Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa
File: d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa (raw, json)
Hash identifier: y2oQIAjl/ZCQm+BauUFQB9W55oSRsfDNQtyA7tNSIEY=
Subject key identifier: 3B:77:90:9E:08:0A:FB:0C:F7:0B:B0:9F:FA:75:9E:CF:C6:3B:66:2B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 01A01347EBA008000AD256E46A4484C297651227
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa
Signing time: Mon 27 Jul 2026 03:20:53 +0000
ROA not before: Mon 27 Jul 2026 03:20:53 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:47:eb:a0:08:00:0a:d2:56:e4:6a:44:84:c2:97:65:12:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:53 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=8489b02d35800379f1fea8fd6d1a77285c8131fcedbc14bce090448dfdec95a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:05:bb:71:b8:d1:24:9f:c7:dd:b0:ef:59:
c6:3c:37:62:3e:7b:fd:58:d8:23:22:2e:42:e0:4f:
12:d7:d3:55:ba:93:a7:cc:fb:34:e4:05:03:fe:3c:
07:35:c4:8d:45:67:ec:f4:65:01:02:2f:44:e3:99:
1f:e2:da:32:de:6b:d8:39:58:48:ea:bc:aa:ad:40:
89:c2:af:5d:56:9f:7c:ab:70:92:7f:84:9d:40:9b:
bf:fe:13:0c:0a:5d:e0:46:5c:51:a7:1b:bf:97:da:
bd:6b:b5:bc:ea:f1:a5:6d:96:0d:29:63:c1:49:96:
e3:1b:4d:95:39:a4:18:7f:df:37:f0:58:28:3c:43:
51:54:7b:af:1b:e0:9d:ff:0e:d2:e6:d1:08:0e:35:
be:e2:53:c3:31:ba:d7:35:e5:ac:ee:75:4a:90:a5:
10:94:b0:eb:a6:be:6d:ee:70:68:14:0f:87:66:ab:
2f:b6:1d:fa:31:81:18:78:9e:ee:ef:37:cd:8c:ba:
53:95:c9:d4:f3:23:de:9b:4e:b5:3f:c2:90:b3:99:
cf:c8:67:52:e6:4a:2d:37:94:78:80:56:6c:00:9b:
31:17:ab:69:ab:ef:c9:2c:d6:69:0e:36:94:d0:89:
38:b0:75:6d:44:8b:8f:f3:92:ec:aa:89:7e:03:3f:
b6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:77:90:9E:08:0A:FB:0C:F7:0B:B0:9F:FA:75:9E:CF:C6:3B:66:2B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.224.0/20
Signature Algorithm: sha256WithRSAEncryption
46:ac:f1:02:59:c7:53:4c:21:e9:b6:4c:75:5e:cb:6d:fc:bc:
f3:50:51:13:8c:f3:62:f6:3b:2e:77:e3:57:cf:e6:ae:d2:3d:
be:0e:2f:0f:84:11:71:60:90:51:bf:d1:32:e7:dc:1c:07:82:
e7:fe:16:a5:18:91:b5:30:99:ee:6e:7f:52:71:aa:41:3b:19:
c6:06:70:d7:12:ce:1d:f0:bf:18:82:3a:dc:08:52:f7:a3:e8:
bf:cf:77:23:be:c6:5a:32:78:98:42:cf:63:c5:d6:cc:ed:51:
f0:5a:23:27:e8:52:8b:6d:b3:87:61:84:e1:c8:cd:12:03:1d:
4e:0d:b3:b5:66:c5:f1:53:3a:e8:1e:0f:ef:2d:1d:44:bc:c6:
26:4c:33:d7:0b:48:aa:7d:b8:34:e9:1b:06:7a:07:2c:ff:3f:
33:31:e0:e9:8b:41:12:f1:e3:73:05:53:2f:0d:e3:c6:93:2f:
9d:75:db:1c:09:31:c1:65:ce:06:ab:b8:b9:b4:19:e6:a3:41:
55:47:73:cb:f1:d1:74:fc:3f:86:c1:b7:df:7e:2d:e5:5b:57:
bf:98:b4:11:b5:60:68:d4:cb:71:82:7a:45:c8:7a:36:0d:b4:
1a:bc:7d:b4:c9:5b:df:e8:4d:2f:b6:90:4e:7f:d8:61:1f:65:
65:59:ee:14
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUAaATR+ugCAAK0lbkakSEwpdlEicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjcwMzIwNTNaFw0yNjEwMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDg0ODliMDJkMzU4MDAzNzlmMWZlYThmZDZkMWE3NzI4NWM4MTMxZmNlZGJj
MTRiY2UwOTA0NDhkZmRlYzk1YTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMrBBbtxuNEkn8fdsO9Zxjw3Yj57/VjYIyIuQuBPEtfTVbqTp8z7NOQFA/48
BzXEjUVn7PRlAQIvROOZH+LaMt5r2DlYSOq8qq1AicKvXVaffKtwkn+EnUCbv/4T
DApd4EZcUacbv5favWu1vOrxpW2WDSljwUmW4xtNlTmkGH/fN/BYKDxDUVR7rxvg
nf8O0ubRCA41vuJTwzG61zXlrO51SpClEJSw66a+be5waBQPh2arL7Yd+jGBGHie
7u83zYy6U5XJ1PMj3ptOtT/CkLOZz8hnUuZKLTeUeIBWbACbMReraavvySzWaQ42
lNCJOLB1bUSLj/OS7KqJfgM/tscCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQ7d5Ce
CAr7DPcLsJ/6dZ7PxjtmKzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDgzNjRjMDYtYjc1ZS00ZDg1LThjOGMtYWZhZDRkZjdjZDFmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC6J4DAN
BgkqhkiG9w0BAQsFAAOCAQEARqzxAlnHU0wh6bZMdV7Lbfy881BRE4zzYvY7Lnfj
V8/mrtI9vg4vD4QRcWCQUb/RMufcHAeC5/4WpRiRtTCZ7m5/UnGqQTsZxgZw1xLO
HfC/GII63AhS96Pov893I77GWjJ4mELPY8XWzO1R8FojJ+hSi22zh2GE4cjNEgMd
Tg2ztWbF8VM66B4P7y0dRLzGJkwz1wtIqn24NOkbBnoHLP8/MzHg6YtBEvHjcwVT
Lw3jxpMvnXXbHAkxwWXOBqu4ubQZ5qNBVUdzy/HRdPw/hsG3334t5VtXv5i0EbVg
aNTLcYJ6Rch6Ng20Grx9tMlb3+hNL7aQTn/YYR9lZVnuFA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:28:51 2026 by rpki-client