Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68677111-f27d-417a-8b43-a65f84482997.roa
File: 68677111-f27d-417a-8b43-a65f84482997.roa (raw, json)
Hash identifier: FiTTHhZpsFMQBxManmi9u2EhcE057E1Q2HW5J6l4E7U=
Subject key identifier: 02:ED:29:63:62:64:5F:44:BD:D9:A9:7D:7A:22:0E:38:9B:60:24:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 77E6F352594915E0615317CE37680DB702204447
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68677111-f27d-417a-8b43-a65f84482997.roa
Signing time: Thu 15 Oct 2026 03:30:15 +0000
ROA not before: Thu 15 Oct 2026 03:30:15 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e6:f3:52:59:49:15:e0:61:53:17:ce:37:68:0d:b7:02:20:44:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:15 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=b45d8b50f204eae2cb0aa9c81f3266e26ef89c622ad69249cc014556af58f751, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fe:89:5d:e7:d2:f8:de:27:60:16:bf:8b:b2:
1e:7c:a4:1f:e0:40:63:1e:f7:b8:97:aa:f3:68:3b:
97:2f:94:b1:0b:c7:1e:a9:2c:4a:de:ae:dc:fb:79:
f1:c7:a7:f7:68:bb:03:93:01:c3:a7:85:3b:8e:88:
9d:4a:0a:78:37:f0:5d:6b:3c:67:48:4e:83:d3:9f:
63:95:0a:a9:8f:17:b0:98:07:b4:8f:0d:48:a6:a7:
59:80:f2:89:40:46:84:95:5f:0e:f9:df:58:d7:ce:
65:81:16:bc:db:17:fc:6a:42:07:70:e4:ed:d9:ea:
1a:d5:0c:8c:72:5b:6d:d4:ad:7e:19:4b:4a:64:71:
38:d4:b8:81:04:21:08:4b:02:d8:09:d4:6b:ab:be:
cc:5a:8f:db:d3:a8:2f:84:18:30:eb:53:4a:25:d1:
fb:0d:ce:61:0e:8c:c6:59:1d:42:ca:c3:5e:72:66:
59:33:a8:61:59:e4:36:7b:77:94:c6:7b:61:d4:73:
cf:35:40:e8:5f:d0:c3:eb:39:1a:80:da:87:ce:f9:
ca:23:d9:e9:ee:c4:32:ee:27:00:9a:ff:65:e1:e4:
20:de:aa:f9:26:ad:ae:68:66:5d:da:07:8d:01:fb:
4e:fe:43:a4:88:43:f6:2c:63:8a:6d:54:cf:cf:a8:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:ED:29:63:62:64:5F:44:BD:D9:A9:7D:7A:22:0E:38:9B:60:24:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68677111-f27d-417a-8b43-a65f84482997.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.192.0/19
Signature Algorithm: sha256WithRSAEncryption
61:d1:a0:cc:8b:e3:48:1f:75:c1:a5:bf:0c:d4:c7:47:a2:ed:
e1:9d:9c:dc:e7:a6:15:7a:1c:44:d0:fd:19:ec:44:ce:2f:c7:
8d:1d:d3:ab:a6:22:09:48:b9:15:4d:f9:22:30:ab:5d:d0:d3:
69:60:1d:8f:dc:40:58:8e:a2:7b:f3:16:57:4f:9c:7f:02:6f:
4a:c5:d4:ac:bf:30:9f:fb:6c:7a:8b:47:20:4e:47:26:fe:f6:
36:bc:81:c9:74:da:01:8f:d7:71:f6:7b:67:6a:c5:71:e0:7e:
57:fe:e4:bd:d1:a4:b2:a1:c6:8a:1e:35:e0:df:81:5d:6b:0d:
6f:96:b7:30:5d:85:57:ec:4b:e7:70:28:b3:05:f2:b8:28:51:
db:29:2a:c5:11:9a:34:1b:27:f3:c4:73:df:97:14:24:45:65:
79:d1:ef:39:e9:da:d5:62:b3:f7:25:49:77:a6:15:67:18:ed:
89:b7:6d:43:64:f7:4e:67:c4:0d:0d:c7:b7:56:67:3f:79:64:
fa:72:19:be:70:59:b9:6c:9a:80:09:9b:c7:fa:09:11:9a:56:
8d:81:9a:18:3c:c1:ef:5a:9c:30:2c:72:ce:26:26:72:70:42:
33:35:d6:6c:0b:34:d1:45:74:02:2b:83:34:08:40:aa:b5:23:
c4:ee:62:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:50:20 2026 by rpki-client