Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
File: 2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa (raw, json)
Hash identifier: Diz5xONJdMa42kXDetWj0z+SlRDq0T1moVZ8rsD/dP4=
Subject key identifier: 9B:A6:ED:C4:08:93:3C:C1:69:1E:EB:B4:BD:BE:FC:AD:37:98:76:C5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 02C1D969D936A2AC27FC0B76FEC66C3F1FC6E3B6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
Signing time: Thu 15 Oct 2026 03:30:59 +0000
ROA not before: Thu 15 Oct 2026 03:30:59 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c1:d9:69:d9:36:a2:ac:27:fc:0b:76:fe:c6:6c:3f:1f:c6:e3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:59 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=16a11001b7f765de783143532d288f2304a0cc119722046075de9cef2ad6757a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5f:54:44:a2:3e:6a:e7:1d:ce:bc:b7:49:f0:
45:6d:7a:6d:22:16:d9:f5:e1:31:a1:26:65:b4:35:
31:64:35:35:f9:86:62:0d:ec:c8:95:62:ff:f0:29:
17:f8:89:fe:50:ad:f8:72:da:1f:f7:95:ea:4c:13:
cb:6e:04:97:39:62:fe:5f:50:aa:0c:ed:54:93:7a:
89:20:79:07:ab:49:46:2f:bf:53:23:4d:86:87:d2:
b4:7c:ae:e2:9b:b7:e0:20:fd:74:05:9c:95:be:50:
23:8a:c3:d4:2b:6b:32:e4:37:4a:df:eb:b6:91:c8:
9f:35:76:4c:2d:19:16:0d:50:26:ee:9a:a0:44:1a:
72:ea:2a:cb:a1:05:a6:ab:47:9b:17:2d:6e:74:ad:
49:a6:64:e2:77:b2:94:98:6e:07:0e:65:71:48:d2:
46:c6:01:52:97:4d:cc:0c:96:2d:04:dc:c4:f9:ec:
3c:f0:fc:88:2a:d6:53:65:45:40:31:b5:ff:c5:d1:
03:ea:82:6c:32:a0:1f:54:11:a3:97:f8:94:c5:a3:
87:e7:98:f8:dc:a7:63:b3:1e:9b:af:94:8e:5a:f3:
3e:b5:97:d3:a9:9a:f8:05:27:fe:ef:58:f9:ab:1c:
c8:12:c8:6d:c4:98:3c:ff:78:42:c5:b6:8b:04:10:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A6:ED:C4:08:93:3C:C1:69:1E:EB:B4:BD:BE:FC:AD:37:98:76:C5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2eab4c42-5a06-4b45-b0cf-92f23ba278f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.224.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:4e:7f:78:ce:7b:3c:0d:f0:c1:c2:2f:10:67:96:66:ff:29:
5b:30:fe:1f:a8:ce:e7:16:80:d1:8e:6e:9a:b3:f6:ff:d0:1f:
34:e0:b6:6a:a3:9a:e0:b4:a9:e0:55:3d:00:14:49:f4:d0:0c:
37:41:4e:d1:7c:b0:05:4e:25:3a:94:a0:49:84:64:00:6e:bd:
44:49:4f:95:05:e0:2f:f9:dd:84:17:fb:7b:ee:fd:53:0c:4d:
1c:6c:33:e4:0a:1f:b2:2b:5e:32:b8:d3:5d:3e:88:14:62:86:
70:e9:7e:2c:77:f5:80:ee:73:53:1a:81:af:8f:c8:4f:54:48:
35:68:4b:c5:70:15:2a:de:8c:d4:7c:6c:3a:ad:22:ab:aa:06:
23:96:b2:83:bc:b8:e7:4b:99:89:6f:8b:85:70:6a:11:67:8f:
c1:92:71:3d:30:1d:c6:21:94:09:33:99:64:64:9e:ef:d6:13:
05:a6:87:1e:4e:5d:f2:d1:74:e6:05:88:ce:ce:01:6a:67:72:
e3:7a:e6:9f:14:46:a3:08:d2:f1:8b:a7:08:97:a6:96:53:5a:
56:11:9e:86:f6:a6:a6:16:7c:24:16:16:8f:02:e0:6b:ff:36:
1f:f5:bd:c9:4f:99:5c:7a:92:8e:fb:e8:d7:f1:63:29:c8:1b:
8c:3a:3a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:35 2026 by rpki-client