Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
File: df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa (raw, json)
Hash identifier: TXev9WhKlPlGhEAkqahTs/XLDUU+sRio2D6/rwRDpA4=
Subject key identifier: 35:74:1E:09:31:21:75:DA:E3:D7:2A:10:40:F1:BA:95:CD:35:F2:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2C5ACF351F8B3F612054E70203C1987B57B7EDB0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
Signing time: Mon 27 Jul 2026 03:20:13 +0000
ROA not before: Mon 27 Jul 2026 03:20:13 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:5a:cf:35:1f:8b:3f:61:20:54:e7:02:03:c1:98:7b:57:b7:ed:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:13 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=25316f6dda1bbeef8e3514032074ec3a63d97236d4044812132c8f862ce10891, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:bb:d4:de:04:2c:34:b5:07:e4:0b:e0:3c:
5b:88:95:0b:58:09:e9:50:f2:c7:6d:2a:92:d6:5c:
f2:dc:97:17:04:a2:90:4b:22:88:71:e7:1f:39:52:
f1:5a:cb:7e:b0:bb:53:f5:5d:04:d6:84:06:15:95:
56:ac:a9:52:19:45:90:98:e2:d0:5f:9e:84:83:95:
e4:2d:b4:cd:b5:b9:64:ae:dc:ec:da:17:6a:de:0a:
97:da:49:43:4e:6b:88:9f:9d:75:76:25:da:21:83:
6b:1f:d6:e2:f4:d7:20:8b:6f:be:72:64:6d:00:2b:
53:c7:97:f4:08:41:4d:59:23:67:90:c3:dd:16:5b:
53:93:89:21:1a:01:d8:91:10:29:e2:9b:d8:80:ec:
6d:7c:70:25:dc:f6:7c:ae:f6:88:60:6f:0b:2a:5b:
93:2b:c7:4d:18:d7:99:6f:b1:4f:e9:3e:8a:ac:4f:
cb:26:5c:d6:ae:d8:2a:fd:44:bf:d5:27:d1:be:fe:
f1:55:cc:56:c3:a9:e0:89:00:31:58:61:c0:58:b9:
80:f0:be:2a:4e:35:84:13:c1:86:c5:0b:c3:e9:0f:
08:35:a5:0c:c0:56:33:9a:cd:4b:3b:d3:2f:41:01:
b0:06:f0:f5:7f:6c:30:76:69:32:1c:13:8d:f6:e1:
70:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:74:1E:09:31:21:75:DA:E3:D7:2A:10:40:F1:BA:95:CD:35:F2:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.200.0/22
Signature Algorithm: sha256WithRSAEncryption
39:21:6b:9b:0d:ee:d2:09:ca:f7:3c:de:70:61:bb:75:c1:2d:
96:9a:33:ae:8a:8b:43:73:88:89:3f:44:15:c7:dc:f2:44:38:
2b:f7:1a:82:f7:b8:b8:ae:a5:b2:02:ac:28:27:2a:8b:fc:64:
f3:03:18:09:6f:95:28:ab:da:c1:da:b1:9e:38:4b:28:ae:2d:
2c:fe:3c:12:30:cc:e4:b6:2a:df:29:16:4e:77:57:de:9d:6f:
bf:64:72:a1:98:6e:c0:a2:99:89:48:60:8e:55:d0:49:b3:13:
09:7f:77:af:0a:6b:2d:49:2d:e7:7e:36:04:1e:ad:d2:ab:6f:
c4:49:84:f8:27:88:59:a8:4a:c6:b6:8b:2c:a7:58:c4:46:c4:
81:c0:1a:51:ec:d2:84:ed:a7:6e:f2:23:1b:bb:df:57:46:58:
f3:af:bd:b3:60:69:0b:b6:7d:81:66:eb:16:fd:cd:46:f1:ce:
00:7a:47:e0:f1:37:70:5d:00:be:be:00:1a:d1:d9:e8:db:31:
00:67:ce:86:8a:65:d7:d6:aa:cd:e4:20:f8:29:ca:1a:22:1f:
28:a4:54:51:38:f6:9b:0a:7d:cd:db:a1:be:72:4d:43:75:14:
3f:93:cb:cf:37:dc:24:f6:aa:07:6a:3c:4d:b0:8f:23:56:4c:
aa:bc:22:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:28:07 2026 by rpki-client