Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/062e9317-b5ab-4d01-a462-4dc8d164e17c.roa
File: 062e9317-b5ab-4d01-a462-4dc8d164e17c.roa (raw, json)
Hash identifier: w7L5O90mgNJ88fLI1eFYMTNh+JI20rno6ZaCe8Qi6cc=
Subject key identifier: 9D:F9:29:C1:26:10:B7:6D:7A:2C:8A:13:3C:17:49:AC:EF:B2:8D:8D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F2A62D43DA1D822957B0ED1154EC19821ADA943
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/062e9317-b5ab-4d01-a462-4dc8d164e17c.roa
Signing time: Thu 15 Oct 2026 03:30:44 +0000
ROA not before: Thu 15 Oct 2026 03:30:44 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:2a:62:d4:3d:a1:d8:22:95:7b:0e:d1:15:4e:c1:98:21:ad:a9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:44 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=5a1645b8dded1ffc286b9cc750ee3ec02f14e106c9019f29799a1b8fc5d17a98, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:70:59:e4:81:cc:d2:96:9a:3a:47:71:3a:
23:98:21:e1:8f:2d:df:44:c8:d0:88:2b:31:74:27:
38:5a:26:98:16:48:87:78:62:66:2e:c3:6f:ac:9b:
c6:12:d4:ac:2d:7d:2f:86:89:c7:2c:e1:db:cc:b9:
6f:78:a0:1e:85:b7:36:d1:d2:cf:54:15:8f:27:4f:
68:fa:ae:72:4e:04:4c:41:f3:01:57:87:fa:76:84:
e9:71:e2:e5:c7:7f:be:64:cb:00:1f:ee:3e:bc:36:
09:7e:e7:3a:e2:f5:f6:bd:6f:1a:63:19:81:9f:d9:
78:cf:2a:17:77:41:81:ca:3a:0c:c8:eb:37:c8:00:
c6:d7:50:45:f7:b9:b3:0b:f8:ab:51:c3:bf:f0:9e:
ec:cf:8f:7a:22:3a:00:2b:8b:56:1f:6b:05:57:77:
1d:cc:c3:2e:b8:49:ec:c5:1a:c7:f0:e1:ab:7c:b8:
87:73:a5:bc:eb:3b:ad:b1:24:ad:0f:96:7c:f5:97:
1e:cf:2c:45:b7:10:e4:13:96:c2:d2:19:02:02:76:
37:d7:25:bb:89:5e:fc:4a:e5:4d:ce:ca:92:ef:a4:
13:03:c3:23:93:e3:4f:ad:8f:d6:6b:84:c2:b5:90:
02:53:b6:27:91:ae:59:72:6d:ee:45:8f:2c:d4:59:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F9:29:C1:26:10:B7:6D:7A:2C:8A:13:3C:17:49:AC:EF:B2:8D:8D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/062e9317-b5ab-4d01-a462-4dc8d164e17c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.172.0/22
Signature Algorithm: sha256WithRSAEncryption
77:83:c7:40:f0:8c:38:29:c4:04:df:65:6d:23:89:87:99:86:
1c:0c:98:3a:70:0d:d1:9a:76:e6:3d:37:4e:c3:5b:6a:b9:83:
fe:a7:2f:11:e0:3b:cb:5a:c6:b6:82:7c:0a:51:83:08:be:11:
ce:73:6a:35:88:d1:ab:ef:a9:89:bb:0e:e0:d0:5d:7d:f0:e0:
2f:85:6a:c5:1d:c5:43:c7:2a:2c:c6:76:46:a1:11:8c:3b:d4:
b5:dd:55:3c:5c:fc:72:73:3e:1b:ec:20:29:c3:11:1f:c0:7a:
6a:f7:6d:e8:94:cb:90:38:6e:b1:99:0f:4d:4e:c5:03:23:67:
cf:a6:c1:16:aa:05:e6:7e:5f:20:a2:3d:90:2e:39:d4:03:ee:
84:7e:95:6c:fe:cb:73:6e:71:22:56:d0:3a:0d:9d:47:6c:42:
12:1b:49:f2:8e:55:58:58:e5:ed:96:b1:87:59:1e:4a:44:a4:
2b:b2:a3:99:56:84:bf:20:ec:d1:c7:bd:e0:55:b5:3d:fc:e6:
1d:6d:60:8a:21:68:76:50:b5:91:2f:02:1d:71:65:c4:7b:7b:
28:70:87:ee:ec:12:98:15:a7:45:43:38:e8:3f:65:9d:ad:68:
b0:f8:6f:64:24:9b:b4:81:d0:d4:4b:b4:a5:42:f8:2e:68:43:
95:37:62:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:00:43 2026 by rpki-client