Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
File: bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa (raw, json)
Hash identifier: cRMw6X9+1kIH9a8bTH71V2jSpjETohH8ekMVuzWbQmA=
Subject key identifier: 3D:0A:C5:ED:29:AE:44:5C:6C:43:A0:A0:88:35:16:C6:3B:47:0E:54
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6AECE2525AFB93AFEF94B5D644D4C270C026B1D5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
Signing time: Mon 27 Jul 2026 03:30:09 +0000
ROA not before: Mon 27 Jul 2026 03:30:09 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:ec:e2:52:5a:fb:93:af:ef:94:b5:d6:44:d4:c2:70:c0:26:b1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:30:09 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=a19d9aa152e473332cec6036993a48b216e1c8a6efdac5d09baf5ebd41e45d09, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:ce:97:5f:be:d1:cb:35:97:db:0f:24:2b:
0a:f3:fe:13:44:3b:f8:f1:10:a2:84:0f:d9:6a:39:
9b:d4:4b:a2:8c:7f:e4:60:a8:60:41:83:46:49:2b:
41:46:78:4e:5f:13:6b:a5:55:1b:5d:84:98:89:be:
0e:32:3d:dc:ad:19:71:f7:f6:32:00:72:71:86:50:
2e:42:f7:8d:17:7a:f3:06:c1:85:65:e0:99:1e:f4:
b3:17:fe:c1:59:b0:2c:2a:67:24:8c:ad:c8:01:64:
36:5b:ab:b5:8d:93:d7:df:8b:c0:45:bf:88:bf:c4:
ab:f0:f9:74:94:15:4a:3c:b1:7d:1c:d0:e8:01:c7:
db:34:8a:fe:22:b7:d2:85:55:7a:c0:03:bd:b6:bf:
45:c4:57:9e:62:f7:87:38:0e:d6:46:0d:e3:47:d0:
0c:b4:1a:14:46:25:fc:de:e1:d4:c3:17:dd:8d:73:
c0:12:d2:a5:a0:29:f8:d2:58:a7:17:23:fe:5b:20:
02:af:03:78:c5:7b:95:f0:0f:75:89:3a:5b:01:27:
2b:4e:b1:b1:6f:30:32:e0:97:20:47:22:70:03:00:
e6:d0:21:c3:41:19:49:24:07:1f:26:5a:aa:e5:38:
87:3e:2a:3d:52:54:b7:89:d1:8e:40:bb:e5:89:ff:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0A:C5:ED:29:AE:44:5C:6C:43:A0:A0:88:35:16:C6:3B:47:0E:54
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.204.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:1f:8e:fd:9d:4d:5c:cc:85:e2:60:c7:7d:35:03:e1:fb:64:
b2:08:64:2c:76:3a:f0:70:df:5c:82:fc:6f:40:ec:ad:a2:e3:
dd:00:02:b9:83:6f:bf:29:98:65:05:6f:f5:b2:04:f9:d3:c8:
f3:ed:ee:b8:44:99:82:53:15:9a:9c:e0:80:11:dc:ca:f8:39:
9a:fc:23:c0:0d:7b:e4:56:c1:3e:13:e9:17:67:32:a4:05:6f:
b7:23:5e:e5:16:e1:73:4c:6b:04:d1:1e:d3:7c:02:74:78:04:
96:2e:8e:2c:75:96:79:72:c3:10:7b:08:80:49:62:da:46:70:
9d:f1:8d:ea:5e:a6:1a:89:8a:ca:f0:11:32:e0:c8:57:c1:a8:
e3:09:e9:3a:13:ce:c2:6e:5b:ad:b6:85:b5:8d:4a:47:ec:df:
03:9f:99:5a:40:b7:a0:95:03:9a:93:e4:34:db:1f:51:01:4d:
fd:9d:99:ed:17:23:5d:a7:cb:a1:ba:e6:3a:f8:7f:5a:b4:b2:
e5:e4:bc:a4:6d:bc:3d:ea:fc:fc:f3:68:18:5b:5f:1d:74:d2:
7a:7f:8a:61:58:9d:fb:61:15:0b:c2:d9:7b:1d:21:a2:44:f7:
2f:30:89:46:69:4c:ef:31:be:90:d0:58:63:64:07:e8:4a:6a:
68:f7:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:27:44 2026 by rpki-client