Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9e85174-2ffd-4b93-8357-1e2ba85449d2.roa
File: b9e85174-2ffd-4b93-8357-1e2ba85449d2.roa (raw, json)
Hash identifier: qnd3+49qQQgQ8b7wc/084HsNxxvGnbw5jTnEywAyWOQ=
Subject key identifier: FA:0E:03:2D:D2:EA:E9:4E:97:8E:7E:A7:73:E0:EE:E1:D0:9F:C3:68
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 68361901EAE902029865A3E0CCBE0C9EA10C5A96
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9e85174-2ffd-4b93-8357-1e2ba85449d2.roa
Signing time: Mon 27 Jul 2026 03:20:59 +0000
ROA not before: Mon 27 Jul 2026 03:20:59 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:36:19:01:ea:e9:02:02:98:65:a3:e0:cc:be:0c:9e:a1:0c:5a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:59 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=23ea549ed4ba1ca6306b57112904dd367b27d88152fbd15427d9f854bbe2683a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:80:c8:97:83:7f:c6:87:f1:d6:9b:71:9a:
90:49:f6:1a:da:3b:90:29:ab:63:5c:5a:fa:15:92:
06:56:3d:61:ff:16:24:f3:73:9d:fd:22:15:6b:15:
33:8c:da:b5:a7:19:f1:c5:8e:c3:2d:f8:3e:48:55:
05:d3:76:b5:79:72:b0:f6:30:9f:26:c2:de:97:2e:
a8:f0:c7:da:7d:4e:e9:69:85:c5:fe:06:5f:da:89:
0c:3a:66:52:12:5a:6f:d8:30:38:28:c9:b5:59:4d:
2d:83:08:79:34:50:09:b9:94:18:f7:83:7e:6b:c2:
c3:31:19:27:98:cc:4b:c0:89:b8:0e:82:ec:a6:3c:
c5:5d:5d:c2:7c:11:18:04:95:91:71:c4:e9:fa:a3:
aa:a1:a6:01:0e:cc:d4:90:6c:ad:9c:98:9c:10:30:
42:49:53:19:41:94:ad:c1:c5:f7:97:d2:d5:2c:c8:
58:9f:e9:57:06:e3:28:bb:e8:15:d3:3a:9c:cc:44:
38:fe:e8:3d:bd:b8:e4:c6:cf:4d:0c:63:ff:4e:16:
2a:52:67:b7:8f:ff:09:3f:91:ad:3f:2a:0d:c3:26:
8c:34:11:07:39:51:e9:6b:db:0c:ae:d8:cb:5e:eb:
11:14:bf:f8:ce:bc:7b:f1:39:62:d9:f9:7e:08:9c:
1b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0E:03:2D:D2:EA:E9:4E:97:8E:7E:A7:73:E0:EE:E1:D0:9F:C3:68
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9e85174-2ffd-4b93-8357-1e2ba85449d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.156.0/22
Signature Algorithm: sha256WithRSAEncryption
47:64:5a:35:75:f6:a1:17:61:43:04:a6:c0:df:19:bf:c2:31:
ae:4d:a0:a4:8d:b8:1b:91:4f:f6:ab:71:fe:bc:ba:bd:1e:3f:
2d:d5:e5:55:74:64:99:09:b5:ce:9c:39:10:ec:22:87:db:1b:
e6:8c:33:30:f1:a1:7e:40:4f:08:6f:8f:b9:dd:dd:4d:63:28:
46:23:71:7b:0b:0c:d5:11:2d:f2:80:da:2e:35:c2:c8:b3:e5:
67:1a:b0:86:24:ce:30:57:14:3f:a6:8e:07:ba:36:a8:d3:c5:
90:fb:cb:4b:fb:f3:2f:2a:2d:c9:8b:be:0e:b6:f8:ab:54:3e:
79:df:f3:1b:a4:17:bc:9f:bd:89:ca:1f:e6:16:0b:db:cc:65:
a3:c7:36:99:15:d6:13:06:04:e9:de:c6:7b:f5:d7:18:fe:36:
52:42:b1:fc:7f:f4:57:af:1b:25:8b:01:1f:58:4d:f2:65:3a:
f3:41:7a:5e:9f:3d:d1:0c:50:b8:44:ec:e9:1d:79:45:62:dc:
d5:17:3f:d3:b3:e8:fb:52:01:a2:94:92:ad:c5:85:b4:bf:f5:
8f:ef:8d:99:19:bf:91:d1:f3:ce:d9:01:96:a9:48:6f:5b:bb:
8a:d0:48:e0:01:64:5b:b2:ef:a2:7e:7e:13:78:c0:05:ec:12:
24:e0:94:c3
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUaDYZAerpAgKYZaPgzL4MnqEMWpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjcwMzIwNTlaFw0yNjEwMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDIzZWE1NDllZDRiYTFjYTYzMDZiNTcxMTI5MDRkZDM2N2IyN2Q4ODE1MmZi
ZDE1NDI3ZDlmODU0YmJlMjY4M2ExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM49gMiXg3/Gh/HWm3GakEn2Gto7kCmrY1xa+hWSBlY9Yf8WJPNznf0iFWsV
M4zatacZ8cWOwy34PkhVBdN2tXlysPYwnybC3pcuqPDH2n1O6WmFxf4GX9qJDDpm
UhJab9gwOCjJtVlNLYMIeTRQCbmUGPeDfmvCwzEZJ5jMS8CJuA6C7KY8xV1dwnwR
GASVkXHE6fqjqqGmAQ7M1JBsrZyYnBAwQklTGUGUrcHF95fS1SzIWJ/pVwbjKLvo
FdM6nMxEOP7oPb245MbPTQxj/04WKlJnt4//CT+RrT8qDcMmjDQRBzlR6WvbDK7Y
y17rERS/+M68e/E5Ytn5fgicG00CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBT6DgMt
0urpTpeOfqdz4O7h0J/DaDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjllODUxNzQtMmZmZC00YjkzLTgzNTctMWUyYmE4NTQ0OWQyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi6JnDAN
BgkqhkiG9w0BAQsFAAOCAQEAR2RaNXX2oRdhQwSmwN8Zv8Ixrk2gpI24G5FP9qtx
/ry6vR4/LdXlVXRkmQm1zpw5EOwih9sb5owzMPGhfkBPCG+Pud3dTWMoRiNxewsM
1REt8oDaLjXCyLPlZxqwhiTOMFcUP6aOB7o2qNPFkPvLS/vzLyotyYu+Drb4q1Q+
ed/zG6QXvJ+9icof5hYL28xlo8c2mRXWEwYE6d7Ge/XXGP42UkKx/H/0V68bJYsB
H1hN8mU680F6Xp890QxQuETs6R15RWLc1Rc/07Po+1IBopSSrcWFtL/1j++NmRm/
kdHzztkBlqlIb1u7itBI4AFkW7Lvon5+E3jABewSJOCUww==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:26:58 2026 by rpki-client