Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/968c7897-1d8d-4c3a-b38e-6602ae947f34.roa
File: 968c7897-1d8d-4c3a-b38e-6602ae947f34.roa (raw, json)
Hash identifier: a/jAWUAXN5mktIYmFsiLExdEdUIFgNg8GySo8PEj+Po=
Subject key identifier: F8:F1:F6:5D:21:2C:33:C7:88:56:E6:E0:8F:5D:B6:56:7E:85:F4:3A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4A7DD549B4A87ED0CD8DD86763D00E70DA5548B5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/968c7897-1d8d-4c3a-b38e-6602ae947f34.roa
Signing time: Thu 15 Oct 2026 03:30:30 +0000
ROA not before: Thu 15 Oct 2026 03:30:30 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:7d:d5:49:b4:a8:7e:d0:cd:8d:d8:67:63:d0:0e:70:da:55:48:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:30 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=0ecf4fdcdabf5f3ddd666679f878990e5565c17d12ea75bf06d265f675bbdbb1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:34:51:20:d0:64:11:e8:50:cf:52:91:09:
62:ea:37:04:c7:84:40:5e:1f:c4:11:20:65:6f:87:
51:fd:75:ce:d2:2f:c5:2d:4d:09:7d:d2:46:46:fc:
1a:3d:e9:40:81:fd:01:18:d0:83:cc:a8:f9:53:3c:
88:38:21:82:bf:3f:fb:4d:c6:1b:e8:3d:cc:08:e8:
a0:74:59:12:6b:eb:ca:2f:ab:21:9b:ff:db:26:f1:
1e:e8:60:bd:7c:1e:a9:2f:e2:84:9b:52:cb:8e:f5:
f7:eb:a5:05:75:d5:5a:60:bb:ad:36:fa:78:1e:8e:
24:e4:40:3c:bb:4b:40:34:d5:2c:dc:d7:3f:6a:30:
b1:30:b3:38:f0:7d:3f:13:6e:c4:83:d7:9a:bd:f5:
2f:19:c0:df:2d:bb:a6:3e:a6:0f:a6:4e:ca:60:a8:
97:58:e2:e4:b1:58:22:b9:05:ed:1b:84:a8:dc:9d:
69:b2:43:e0:a7:a1:4b:32:e6:a9:4a:f7:d4:3a:e9:
9e:2d:37:e6:37:f5:d3:10:ef:34:e8:b2:fd:18:94:
12:c5:5f:f2:5b:fa:e2:01:26:87:23:ac:d3:23:0a:
d2:b2:d1:48:d1:d6:23:c0:aa:a0:a0:a1:02:2b:82:
43:23:d1:99:ac:47:b2:72:aa:22:b8:ad:b5:7b:8f:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F1:F6:5D:21:2C:33:C7:88:56:E6:E0:8F:5D:B6:56:7E:85:F4:3A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/968c7897-1d8d-4c3a-b38e-6602ae947f34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.208.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:aa:3e:f0:b6:59:67:2e:2d:d6:43:d2:9b:b9:6a:98:77:4e:
81:b3:b1:f6:7b:90:47:4f:17:5e:26:bb:37:90:6d:69:3a:45:
39:af:f4:10:f9:9d:6d:f5:60:9c:be:01:26:bb:36:ef:74:c2:
78:84:07:bf:3e:fb:e3:f1:b8:34:68:98:ad:75:c2:b1:52:79:
4a:a2:7d:c9:48:e9:7f:7b:4e:d8:db:0d:3d:7f:8c:ee:6c:33:
08:de:a7:5c:4b:f5:2c:16:84:f0:5c:7e:00:a7:12:47:a7:1f:
e9:b4:91:f8:e5:d3:b7:57:8c:68:4e:a7:22:a7:f7:6b:e5:e9:
17:3a:eb:0a:a5:10:d4:aa:f6:bd:8d:22:5e:03:bc:f6:34:ea:
0a:3f:b2:5a:8c:56:bd:d8:01:50:25:33:d5:cd:16:db:07:07:
d1:2a:ca:5c:40:7f:d3:cc:70:44:8e:2a:84:67:24:3c:10:72:
7b:7a:ca:7f:b6:24:d1:2d:40:7d:93:99:ea:ec:9b:40:17:b9:
eb:73:33:95:71:4d:cd:73:6f:a9:8e:07:8a:76:21:cd:3c:05:
f0:f0:c2:62:15:aa:1f:6e:d9:f3:75:89:f4:ca:8d:bb:00:f8:
2d:51:05:36:e3:78:a7:5e:6b:b3:fd:1c:5d:7a:36:b1:36:50:
9a:d7:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:45 2026 by rpki-client