Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46a21ff8-4dea-4da4-a276-6b424d4e3bed.roa
File: 46a21ff8-4dea-4da4-a276-6b424d4e3bed.roa (raw, json)
Hash identifier: 22k3Cm9D+9GZK1SwPSUBNxfWWnA0OMNuLiV/umt0OT0=
Subject key identifier: 6B:79:C2:4F:C3:6A:78:EC:98:BB:8A:16:56:DD:9D:40:89:32:1B:8B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 471CF7C41894CD6DB7D29593577428C6AF7BF7D3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46a21ff8-4dea-4da4-a276-6b424d4e3bed.roa
Signing time: Thu 15 Oct 2026 03:30:56 +0000
ROA not before: Thu 15 Oct 2026 03:30:56 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:1c:f7:c4:18:94:cd:6d:b7:d2:95:93:57:74:28:c6:af:7b:f7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:56 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=0c6b29c1672230ce5aa1d3bd89965db1146466874be68c851ae3647531e0a6ae, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:e6:13:8d:4c:cd:1d:18:af:5b:d4:1d:94:
ec:7b:6c:95:8c:54:32:fe:17:77:e9:0b:ec:d8:e8:
3e:4b:c9:25:4b:7a:a2:73:40:79:82:18:1b:38:9e:
64:99:4a:4f:09:77:16:9e:02:4c:9d:fe:91:2e:36:
43:48:1a:38:70:b7:99:23:3e:ce:92:e7:a7:79:48:
1a:bc:a8:65:fe:d2:ff:a2:a9:ad:13:21:fe:0f:3a:
58:04:0a:ad:05:e6:40:8a:d0:f9:94:0f:1a:78:c3:
fa:22:97:2e:fd:60:27:e6:60:8c:f6:a5:c0:7b:df:
db:7d:69:42:05:52:68:c5:8c:15:07:b1:f1:d4:2e:
ac:a8:7d:7f:47:81:d3:03:0c:fd:be:95:be:27:a2:
ec:c6:5e:d9:87:7e:6a:10:23:ca:b8:c9:2c:cf:b4:
40:88:27:5e:eb:d1:b6:1b:87:fc:43:49:64:8f:5a:
4b:87:4c:03:a5:83:26:86:03:ac:29:8e:0f:c6:e9:
04:20:c8:ae:aa:88:fd:09:5f:0b:65:8b:ff:de:9b:
8a:be:45:76:bc:67:77:f8:17:9d:6b:86:02:e5:50:
c4:9a:45:c1:e6:38:26:11:a3:9e:43:70:0a:73:8e:
43:58:eb:f5:41:23:77:1c:42:98:f7:d4:8e:eb:8f:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:79:C2:4F:C3:6A:78:EC:98:BB:8A:16:56:DD:9D:40:89:32:1B:8B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46a21ff8-4dea-4da4-a276-6b424d4e3bed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.224.0/19
Signature Algorithm: sha256WithRSAEncryption
48:eb:90:60:ee:a8:2e:f1:17:81:21:0b:3e:45:4e:26:26:d9:
f7:40:2e:de:c3:a2:78:c1:32:1d:c7:2a:c4:e2:45:1c:ff:45:
f6:90:c4:f2:45:8e:05:a9:ed:28:fc:bc:81:34:be:bd:86:ec:
0c:63:66:5f:93:43:24:eb:33:6c:03:b2:be:06:71:f7:86:09:
42:fa:2c:cb:af:11:49:f2:e1:27:50:94:68:6b:36:69:55:cf:
65:05:43:4d:a7:2d:1f:d8:94:cf:67:12:36:7f:6e:21:23:b8:
95:9f:06:eb:03:db:56:a9:c2:c6:cf:fc:97:64:43:21:31:68:
39:eb:7e:75:3d:64:62:6d:1f:e4:48:bf:e4:56:ee:6f:a6:19:
40:d9:f7:2e:6e:81:d1:f1:33:c6:95:05:ac:08:bc:8e:a8:fd:
52:fe:2b:97:48:ec:16:34:1e:1e:1b:e2:21:5c:00:b8:da:7a:
ef:ad:e7:e0:c3:f9:fe:a6:21:65:df:ef:70:ac:48:13:68:80:
cd:5b:d6:fe:74:73:1b:86:96:34:07:f9:14:75:e2:8d:59:4f:
e6:38:33:e0:31:87:b1:17:5d:87:c1:40:df:a8:76:a6:13:9b:
00:f4:35:f2:4a:b7:09:be:5d:db:03:9b:fa:fe:bc:0e:e1:c1:
ee:0c:79:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:35 2026 by rpki-client