Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
File: e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa (raw, json)
Hash identifier: X0V9BXpTANWBs2M/b4Nx0KEGrYpemGMDKyA1gYkYrss=
Subject key identifier: C0:B6:17:C9:5A:A7:F8:F3:D3:FB:20:6A:3A:93:AF:9C:59:50:6E:CD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5BA18E63029A4A9DCFCDE8780DE06D5BCBD4BB66
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
Signing time: Mon 27 Jul 2026 03:20:26 +0000
ROA not before: Mon 27 Jul 2026 03:20:26 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a1:8e:63:02:9a:4a:9d:cf:cd:e8:78:0d:e0:6d:5b:cb:d4:bb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:20:26 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=b3c518b11c5a5c4b7d0af1816411833e875de8fda45425f08f0d22671e7dfab6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:cc:72:e4:be:aa:e7:94:cd:33:fe:ff:8a:
c5:26:ac:08:5c:18:a3:b3:07:6a:e2:57:42:46:fe:
16:29:ce:0a:4f:ef:97:86:1b:13:34:50:50:5d:55:
94:8f:8d:6a:e8:5c:cb:fa:91:7a:2f:07:e7:7d:90:
62:88:5f:45:58:a7:fb:56:83:00:f9:dc:7d:1e:10:
4b:7a:42:b7:0a:c3:f1:25:b9:7f:23:57:54:16:36:
71:82:5e:00:18:ae:c8:bc:90:88:6a:6a:93:bf:eb:
ff:1f:e1:8f:7f:94:36:57:22:e2:de:3a:ae:1a:cd:
ac:05:6e:f7:21:25:2e:85:74:03:33:79:11:9d:15:
e2:46:8d:30:dd:1a:80:55:d2:09:07:95:45:67:df:
6f:f0:df:84:7d:f2:cd:47:3d:de:b1:0e:dd:e8:f7:
37:d2:2d:a6:a6:81:7c:85:a0:2b:24:ab:03:8f:ca:
b0:ea:02:89:49:1a:8a:27:1e:da:2e:61:43:96:8d:
98:a5:b6:d0:47:6f:6c:14:7e:0d:6b:93:5a:3d:6b:
fa:eb:65:0d:60:0e:51:bd:14:5e:10:d9:4a:d4:5a:
fc:3d:bc:70:6e:02:ea:f2:3f:18:98:50:b8:e8:39:
a3:45:c4:d9:f8:e0:77:59:f7:d4:07:f7:b6:c6:6f:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B6:17:C9:5A:A7:F8:F3:D3:FB:20:6A:3A:93:AF:9C:59:50:6E:CD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.160.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:22:03:40:48:35:68:62:a3:61:a8:f1:74:df:41:80:db:a9:
99:95:66:83:67:b7:49:2d:a3:68:66:97:cc:78:0f:e0:7c:c4:
46:5e:ca:66:27:4c:0e:72:bb:8a:01:17:77:8b:52:03:c6:e2:
94:2a:31:4b:ba:62:a3:43:94:36:74:75:9b:f6:04:d1:95:a2:
fe:49:5c:a7:19:c3:97:8b:32:bd:c7:2c:7c:40:1a:7d:8c:cf:
40:24:25:1b:44:6f:c7:ae:ba:dc:eb:fb:9d:6e:52:3d:db:3e:
05:62:49:4b:99:8e:2d:cb:7b:ad:be:35:6a:be:1d:43:4b:33:
df:a3:34:40:eb:68:ac:2e:90:66:70:ab:2c:d2:e6:2f:a8:37:
48:32:2a:89:c6:7d:7c:52:45:ed:ab:ae:50:59:d2:f8:2c:88:
0c:68:f6:ac:a4:09:b1:dd:55:94:53:e7:06:1c:80:75:95:69:
34:d0:b8:88:25:72:54:45:e7:a8:43:05:51:cd:59:1e:83:e1:
3d:63:fc:c0:9e:ca:91:39:a0:a8:77:af:29:21:78:03:4e:74:
33:a9:01:2b:22:6e:c8:b1:c6:d7:1e:f6:62:26:59:dc:1d:77:
9f:c7:45:ef:a0:2f:84:9f:4c:71:26:b6:84:33:ae:50:d8:81:
84:82:4c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:27:31 2026 by rpki-client