Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a472a17f-cded-45fb-a444-3393023f0b36.roa
File: a472a17f-cded-45fb-a444-3393023f0b36.roa (raw, json)
Hash identifier: Dwmsyqsk/ta/9ciKhdvptm6jaLFUg+8VwoWogVXGW0I=
Subject key identifier: 95:D9:E1:B9:D3:F1:0F:D8:46:50:43:0E:AD:56:59:29:52:20:B7:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5210845A9D1CE43105552D2BD9A9D2A372D4CA5C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a472a17f-cded-45fb-a444-3393023f0b36.roa
Signing time: Thu 15 Oct 2026 03:30:29 +0000
ROA not before: Thu 15 Oct 2026 03:30:29 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:10:84:5a:9d:1c:e4:31:05:55:2d:2b:d9:a9:d2:a3:72:d4:ca:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:29 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=a5dda42e0fae4ee62e8d1f647c8e169424c76ee20c7bb17c875ebbc57abb037e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:6c:12:23:b9:fc:dc:4b:d3:98:a8:0c:9c:
ec:55:a8:f4:a7:11:e2:06:6f:8b:bc:b8:9e:ff:50:
6d:fc:70:80:64:24:29:b2:60:c2:78:9d:f5:8c:53:
02:16:91:bd:e2:e5:6c:6b:d5:23:b3:5e:a8:49:f1:
d3:51:08:44:3a:eb:f2:5a:ef:22:2d:21:11:3d:27:
7e:ee:a8:8b:4d:18:7b:e3:54:31:33:ef:e8:87:08:
b0:06:08:39:49:13:1b:c5:ef:51:5a:ff:e7:64:97:
8f:86:0e:26:fc:71:85:56:6c:87:79:f7:94:45:36:
eb:d2:f2:72:c3:06:ce:db:3e:a0:bf:32:91:c8:10:
bb:b9:e5:73:41:74:80:f3:27:fa:90:69:4d:0e:b4:
87:c8:a5:d9:42:b4:b4:11:e7:02:78:f5:00:61:21:
03:82:31:61:9e:65:c3:d0:ac:71:44:62:99:f6:83:
b8:35:3f:b4:7e:33:fb:32:ae:1c:90:6d:7f:60:61:
e9:07:88:ce:a0:78:ca:ee:a2:5a:8b:53:e0:fb:0a:
65:36:b3:9c:0f:e6:a7:70:e7:2c:ab:27:87:d4:4f:
da:5f:08:50:cb:09:c2:ae:c2:2f:c8:5f:56:1a:37:
d6:3e:89:dc:a8:4c:3d:43:b4:1a:ac:f4:d0:45:d5:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D9:E1:B9:D3:F1:0F:D8:46:50:43:0E:AD:56:59:29:52:20:B7:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a472a17f-cded-45fb-a444-3393023f0b36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.208.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:ca:3c:99:dd:53:5f:08:88:52:c0:be:10:4e:25:10:5f:40:
9b:fe:8f:e7:f7:e0:9e:b7:88:45:d3:18:4d:f2:ea:f1:e3:f1:
0b:6b:7b:64:0f:46:df:02:56:b0:38:b5:a2:5a:af:df:54:52:
f5:8a:bb:21:e8:52:99:00:26:09:3d:19:91:f1:af:0d:b4:9c:
9e:40:a1:2c:28:3c:9d:56:cc:61:46:40:53:c4:03:48:75:d8:
db:b0:b0:5b:e1:ec:60:21:f6:0d:1d:30:c4:37:48:0c:bf:1b:
8c:7c:a9:a6:a8:a3:f5:55:c1:fc:39:f3:3e:75:33:58:f0:c0:
e6:4e:9c:f4:49:8b:c5:84:ee:3b:b1:71:5c:48:b6:19:6a:ce:
ba:96:1f:08:c8:af:4c:5a:43:28:71:fe:6a:9f:15:4b:dc:46:
db:09:c5:13:f3:d8:04:ea:f7:c4:bd:aa:72:2b:4a:ab:8e:ef:
ca:bc:28:a7:38:87:bb:f6:ca:f5:fa:b0:7e:41:2e:db:d7:c1:
55:0a:5e:d5:2a:07:a2:47:13:b3:25:9d:80:cf:ff:ca:cc:c4:
76:dc:b6:89:e6:7a:a7:2c:b5:7c:4d:d0:61:de:cd:0e:6b:f6:
f4:12:32:5f:ac:f3:dd:dd:69:18:ff:7b:bc:73:00:a4:60:c5:
60:b8:07:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:04 2026 by rpki-client