Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27d27432-b542-4aad-b3a4-daf2a0a9bb5c.roa
File: 27d27432-b542-4aad-b3a4-daf2a0a9bb5c.roa (raw, json)
Hash identifier: P/Yrhj5heYpPi6Fta6cxC+atIAksDeHrZQzN+8L2//E=
Subject key identifier: 5C:B3:DC:B0:70:7B:89:30:24:13:F5:7E:B9:70:83:8A:2F:8C:31:60
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: AD7925D68FE61BA4DBD241040AE809CE8F34CC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27d27432-b542-4aad-b3a4-daf2a0a9bb5c.roa
Signing time: Thu 15 Oct 2026 03:20:06 +0000
ROA not before: Thu 15 Oct 2026 03:20:06 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ad:79:25:d6:8f:e6:1b:a4:db:d2:41:04:0a:e8:09:ce:8f:34:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:20:06 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=5dad1781d9d20d8e8be59e3a7163e4ef11dbcb1502cc335e84fa933a5d8e248f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c7:39:33:e2:95:3d:4d:ee:5a:2c:5a:ba:59:
5f:3b:e7:46:c9:3e:22:51:f5:71:94:f3:58:24:f1:
9f:10:16:52:15:bf:c9:dc:91:66:27:68:cb:fc:4a:
72:7e:48:9d:2a:c0:1f:8c:0f:d6:e1:30:dc:31:94:
b5:27:20:91:6b:81:8f:a7:f8:9e:3a:f4:02:fe:86:
0c:c3:5b:ff:99:e9:fa:d0:73:47:36:e0:26:79:0f:
5b:8d:9b:71:7f:9f:3a:78:57:a6:38:25:25:33:09:
45:b0:f2:d5:2c:05:9c:16:86:61:67:b4:a7:d3:8b:
e8:f3:48:26:b4:4f:0b:de:1b:7c:4c:24:50:4c:8e:
a6:40:00:c6:c1:f2:d7:89:f9:5a:03:83:13:56:e4:
78:19:5e:32:f9:a7:41:78:7a:16:c4:ed:0f:d6:8c:
cc:af:9a:3a:e9:2b:b6:f9:37:83:0a:bc:8e:b8:5b:
d9:20:f7:8b:e0:8a:43:28:08:ab:15:8d:87:99:6e:
52:e5:97:70:30:e4:ed:d5:19:9a:b7:40:f8:a1:22:
30:66:87:6d:da:62:dc:b5:4e:d9:e8:6e:ce:55:7c:
3c:96:bf:c2:0a:38:fb:fe:5b:73:9a:c3:7f:bf:c5:
e3:dc:eb:72:4d:58:2c:88:db:45:f5:fb:9f:1d:5f:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B3:DC:B0:70:7B:89:30:24:13:F5:7E:B9:70:83:8A:2F:8C:31:60
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27d27432-b542-4aad-b3a4-daf2a0a9bb5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.176.0/20
Signature Algorithm: sha256WithRSAEncryption
59:b9:89:0c:2b:cd:a5:d5:9d:9c:20:ba:1c:8c:09:b2:cd:a7:
cd:ee:c4:ca:89:5d:26:b5:40:fe:52:a3:dc:73:ec:1c:9d:ec:
3c:c9:d1:b4:1d:a4:97:d7:72:37:c9:ea:7f:c5:9c:f6:e5:f8:
59:8a:b9:3a:7c:1a:d8:ae:ef:06:2d:94:e5:10:2f:7f:24:5a:
12:aa:2c:f8:20:d9:4b:45:a9:ca:82:22:7b:7c:ad:2f:b5:02:
41:7c:1f:5f:3e:e4:7d:9e:93:8e:7e:a6:e7:1b:e6:1c:fd:79:
db:8f:54:10:54:6d:0f:24:e7:0c:69:35:c2:f8:92:ff:fe:34:
51:63:c9:33:0e:07:33:0b:2f:92:72:bf:af:4f:c2:96:4f:dd:
73:19:fd:0c:e6:0c:77:ee:ea:4c:c7:0f:e3:43:cc:68:e2:ec:
cc:03:c1:ae:8e:2b:c7:85:1b:fb:5d:8d:e7:88:b4:dd:7b:a4:
0f:93:85:db:8a:3d:e3:0f:f9:f7:be:8a:e3:e2:8e:60:73:23:
0d:da:e8:b4:3c:45:59:67:eb:22:e3:6f:31:43:4a:4f:54:ed:
b7:eb:74:b7:a2:e9:ef:37:b6:37:2b:e1:0b:4b:e0:f9:a7:38:
1e:55:db:9a:71:00:66:12:36:5a:db:04:7e:ed:7a:28:28:65:
6b:db:2a:c1
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUAK15JdaP5huk29JBBAroCc6PNMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTUwMzIwMDZaFw0yNzAxMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQDVkYWQxNzgxZDlkMjBkOGU4YmU1OWUzYTcxNjNlNGVmMTFkYmNiMTUwMmNj
MzM1ZTg0ZmE5MzNhNWQ4ZTI0OGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPbHOTPilT1N7losWrpZXzvnRsk+IlH1cZTzWCTxnxAWUhW/ydyRZidoy/xK
cn5InSrAH4wP1uEw3DGUtScgkWuBj6f4njr0Av6GDMNb/5np+tBzRzbgJnkPW42b
cX+fOnhXpjglJTMJRbDy1SwFnBaGYWe0p9OL6PNIJrRPC94bfEwkUEyOpkAAxsHy
14n5WgODE1bkeBleMvmnQXh6FsTtD9aMzK+aOukrtvk3gwq8jrhb2SD3i+CKQygI
qxWNh5luUuWXcDDk7dUZmrdA+KEiMGaHbdpi3LVO2ehuzlV8PJa/wgo4+/5bc5rD
f7/F49zrck1YLIjbRfX7nx1ff7cCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRcs9yw
cHuJMCQT9X65cIOKL4wxYDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjdkMjc0MzItYjU0Mi00YWFkLWIzYTQtZGFmMmEwYTliYjVjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC4zsDAN
BgkqhkiG9w0BAQsFAAOCAQEAWbmJDCvNpdWdnCC6HIwJss2nze7EyoldJrVA/lKj
3HPsHJ3sPMnRtB2kl9dyN8nqf8Wc9uX4WYq5Onwa2K7vBi2U5RAvfyRaEqos+CDZ
S0WpyoIie3ytL7UCQXwfXz7kfZ6Tjn6m5xvmHP15249UEFRtDyTnDGk1wviS//40
UWPJMw4HMwsvknK/r0/Clk/dcxn9DOYMd+7qTMcP40PMaOLszAPBro4rx4Ub+12N
54i03XukD5OF24o94w/5976K4+KOYHMjDdrotDxFWWfrIuNvMUNKT1Ttt+t0t6Lp
7ze2NyvhC0vg+ac4HlXbmnEAZhI2WtsEfu16KChla9sqwQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:09 2026 by rpki-client