Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35fbae76-0646-43e5-826f-114b4990545e.roa
File: 35fbae76-0646-43e5-826f-114b4990545e.roa (raw, json)
Hash identifier: koN89pDmUNKsNeouGGX17MqaKCZ2TSmvnbNOb0KZd0I=
Subject key identifier: ED:BA:37:76:8C:B0:D9:F4:3B:CD:5A:BF:A5:5E:C8:2C:82:BA:90:6E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 795A01B2344269B886844EA6E818D660A3BB8C6D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35fbae76-0646-43e5-826f-114b4990545e.roa
Signing time: Thu 15 Oct 2026 03:20:08 +0000
ROA not before: Thu 15 Oct 2026 03:20:08 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:5a:01:b2:34:42:69:b8:86:84:4e:a6:e8:18:d6:60:a3:bb:8c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:20:08 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=c7e84ce0ddcda18e519c8edb7c532c2577d4dc11847a01d7b30e473addd8d005, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:53:ff:63:70:dc:86:be:73:ab:c8:08:1e:
d5:0a:20:89:41:e5:4b:a2:86:bb:40:3e:d5:b1:cd:
0b:df:38:e0:0e:17:88:ae:57:2b:f7:c5:55:df:5d:
cb:c8:2c:d5:ed:f7:08:4b:a8:7a:99:9b:4d:5d:6a:
e2:18:d3:2c:dc:84:ad:88:99:63:e7:e4:70:05:ad:
3a:1f:8d:e4:55:dd:37:66:f1:7a:22:74:64:fe:19:
82:b4:4d:d0:bd:0a:8c:e3:c8:6a:22:b4:6b:ef:2b:
c6:2d:ed:4f:dc:96:3f:a1:f1:63:6b:a6:ad:89:d4:
2b:69:2f:10:9a:10:76:f4:de:4e:22:eb:1d:97:2c:
84:da:ef:17:c8:60:81:66:4e:5b:8d:36:77:15:fb:
a5:72:26:38:e2:ea:94:0c:a5:7e:d9:7c:6c:8a:e7:
ca:bb:cc:42:4f:d9:3b:d4:b0:34:d8:38:b9:6e:86:
b2:8e:ad:5a:e5:2e:17:6c:03:85:93:c2:6f:a5:1c:
da:cd:95:a7:20:57:ca:c3:ff:62:2c:cf:3a:b0:cc:
10:9c:56:56:44:28:65:cf:0b:f9:a3:20:33:d1:62:
05:eb:4f:58:f5:c7:fb:6f:81:f1:cd:36:dc:35:91:
56:88:d6:39:d1:aa:91:fe:fa:49:7d:16:b7:28:e9:
47:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BA:37:76:8C:B0:D9:F4:3B:CD:5A:BF:A5:5E:C8:2C:82:BA:90:6E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35fbae76-0646-43e5-826f-114b4990545e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.168.0/21
Signature Algorithm: sha256WithRSAEncryption
48:15:18:ba:6e:43:f1:3a:5b:73:ae:28:2d:d6:62:60:1b:a3:
d9:00:ca:96:9a:67:ee:ea:b6:1d:21:73:26:98:d0:c2:26:18:
99:31:d1:4e:c2:0e:dc:cb:e9:5b:8f:09:08:5a:65:8a:b1:ea:
d9:fd:e4:8c:34:d3:6f:ca:7a:2e:61:c6:f1:cd:5a:41:15:63:
4c:9c:69:70:8d:1f:c6:1f:91:6b:41:58:b1:d1:5b:0e:a9:cb:
39:16:8b:99:6b:41:ac:75:57:2f:10:77:fb:7e:b8:77:25:6a:
69:1c:4f:f2:a4:8a:ad:77:8c:d3:04:71:a8:df:80:89:20:b8:
72:f7:41:dc:7f:58:26:8a:27:e9:af:e6:0d:32:21:c3:e3:aa:
62:ff:16:99:8d:ea:af:0b:52:9a:3d:77:15:0a:f7:10:87:d1:
cd:58:3b:36:cd:2d:37:68:a6:b4:b7:27:92:ae:e5:e0:aa:c3:
1c:73:f6:b8:1f:f4:da:2f:b9:5c:dd:5a:8e:93:a6:2d:ef:84:
49:f7:0d:02:02:78:cc:32:31:3a:7f:b3:9b:b5:40:7c:b7:f7:
81:e7:14:f5:8d:5f:9c:47:d6:b6:87:4f:f1:a1:ef:c5:4f:ce:
41:cb:53:c3:03:ef:56:c2:96:dd:8c:1c:0c:b6:77:dc:9c:ef:
09:eb:58:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:27:20 2026 by rpki-client