.roa (raw, json)
Hash identifier: 9c6Y0zjsyoJHL7OQRVEGD5eJB34IPJwbzvO/H7qb0+I=
Subject key identifier: 7B:A4:9C:93:91:5C:0F:7F:69:B7:4B:5C:88:30:DD:4C:89:41:C7:AB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 77DC14C9BAEB855E4FD8597E0F9A761BEB90AC82
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b1697edb-eb6c-486d-a5cc-c22724b14f96.roa
Signing time: Mon 27 Jul 2026 03:20:10 +0000
ROA not before: Mon 27 Jul 2026 03:20:10 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:dc:14:c9:ba:eb:85:5e:4f:d8:59:7e:0f:9a:76:1b:eb:90:ac:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:10 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=269f37046356cb6f1eaaa305712f204eb125893c665b2737cd88fdb3003b3a7b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:15:32:aa:72:2f:81:bb:c8:12:e3:eb:fb:05:
3d:13:37:cf:20:01:65:cf:ea:dd:55:ee:7a:d3:15:
6d:e3:90:33:83:16:04:39:05:b4:b1:58:a7:a6:84:
1b:27:67:e1:80:94:2f:5c:49:72:54:48:02:79:97:
92:6c:b2:37:35:0b:4b:40:2d:c9:24:d2:24:31:5b:
59:f1:20:ec:c5:8d:32:89:81:a9:7e:1f:41:23:96:
cb:c6:85:e4:6a:d7:27:12:6b:d1:5f:6b:46:aa:dc:
66:66:9b:ee:7d:cf:dd:a1:1f:64:ae:47:84:ef:bc:
19:8f:07:5d:00:c1:b6:72:50:5d:c0:6d:f2:71:d9:
90:23:3c:9d:ff:33:36:5d:5b:72:0c:54:ef:a0:7c:
db:c8:87:df:b2:f1:de:0d:d0:06:be:ab:0b:4d:fc:
0b:76:da:17:79:a9:a0:bd:77:67:70:e5:86:ae:f9:
66:23:40:b6:63:ec:c7:b3:58:6d:f7:4c:2e:a6:df:
b0:9e:84:42:4b:30:8c:77:4b:fd:47:94:9b:a5:77:
8a:4f:32:81:be:54:63:c6:80:95:d4:08:1b:12:eb:
a6:96:ab:ef:87:1d:e7:c8:c9:18:a4:53:72:99:16:
94:f0:67:04:51:d7:76:d7:d1:c0:4c:0d:b7:fd:f9:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A4:9C:93:91:5C:0F:7F:69:B7:4B:5C:88:30:DD:4C:89:41:C7:AB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b1697edb-eb6c-486d-a5cc-c22724b14f96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.170.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1e:36:63:88:c7:61:a8:67:20:79:e9:13:7f:dc:67:8f:f1:
e8:23:a5:1c:40:3c:a8:06:65:f2:67:91:40:37:e3:91:e7:88:
37:fc:ec:de:87:c8:5a:6d:67:25:e2:c1:c6:a5:87:39:af:11:
e7:24:ec:bf:90:2d:fd:dc:0d:1b:73:03:cc:ce:85:66:d1:3f:
b2:38:7e:2d:82:41:83:d3:a0:da:00:b8:19:44:5a:59:80:64:
80:cc:fd:3d:d0:6d:22:23:cb:b5:9c:ac:3f:96:c7:64:43:1f:
b5:07:66:8e:68:0c:57:bf:58:28:fd:f5:8c:87:9f:d7:92:99:
90:19:d4:1d:67:ab:5a:f5:9d:5b:2b:ff:b4:c7:c4:cb:21:53:
be:a2:f0:42:20:85:1c:ad:f8:72:e3:39:07:82:eb:a9:2c:6f:
d6:93:0a:5f:5f:19:b5:cb:8a:ed:23:8a:a0:c4:c8:c8:8b:15:
07:37:e6:f8:5d:a7:8e:b5:ce:a9:98:c4:21:58:69:4e:e6:ee:
45:d0:45:8a:24:36:3c:93:d6:20:1d:6e:b8:f7:bb:25:fb:9c:
6e:c8:4f:ec:67:30:a7:9f:44:04:69:c9:6a:2b:fa:8e:b3:0c:
70:22:d8:64:af:5e:0e:95:e1:bb:2e:31:c0:a3:c6:31:d4:2d:
96:77:7e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:27:50 2026 by rpki-client