Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa
File: 11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa (raw, json)
Hash identifier: sBX4ueJa6QvfQhdHRUJpEfScBxdZRz6+urs62DEo2rg=
Subject key identifier: 82:F5:45:4B:4B:37:0B:9D:D7:61:6C:AB:0D:45:00:1C:25:8D:A6:A8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F8485A5388B771EA3F27124B9C22C8E186702EE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa
Signing time: Thu 15 Oct 2026 03:30:45 +0000
ROA not before: Thu 15 Oct 2026 03:30:45 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:84:85:a5:38:8b:77:1e:a3:f2:71:24:b9:c2:2c:8e:18:67:02:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:45 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=f6fe63411cd220e6e1c1f956d0a025a6bb7c4be729d47e435ef6476f7fbb070c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:25:a4:86:96:b7:86:23:36:53:58:2a:79:
89:6c:18:1d:f2:7e:2e:33:c0:bf:ea:f6:10:28:20:
5f:c5:65:ab:dc:c3:87:66:8e:28:4d:90:d2:b8:b7:
91:0f:77:5d:e5:c6:3b:c5:27:db:4c:d6:27:31:97:
8b:a8:d1:f4:c2:98:ec:35:fa:9b:49:21:85:d4:4e:
3a:dc:b5:55:d5:80:37:02:b1:39:d7:33:a2:ee:de:
93:47:66:3a:f3:9a:09:55:7e:a4:47:f8:15:1b:d9:
ac:29:6e:aa:9b:d3:c9:4a:ff:03:d5:37:ca:0b:a6:
4c:d9:22:60:88:b0:f9:e5:19:92:ba:3a:91:32:be:
90:cb:e1:44:3f:3b:69:eb:95:58:9d:0d:34:54:4e:
64:c3:22:33:22:35:21:7d:61:4c:5e:bc:18:ae:97:
17:88:75:d0:88:ab:35:0f:81:2c:01:9c:c8:fd:da:
a8:c6:cb:9d:99:01:a4:8a:0a:fd:d4:b2:f1:76:49:
f9:f5:03:04:be:7b:85:ff:8a:78:ab:8d:35:30:af:
9c:06:c8:f6:8c:86:f4:c2:c2:a8:25:50:51:4d:ef:
88:c9:eb:b2:fb:e3:9f:3b:13:51:04:ed:8c:03:07:
c3:d8:a1:91:6e:ef:43:a5:96:1e:65:8e:70:13:19:
9e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F5:45:4B:4B:37:0B:9D:D7:61:6C:AB:0D:45:00:1C:25:8D:A6:A8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c924e5-b5a4-4e39-bd9b-3aa04634212a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.64.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:2b:5c:1e:20:60:f1:d0:85:79:c9:66:f2:ed:3a:9a:8f:63:
58:39:4c:10:6c:f2:be:e2:b2:dc:39:22:e0:e2:c7:c0:ca:d0:
73:9d:97:a8:79:db:ae:3f:c1:c7:24:69:0d:85:5e:7c:a7:6b:
e1:e3:b1:90:12:e0:0d:70:e9:63:77:90:7e:44:eb:d0:03:49:
56:aa:01:d5:5e:80:69:00:72:15:11:ef:6c:73:47:5f:d3:26:
ab:65:98:9a:82:0a:0c:e4:b7:a1:1e:22:8f:ea:46:76:eb:0f:
3b:59:33:75:74:4b:30:6c:f6:d6:99:fb:52:56:84:8d:9d:fb:
b7:f8:07:9c:2e:ee:04:d5:8e:c9:85:cc:4e:ac:64:31:9f:c6:
31:76:c0:b2:e6:70:a1:79:fd:ca:b4:4c:3e:52:21:fd:d6:c5:
86:4d:9c:e0:41:7f:9e:0a:1a:23:f0:5b:39:b2:98:1f:aa:f5:
17:97:b8:2b:d8:0a:3e:14:c7:fd:68:75:2b:ac:ec:de:40:a7:
68:1c:7d:f8:1d:0f:91:8c:cd:6e:f3:95:a6:2f:57:c1:c3:b0:
f0:91:78:06:fa:f5:f2:bd:5f:f2:21:1b:99:f7:91:44:63:ee:
f0:63:94:a2:8e:5e:71:d3:f7:33:05:1e:5d:5e:61:c0:98:9a:
71:ee:9a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:35:41 2026 by rpki-client