Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18d47c03-cff3-4fc4-bd85-07c1063f7047.roa
File: 18d47c03-cff3-4fc4-bd85-07c1063f7047.roa (raw, json)
Hash identifier: 733/QIyUp/O38F6nB5ETxW/M1qLiwZB6B0HbJd8c0lo=
Subject key identifier: 56:05:2D:FA:E4:AD:6C:D8:F6:00:44:77:21:30:0B:31:F8:BE:3C:60
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6D10184A18C8FBF099B8E95A5E0F1A0FA8C20E63
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18d47c03-cff3-4fc4-bd85-07c1063f7047.roa
Signing time: Thu 15 Oct 2026 03:20:24 +0000
ROA not before: Thu 15 Oct 2026 03:20:24 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:10:18:4a:18:c8:fb:f0:99:b8:e9:5a:5e:0f:1a:0f:a8:c2:0e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:20:24 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=fc018cc5a3b420f7300afc282291daadd5cb421d18566e1311e7ddba5fe8db26, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:df:fb:54:f7:2d:52:ef:e8:29:96:23:a3:
07:9e:5a:29:03:11:8c:1f:e6:51:43:30:b3:23:bb:
b5:24:63:29:c9:cb:d6:ac:e2:55:a6:87:51:b2:67:
14:c0:73:4f:4e:cb:0e:94:d6:cb:b4:2e:d5:bc:14:
9a:85:0e:84:de:3a:4b:06:81:cf:83:93:13:0a:02:
0a:34:1e:70:31:0d:55:af:00:15:29:7d:3f:84:c7:
fc:ad:42:f4:05:99:80:cc:a5:66:89:8d:c0:8f:ef:
d2:1d:52:12:33:38:02:65:4d:94:22:ab:a0:26:9a:
59:65:f3:e9:2e:4f:ff:69:ac:35:03:92:b9:5d:e9:
ea:1d:0e:20:e6:bf:21:66:8f:b0:a2:3c:ee:f8:0e:
76:b4:39:72:41:e7:fd:b8:c2:03:dc:0e:77:04:9a:
39:98:64:0c:48:31:2e:31:39:89:25:0f:46:33:05:
c3:c1:a5:e3:82:57:20:fc:5b:71:8d:82:2e:77:36:
08:12:80:9b:24:ad:ce:a7:05:37:c2:59:6f:11:74:
8f:8e:b4:48:fb:33:4d:28:0b:35:be:6c:78:e1:67:
91:96:90:92:25:fe:c2:0c:e2:32:0e:3b:bf:2e:cb:
45:1d:eb:d5:16:99:fe:2e:b7:71:6a:49:c8:43:cc:
14:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:05:2D:FA:E4:AD:6C:D8:F6:00:44:77:21:30:0B:31:F8:BE:3C:60
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18d47c03-cff3-4fc4-bd85-07c1063f7047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/19
Signature Algorithm: sha256WithRSAEncryption
bc:95:a4:f6:e7:6c:2e:6d:23:41:3b:68:77:c5:19:ab:60:b5:
7b:73:c1:ee:f4:2c:eb:84:da:c9:0e:66:c4:ea:f7:28:a0:9c:
15:c6:87:55:3c:f3:11:a4:fc:cb:55:40:ea:22:3a:35:6e:60:
20:96:04:e7:4c:2d:44:e3:b7:41:f2:ef:ec:45:10:81:7e:72:
ac:35:dc:ed:d7:8e:8a:3f:57:35:c3:0b:53:01:44:d8:e4:f5:
9c:4b:a3:04:fa:54:15:29:54:77:87:4c:ed:dd:eb:6c:a6:6e:
69:fd:3b:61:67:09:49:38:4a:25:5f:fa:9b:6d:99:63:bd:36:
43:5b:d0:1b:ae:64:fc:a3:6c:d7:19:aa:0d:6e:bc:fa:89:6f:
12:66:a5:ae:38:7e:7f:5d:4b:cf:e0:da:9d:10:5e:7a:c9:2d:
de:38:39:cc:77:b4:33:59:9e:ed:50:1f:4f:05:4f:06:ef:0b:
f6:af:e3:b4:37:19:92:d6:13:1c:a0:e2:dd:89:5f:f7:66:cc:
7e:70:de:c9:74:b5:83:57:0a:3f:de:cb:75:ff:5d:16:b8:f9:
be:2d:00:6a:0e:81:42:94:07:c1:e5:fb:50:b3:d6:f0:54:63:
ef:f0:ea:2c:ad:13:70:de:22:92:82:1d:19:ca:75:e2:96:8a:
a1:f5:80:47
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUbRAYShjI+/CZuOlaXg8aD6jCDmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTUwMzIwMjRaFw0yNzAxMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQGZjMDE4Y2M1YTNiNDIwZjczMDBhZmMyODIyOTFkYWFkZDVjYjQyMWQxODU2
NmUxMzExZTdkZGJhNWZlOGRiMjYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANMe3/tU9y1S7+gpliOjB55aKQMRjB/mUUMwsyO7tSRjKcnL1qziVaaHUbJn
FMBzT07LDpTWy7Qu1bwUmoUOhN46SwaBz4OTEwoCCjQecDENVa8AFSl9P4TH/K1C
9AWZgMylZomNwI/v0h1SEjM4AmVNlCKroCaaWWXz6S5P/2msNQOSuV3p6h0OIOa/
IWaPsKI87vgOdrQ5ckHn/bjCA9wOdwSaOZhkDEgxLjE5iSUPRjMFw8Gl44JXIPxb
cY2CLnc2CBKAmyStzqcFN8JZbxF0j460SPszTSgLNb5seOFnkZaQkiX+wgziMg47
vy7LRR3r1RaZ/i63cWpJyEPMFAECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRWBS36
5K1s2PYARHchMAsx+L48YDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MThkNDdjMDMtY2ZmMy00ZmM0LWJkODUtMDdjMTA2M2Y3MDQ3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBS4zgDAN
BgkqhkiG9w0BAQsFAAOCAQEAvJWk9udsLm0jQTtod8UZq2C1e3PB7vQs64TayQ5m
xOr3KKCcFcaHVTzzEaT8y1VA6iI6NW5gIJYE50wtROO3QfLv7EUQgX5yrDXc7deO
ij9XNcMLUwFE2OT1nEujBPpUFSlUd4dM7d3rbKZuaf07YWcJSThKJV/6m22ZY702
Q1vQG65k/KNs1xmqDW68+olvEmalrjh+f11Lz+DanRBeeskt3jg5zHe0M1me7VAf
TwVPBu8L9q/jtDcZktYTHKDi3Ylf92bMfnDeyXS1g1cKP97Ldf9dFrj5vi0Aag6B
QpQHweX7ULPW8FRj7/DqLK0TcN4ikoIdGcp14paKofWARw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 19:23:02 2026 by rpki-client