Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e1e6e69-6595-40ff-9430-d53f22670630.roa
File: 6e1e6e69-6595-40ff-9430-d53f22670630.roa (raw, json)
Hash identifier: 2/R0AAbeht40nDlr3EUBFOm4SwECliP2Nns5rT/OoJY=
Subject key identifier: CE:6C:C9:FC:C3:9F:28:FF:1F:E7:EB:10:ED:14:69:AD:0F:8A:54:9A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 260B08D565E4BC112DB94A926F90D861013583A4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e1e6e69-6595-40ff-9430-d53f22670630.roa
Signing time: Thu 15 Oct 2026 03:30:27 +0000
ROA not before: Thu 15 Oct 2026 03:30:27 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:0b:08:d5:65:e4:bc:11:2d:b9:4a:92:6f:90:d8:61:01:35:83:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:27 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=f8aaa7b891ab40a98c4cdec4955644ffe97e5cd9392bc1568ec64e7bd1b8a492, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:78:57:f4:d6:cb:36:cd:17:cf:e0:d1:f5:
70:91:0f:28:f9:28:b2:bf:af:ef:e4:2f:4f:2f:47:
92:47:eb:04:c4:1e:5f:57:3a:69:73:cc:37:49:f4:
9e:95:3d:1d:43:fe:ec:57:69:9c:20:42:80:41:c1:
74:7d:e2:89:ab:33:0b:a6:39:2c:20:68:d7:a9:0d:
33:d4:dc:27:e3:bd:56:a5:41:df:64:e7:7a:a7:a6:
4d:8e:a2:96:56:0e:57:37:4c:01:67:ae:1b:d4:7a:
30:e8:34:42:56:c6:b0:28:e3:62:65:2e:aa:d4:55:
9a:4b:cd:f2:cd:ee:b2:06:a7:31:ef:43:9f:b3:63:
34:79:60:10:f3:27:b2:14:38:d9:0f:04:61:73:0a:
9b:52:35:6d:88:61:ea:2b:60:0c:4e:36:22:7a:da:
0a:d3:99:95:76:7b:fc:89:b5:ed:1c:52:13:40:41:
3f:87:c8:a0:34:65:6b:86:b4:26:55:38:a9:bb:4c:
35:a1:a2:91:46:84:e6:6b:b1:b8:86:79:b3:05:f4:
71:88:9e:70:f2:a2:cc:2c:b7:4b:8d:fb:de:a9:d6:
1d:64:2e:e4:cc:9a:89:c6:a7:9e:26:5e:3a:5d:45:
23:22:f3:4b:bf:24:b9:7f:14:88:2b:25:b5:43:d6:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6C:C9:FC:C3:9F:28:FF:1F:E7:EB:10:ED:14:69:AD:0F:8A:54:9A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e1e6e69-6595-40ff-9430-d53f22670630.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.72.0/21
Signature Algorithm: sha256WithRSAEncryption
bf:4f:aa:01:e9:b0:73:1b:0d:f5:78:2d:e0:04:3d:31:a2:85:
49:5b:44:7c:83:ea:40:ff:27:4c:b3:f9:cd:9a:bb:94:80:36:
b9:fa:ad:30:8f:93:db:77:3d:14:8c:3c:b5:1b:15:61:bb:06:
25:c0:d3:07:a2:e6:ef:33:06:91:85:13:6f:08:67:e9:6b:1d:
81:a0:28:63:1e:e3:41:94:18:07:02:cd:a5:70:cf:72:c5:2e:
12:df:57:13:11:77:39:29:b2:5d:5f:b1:b3:42:dc:6a:09:58:
6c:45:b7:15:a0:76:32:f6:33:cd:a6:0b:bc:5e:5b:0e:11:b3:
8d:a0:56:d5:fa:5a:46:fc:dc:5c:c8:4d:10:57:53:fb:65:65:
e0:f1:37:80:a3:5d:77:8d:c9:c2:13:89:d2:6c:4b:d3:db:64:
95:2f:21:da:52:56:5b:74:c8:be:a9:fe:17:c8:22:65:b7:ab:
ef:6b:cc:88:0a:60:f2:bc:07:0a:f2:e8:1d:89:d0:3e:ac:ed:
7f:51:64:d0:8e:86:ae:9b:13:d5:5d:ef:54:a0:06:5a:33:7e:
b4:9e:19:25:29:69:97:6d:5e:0f:77:30:e3:8b:27:7c:f9:06:
40:1c:5b:d2:c5:85:55:b7:f7:28:c9:20:bd:ab:eb:ad:20:9c:
6a:c1:29:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:32 2026 by rpki-client