Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19bd833c-9eac-4b19-b264-a191d9c1b939.roa
File: 19bd833c-9eac-4b19-b264-a191d9c1b939.roa (raw, json)
Hash identifier: Gh52yYMclwIzNCTyJyK9T+U3bZ3D0kO0Vfa8fFul/qs=
Subject key identifier: 4F:84:E7:66:1F:3D:AC:F8:A0:CA:AF:7D:46:0A:87:D0:F6:EC:8D:D6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 646A3B1366F841C4B276BD32912918606A34935B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19bd833c-9eac-4b19-b264-a191d9c1b939.roa
Signing time: Thu 15 Oct 2026 03:30:27 +0000
ROA not before: Thu 15 Oct 2026 03:30:27 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:6a:3b:13:66:f8:41:c4:b2:76:bd:32:91:29:18:60:6a:34:93:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:27 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=585a4e4f97a99a6db9bf9e3dcf4cc94a83aea254fe1890f38d2024819aa801e5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:c2:1a:79:b4:91:17:e8:1b:30:f6:8f:f8:
72:d4:2c:a7:24:62:65:d8:49:21:81:05:f1:1f:db:
67:26:69:0d:9a:7c:86:d0:4d:3a:ce:39:62:e8:19:
49:1f:19:ae:bc:71:55:56:01:b2:7f:dd:89:f3:95:
9b:c8:77:5e:06:12:56:b1:8e:0e:46:81:ac:b8:dc:
8a:52:ea:74:ec:21:db:69:32:0d:a9:f2:92:5e:df:
25:38:94:4e:6f:9e:65:65:ea:3d:32:b1:75:eb:88:
b9:c3:25:4d:3a:5f:c6:c4:a4:c7:ce:bb:08:65:e2:
3d:73:f8:da:16:58:a7:34:d8:2c:9e:99:a8:8c:7c:
a0:46:e1:77:d6:74:e2:c8:9d:6e:9b:62:25:c6:a3:
57:6f:02:f5:ba:53:e3:42:c3:a2:4a:11:60:5b:d7:
7f:2d:83:12:b3:f3:14:43:ce:80:2c:b5:60:93:2d:
a2:e9:09:6b:e9:27:0a:5f:09:da:e2:60:bb:b1:3f:
25:e4:0a:23:15:61:25:b3:06:56:09:f1:8d:df:cd:
da:fa:79:b1:97:60:65:58:1f:9d:b4:43:f9:c6:23:
d9:c5:37:99:f6:40:10:a6:8f:87:ae:c5:b4:17:83:
86:2f:04:3e:43:cb:d4:46:56:c0:c6:c2:c8:cc:9f:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:84:E7:66:1F:3D:AC:F8:A0:CA:AF:7D:46:0A:87:D0:F6:EC:8D:D6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19bd833c-9eac-4b19-b264-a191d9c1b939.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.216.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:c7:7c:92:8b:3f:b8:6a:a4:3e:49:6c:89:73:8c:ed:4d:f0:
0f:f0:24:48:38:f5:fe:6d:bd:1f:96:2c:b2:b6:99:16:c8:25:
4a:b4:d5:13:84:90:52:42:de:42:07:dd:79:e6:eb:d4:11:bf:
9d:b6:38:79:dc:6f:72:f6:d0:f1:16:d6:06:1c:ab:58:d5:ac:
93:90:86:49:40:a1:cb:95:0d:9e:5f:ad:e7:0a:b1:95:63:85:
05:ab:f2:29:9b:0e:cf:c6:a6:05:e8:2f:0d:20:47:e6:e9:ee:
c0:86:4b:61:3a:4c:b3:73:08:8a:88:12:b6:45:6e:0b:48:d0:
1e:b1:2f:c3:2f:2c:39:a2:90:97:eb:98:b5:a2:35:ad:ea:96:
0d:0a:35:63:26:22:c1:69:89:5b:0a:a5:38:cc:bf:36:b8:b9:
ad:cf:6f:0e:7f:fc:f9:ff:c6:9b:5b:04:cc:01:2f:92:ed:39:
bc:3f:f0:68:d7:d6:b5:90:86:2b:54:66:82:79:93:1b:08:11:
df:24:26:d2:b0:c0:4c:68:27:37:19:d3:60:1f:e3:1f:e5:01:
82:fe:49:14:60:bf:9d:45:1f:b0:e5:73:2d:5f:c8:03:84:85:
1a:f8:38:f6:ca:13:d4:d2:3b:1f:48:79:94:cb:73:c9:63:67:
a0:06:3e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:36:24 2026 by rpki-client