Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa
File: bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa (raw, json)
Hash identifier: qJXTX/SGe/8JNpH1x/ob1RvTGtI6XTMywkjV/eRRBFY=
Subject key identifier: 08:A6:20:38:3A:A6:75:55:B3:D6:52:88:19:2A:25:D5:3B:EA:49:A4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6177506BDD22B5C92382A31DD8462A0D1F473317
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa
Signing time: Mon 27 Jul 2026 03:20:54 +0000
ROA not before: Mon 27 Jul 2026 03:20:54 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:77:50:6b:dd:22:b5:c9:23:82:a3:1d:d8:46:2a:0d:1f:47:33:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:54 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=8b072062c16ac9396a12030323fdd264680bdf188ce3bcf5c2e48e5610b49ad9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:af:13:5e:2f:29:ae:a7:ea:5e:bf:07:d6:
56:2c:a4:46:d7:6e:51:cf:66:29:18:ed:ad:cd:8c:
77:80:f2:a0:7e:38:c1:19:91:fe:70:20:14:3b:93:
17:cc:8d:17:aa:4d:97:6b:b5:d6:05:9c:87:96:a5:
9e:44:c1:4a:1d:81:19:c3:1d:e2:c5:7a:69:f7:38:
ae:f5:df:fa:5a:0e:cf:ee:86:aa:c9:a6:d4:67:68:
8e:8d:33:f1:c7:99:a3:26:4a:23:ff:2e:ef:ed:85:
40:07:a1:e6:2e:93:14:9e:27:e8:7f:14:0b:a5:f3:
df:ad:81:df:44:ec:4b:ff:23:25:95:d4:c3:b2:e5:
10:70:c0:79:56:b2:d7:b6:1f:2b:60:ab:9e:a7:23:
3d:56:5a:e8:3e:6c:bd:d0:a0:96:25:67:d3:bd:8a:
18:45:21:4d:48:b4:1a:cd:bb:07:b9:79:ef:37:cd:
2f:6b:30:1b:57:e0:42:51:16:cb:f7:6e:1f:81:85:
d7:d2:2f:e8:ae:b0:47:06:af:61:c6:1a:d7:e9:4b:
ac:1f:68:54:ac:e2:86:52:e0:98:2a:68:9e:0c:66:
83:86:25:ab:f1:c4:26:d3:7e:a3:1c:01:d9:05:ec:
cd:d9:5f:68:b1:45:3c:11:88:a4:b1:d5:e1:c0:b9:
45:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A6:20:38:3A:A6:75:55:B3:D6:52:88:19:2A:25:D5:3B:EA:49:A4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:2d:e1:31:01:0d:a9:ca:6a:a8:73:7d:e1:d3:82:ae:b8:3a:
c2:05:af:08:77:b1:60:30:f4:e7:94:53:90:e9:12:19:c0:24:
20:d9:8e:51:d7:37:41:46:b4:6c:d2:c1:26:68:7b:f3:e0:bc:
60:50:d7:d2:7d:72:cf:33:35:e2:ff:40:1a:f2:5e:30:10:34:
6d:a0:5e:c0:0e:3b:c6:cd:da:7e:98:f0:5d:37:97:98:d3:78:
ad:12:4f:34:bb:10:22:12:77:32:b1:ac:91:cc:5f:83:f7:10:
fa:4e:13:59:91:80:f5:da:ba:02:52:b1:49:bd:ab:7a:9d:bb:
49:e4:f3:78:24:81:f0:c3:00:6a:f5:df:6d:22:2e:03:56:a9:
2d:b9:93:be:bb:4f:03:6b:bd:07:7a:25:ef:92:09:48:8e:2a:
7f:94:02:90:0d:6e:ca:15:8c:2c:44:90:22:ea:6d:9c:8f:17:
be:ef:dc:58:de:02:7b:10:3a:29:1a:32:0f:34:aa:1b:2b:b8:
cb:98:10:34:fe:04:10:21:4a:33:2b:19:9f:6d:4e:8d:56:ac:
e3:e2:77:1d:38:f6:11:da:29:45:90:21:9e:9f:42:84:46:02:
8e:5e:2a:82:f2:2c:c5:61:ed:95:1e:a0:9b:02:af:ab:93:25:
5e:ba:1c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:28:50 2026 by rpki-client