Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e1e6e69-6595-40ff-9430-d53f22670630.roa
File: 6e1e6e69-6595-40ff-9430-d53f22670630.roa (raw, json)
Hash identifier: /6R/y874k/DLY1vEgHfN9nL4Zve9fnZQwjqPi5kXl0E=
Subject key identifier: 27:59:00:DC:09:DE:8C:3F:B0:A1:2C:B4:7A:B7:39:D1:BF:08:1A:B7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67B9EBC6223E4DC7ED7F3ADEE0DCEC3BB05E4C09
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e1e6e69-6595-40ff-9430-d53f22670630.roa
Signing time: Mon 27 Jul 2026 03:30:35 +0000
ROA not before: Mon 27 Jul 2026 03:30:35 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b9:eb:c6:22:3e:4d:c7:ed:7f:3a:de:e0:dc:ec:3b:b0:5e:4c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:30:35 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=b09ad5d17f29f30797f0d13e75e3d42c0d20ff208630ff0147c03e023624880b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:78:30:77:ed:a6:0b:76:7f:14:9b:25:5c:d0:
2d:e0:4f:45:60:6c:1b:46:fe:90:c7:f6:3a:c0:ce:
f6:2f:40:e8:f5:ce:d6:41:0f:83:2b:83:83:aa:80:
5f:0c:4d:79:d7:74:58:04:41:7a:bc:0d:ae:bc:ea:
f1:f1:b7:17:fd:53:4a:9f:35:cb:c4:56:f4:30:70:
98:31:db:37:c5:11:7b:86:a3:b3:14:b7:b0:50:27:
5b:e9:16:8d:b1:68:66:0f:df:c2:4d:fe:3a:8b:11:
56:40:0b:1c:4b:4b:8a:fa:e3:53:e5:97:4b:a2:5a:
d8:6b:40:dd:2e:5f:15:78:a9:d1:1a:7f:90:56:12:
44:f5:eb:83:55:2e:6b:15:14:60:a5:3d:1f:0a:76:
98:17:13:e7:fc:aa:f9:c7:e2:f4:6c:8c:02:58:ff:
9a:bd:a8:6c:d2:6a:10:7d:c5:4d:37:87:f4:49:4a:
2a:a8:d1:77:17:0d:4e:97:95:8e:b1:11:6e:c6:44:
a7:7c:3d:d7:c0:ad:14:ce:e8:b9:bf:fb:5a:a3:bf:
d2:91:7f:be:99:b8:cc:22:3d:c1:27:b0:28:a2:88:
bc:33:39:41:02:dd:cf:88:64:38:d3:c0:1d:fe:84:
aa:95:af:fa:45:58:02:e7:d0:37:8c:dc:5f:56:23:
8c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:59:00:DC:09:DE:8C:3F:B0:A1:2C:B4:7A:B7:39:D1:BF:08:1A:B7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e1e6e69-6595-40ff-9430-d53f22670630.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.72.0/21
Signature Algorithm: sha256WithRSAEncryption
68:e7:2a:ca:9f:d5:d9:8f:de:25:0f:e3:d4:24:58:fa:8b:2e:
a9:9a:b3:4c:47:87:7e:d1:37:e6:51:79:3e:94:0c:2a:f3:b6:
11:d8:62:b7:b1:8f:4f:04:56:2a:1e:f1:e6:40:70:70:38:bc:
1d:84:d2:53:55:04:7d:bb:3f:11:02:0f:ba:b2:14:7a:df:76:
47:4c:bb:08:dc:61:34:aa:1e:b6:18:43:c3:64:b3:83:50:08:
b1:ca:1c:b7:8f:2f:a6:17:d0:50:fc:d0:a2:f1:11:82:fe:ec:
dc:ed:03:33:3f:ab:bd:3d:73:80:98:94:37:b1:09:22:3d:b3:
21:eb:bb:b1:2e:88:08:ba:e2:91:06:59:c5:01:32:e8:f9:b9:
38:bc:5d:64:5b:36:fe:a3:69:4d:b0:78:46:92:0d:91:72:88:
13:c5:04:94:8c:cb:c9:79:c2:6c:1f:51:4f:9f:b3:db:8c:7b:
68:ca:50:4c:f8:f2:b6:d5:04:a7:eb:4d:4c:ec:7b:9f:6c:68:
07:c0:08:b7:ef:39:35:1b:62:be:b3:f2:85:c8:96:0e:c1:71:
15:23:84:59:79:7f:d5:84:9e:d2:e0:67:86:19:64:1d:89:67:
7d:27:71:c9:2e:5f:99:0f:46:c3:38:d4:ed:7f:be:15:27:17:
f1:f7:94:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:19:50 2026 by rpki-client