Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a472a17f-cded-45fb-a444-3393023f0b36.roa
File: a472a17f-cded-45fb-a444-3393023f0b36.roa (raw, json)
Hash identifier: e8pu4Ub99Q48IVZBTQN0xuLbrvTmgRAp+4M3NmxGL7c=
Subject key identifier: 00:C8:FB:8A:DA:C8:B7:CA:9A:31:EE:EE:6D:6B:8D:26:A9:D7:5F:6A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1D91833BDD9574029FB1C1BAC881BDBD874E49B2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a472a17f-cded-45fb-a444-3393023f0b36.roa
Signing time: Mon 27 Jul 2026 03:30:37 +0000
ROA not before: Mon 27 Jul 2026 03:30:37 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:91:83:3b:dd:95:74:02:9f:b1:c1:ba:c8:81:bd:bd:87:4e:49:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:30:37 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=1680b8cdcb18fad6b31225d20f67d98afc1e34641bad3689bd9c6b1017b849bb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e2:02:c6:3c:8d:87:f8:ff:87:fc:36:74:b3:
00:e0:bd:25:83:16:ff:fb:f1:e6:9f:93:55:9f:18:
82:35:53:5a:c2:b1:db:d7:2a:39:d5:1b:d7:75:31:
5e:83:05:58:22:fb:b7:82:ea:10:92:09:f5:e0:4a:
43:24:3c:c3:8f:58:e0:d2:dd:aa:89:4c:be:54:c1:
b2:1f:7c:c4:94:70:ea:20:35:86:ff:b8:2f:28:bd:
2d:33:bc:c9:85:2f:bf:20:77:46:4c:9a:a8:1a:21:
9d:e8:17:d0:65:e7:22:29:a7:dc:b9:e2:86:ed:63:
f8:48:f2:70:65:75:14:48:2b:4d:65:eb:52:d3:d3:
fd:5b:18:92:50:d7:7b:18:5a:f9:33:b7:0b:b8:fc:
8a:e5:56:49:18:9f:ab:87:65:a5:50:80:bc:85:f8:
6c:5e:aa:f0:f0:a1:6f:54:ba:ba:48:e9:3f:7d:f8:
5d:51:7e:50:d1:01:54:54:6f:58:14:2f:f9:64:b1:
dc:c5:35:b6:81:cb:37:9f:aa:e9:9a:8b:4d:30:a2:
80:f8:1e:8a:60:e6:97:7c:81:65:04:46:b3:f0:2a:
82:4c:1d:90:39:fb:1a:51:7d:13:09:a2:d1:92:84:
8d:54:45:91:f4:26:e0:8f:07:ff:63:88:a0:5a:08:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C8:FB:8A:DA:C8:B7:CA:9A:31:EE:EE:6D:6B:8D:26:A9:D7:5F:6A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a472a17f-cded-45fb-a444-3393023f0b36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.208.0/22
Signature Algorithm: sha256WithRSAEncryption
37:07:01:dc:fa:3a:d5:65:2d:67:5b:6d:5e:75:cc:da:e5:03:
1d:67:aa:d8:9d:0f:c0:4c:2b:f8:db:9f:31:66:3a:41:0d:cb:
52:c9:0e:5f:12:ca:66:77:28:75:e5:37:55:91:8d:ee:c8:31:
5e:e8:a0:42:aa:42:48:fe:7b:ec:1e:c8:96:00:80:d7:81:20:
56:59:3a:65:eb:43:ac:74:8a:3f:3f:2b:f6:3a:64:6f:db:0c:
33:a8:7c:74:f3:de:06:1c:49:01:bc:4c:c6:c5:23:8e:9e:15:
34:41:1b:7e:c0:b3:7f:24:29:21:7b:ae:ba:c3:62:3f:aa:73:
5e:f5:17:31:e8:92:7d:ab:3c:e0:e9:1b:4b:59:12:ea:04:0c:
96:13:c4:61:aa:32:0e:82:23:47:93:11:c6:09:6a:83:23:1e:
04:24:3b:91:9e:a7:ce:cb:b1:f1:2c:4d:32:f7:09:e4:37:57:
d1:24:f8:76:a6:10:47:b6:4d:5d:1a:b7:44:3f:f8:14:c8:b4:
b8:08:64:99:1d:ec:eb:86:6c:fc:68:51:31:1c:4b:c5:27:db:
94:a5:5f:4b:03:bb:3b:66:25:0e:bd:2e:86:26:13:34:f4:e3:
de:35:24:12:dd:39:8a:28:03:35:bb:31:67:d1:c5:fb:6e:1b:
0a:29:23:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:17:26 2026 by rpki-client