Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b6ea2c3-c25b-492c-9547-7c5ddb75d15f.roa
File: 9b6ea2c3-c25b-492c-9547-7c5ddb75d15f.roa (raw, json)
Hash identifier: 5QjJn9O6WtIDpK88MgJtli6yBwGaiRXPoW73OoYX9uM=
Subject key identifier: BF:3F:9F:7C:63:02:2E:C1:3B:33:3C:EB:C8:2A:78:BC:D3:72:EA:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 292F974ADF405975E71B55936D9E6545B38C9F4E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b6ea2c3-c25b-492c-9547-7c5ddb75d15f.roa
Signing time: Thu 15 Oct 2026 03:20:08 +0000
ROA not before: Thu 15 Oct 2026 03:20:08 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:2f:97:4a:df:40:59:75:e7:1b:55:93:6d:9e:65:45:b3:8c:9f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:20:08 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=dc9a129cbf2a89511ba06f2fee70a543845c3544da279d03d213dbbd96bd521f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:4f:ac:ea:65:3b:ba:d4:92:79:39:a7:5a:
f7:07:68:06:e2:2b:c9:5a:c1:fc:d2:7e:22:a4:42:
8e:44:32:c9:42:f6:eb:69:d5:0f:69:cb:3b:cd:02:
34:62:18:c0:66:1e:a4:df:e9:c8:26:21:a9:0f:17:
9d:6f:5a:54:a6:a9:67:7e:82:19:a5:aa:c7:32:b4:
99:7d:9d:55:92:28:20:0f:dd:3f:9c:cc:86:76:19:
a9:64:28:ec:b7:8b:5e:95:40:3f:92:86:3a:eb:d9:
aa:0d:52:5d:cd:34:74:71:23:f8:5d:92:12:b9:55:
bb:01:c7:f3:e5:25:29:c9:1d:47:ce:75:1b:c4:98:
c4:5d:99:3e:09:e9:4e:97:3d:1c:af:66:b4:0b:d7:
ec:54:15:af:19:bd:77:c1:56:e5:19:ef:8c:a8:7c:
9a:41:58:3e:47:c0:9d:3c:01:bd:81:2a:11:63:3e:
00:72:d9:ec:15:42:73:8a:a6:84:55:6a:1d:2a:a3:
c6:fb:2c:d3:9b:8c:12:0a:6b:17:91:e0:45:3c:1d:
cb:b9:c4:8c:e3:1a:b4:11:23:c9:6e:e9:e1:78:60:
90:9f:b9:c1:e2:ed:90:e9:07:36:1b:d7:87:8e:a1:
84:d5:22:03:c9:ca:99:83:47:4b:d9:48:7a:ad:bf:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3F:9F:7C:63:02:2E:C1:3B:33:3C:EB:C8:2A:78:BC:D3:72:EA:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b6ea2c3-c25b-492c-9547-7c5ddb75d15f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.216.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:c1:e3:73:fd:ac:8b:12:f2:91:8b:c0:c9:a3:bd:f4:24:04:
f1:be:c0:b8:c5:c4:51:c7:32:ee:61:08:89:c3:6a:ae:9a:3a:
53:d7:a4:90:ed:fb:a6:b0:4c:05:e2:10:2a:42:76:9b:4c:30:
7c:00:56:32:cc:9e:30:c6:86:57:09:9a:88:48:ea:a5:41:c7:
cd:ff:90:68:9a:9a:fc:43:03:d3:d0:6d:8e:c6:ba:9b:af:ad:
d8:d9:39:6d:a7:1b:fb:d4:84:36:09:06:c6:20:88:72:b1:c7:
0f:06:f5:2a:03:d5:a9:8a:1e:4b:51:58:34:81:fd:86:0b:54:
83:df:bf:71:e3:48:87:6b:8a:5d:49:45:c0:20:ac:5c:03:b6:
75:35:b4:d8:91:56:13:e9:ae:4e:c3:05:54:7a:ec:cf:fc:d6:
58:b0:f5:c3:9a:e8:f3:48:f6:6f:7c:d6:fc:fa:0b:dd:80:fc:
70:1d:9b:50:59:fe:ab:0f:73:7e:97:93:90:ac:d2:7d:68:7b:
aa:83:a6:16:cd:13:09:0b:4e:5f:d1:cc:3e:65:35:84:cd:e5:
ed:41:b1:cd:70:67:6c:04:1e:5b:89:c5:15:79:85:c9:80:4a:
fb:b4:35:3d:8e:1a:72:15:44:7a:c9:60:c1:08:e5:7b:2b:81:
68:04:ff:be
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUKS+XSt9AWXXnG1WTbZ5lRbOMn04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTUwMzIwMDhaFw0yNzAxMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQGRjOWExMjljYmYyYTg5NTExYmEwNmYyZmVlNzBhNTQzODQ1YzM1NDRkYTI3
OWQwM2QyMTNkYmJkOTZiZDUyMWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJYdT6zqZTu61JJ5Oada9wdoBuIryVrB/NJ+IqRCjkQyyUL262nVD2nLO80C
NGIYwGYepN/pyCYhqQ8XnW9aVKapZ36CGaWqxzK0mX2dVZIoIA/dP5zMhnYZqWQo
7LeLXpVAP5KGOuvZqg1SXc00dHEj+F2SErlVuwHH8+UlKckdR851G8SYxF2ZPgnp
Tpc9HK9mtAvX7FQVrxm9d8FW5RnvjKh8mkFYPkfAnTwBvYEqEWM+AHLZ7BVCc4qm
hFVqHSqjxvss05uMEgprF5HgRTwdy7nEjOMatBEjyW7p4XhgkJ+5weLtkOkHNhvX
h46hhNUiA8nKmYNHS9lIeq2/my8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBS/P598
YwIuwTszPOvIKni803LqozAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWI2ZWEyYzMtYzI1Yi00OTJjLTk1NDctN2M1ZGRiNzVkMTVmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi6J2DAN
BgkqhkiG9w0BAQsFAAOCAQEAmsHjc/2sixLykYvAyaO99CQE8b7AuMXEUccy7mEI
icNqrpo6U9ekkO37prBMBeIQKkJ2m0wwfABWMsyeMMaGVwmaiEjqpUHHzf+QaJqa
/EMD09Btjsa6m6+t2Nk5bacb+9SENgkGxiCIcrHHDwb1KgPVqYoeS1FYNIH9hgtU
g9+/ceNIh2uKXUlFwCCsXAO2dTW02JFWE+muTsMFVHrsz/zWWLD1w5ro80j2b3zW
/PoL3YD8cB2bUFn+qw9zfpeTkKzSfWh7qoOmFs0TCQtOX9HMPmU1hM3l7UGxzXBn
bAQeW4nFFXmFyYBK+7Q1PY4achVEeslgwQjleyuBaAT/vg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:04 2026 by rpki-client