Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad1fa1a4-44d6-4a4e-82c4-f32d315830db.roa
File: ad1fa1a4-44d6-4a4e-82c4-f32d315830db.roa (raw, json)
Hash identifier: 2n/OvN5Oiq+gcYeb7glMOBjpXVMEuB7/LDn9HIMFaXk=
Subject key identifier: 16:3D:25:72:48:D4:A7:89:85:6D:F0:16:96:E1:11:73:0E:B5:60:FE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 98351422E23E65F1FF1FC688ADCD6354A09D3D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad1fa1a4-44d6-4a4e-82c4-f32d315830db.roa
Signing time: Thu 15 Oct 2026 03:30:29 +0000
ROA not before: Thu 15 Oct 2026 03:30:29 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 46.51.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
98:35:14:22:e2:3e:65:f1:ff:1f:c6:88:ad:cd:63:54:a0:9d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:29 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=f83d349e6c23d13ea08466e4d1c2ade3417e91b92655b4d674eaba6cba403d14, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:e9:05:02:80:04:9b:5d:b3:4c:6e:7e:53:
bf:0e:64:a6:58:51:d3:cc:93:d8:9d:0b:10:71:ce:
ae:a3:3b:43:db:a6:e3:15:9d:bc:38:8d:68:aa:dd:
37:2f:a6:bb:ef:9f:e8:61:d9:a3:98:e8:0b:9b:ec:
f6:66:fe:66:92:ee:d1:af:f2:07:02:3f:ea:2a:25:
26:f5:11:d1:ca:07:c6:00:25:b3:82:b1:70:1d:54:
70:5f:a1:09:f0:89:8c:d5:93:fc:ee:59:c3:57:2f:
56:cc:ed:21:f3:dc:d6:88:66:6d:67:93:1a:67:ca:
87:c7:27:de:d6:44:4e:7a:21:63:44:c8:2b:28:45:
df:23:45:c2:19:8c:22:66:ab:e9:00:90:72:c8:c4:
24:02:fd:bf:c5:38:dd:e9:d0:95:79:88:a1:f2:4d:
08:71:77:da:e6:9c:c6:d7:ce:8d:f4:d6:49:f1:85:
aa:05:a9:fe:c8:56:d8:74:50:0d:30:c2:97:dd:a7:
86:cd:e6:95:19:5b:8e:8f:8e:a4:94:4c:30:ab:c9:
1e:f8:b1:3d:d3:97:0d:a8:e5:8b:b0:69:c1:01:a9:
9e:42:2b:1b:b5:d9:00:ef:52:ab:1c:57:96:f1:84:
c9:7f:c9:54:5a:78:06:85:65:91:da:3b:83:c3:6d:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3D:25:72:48:D4:A7:89:85:6D:F0:16:96:E1:11:73:0E:B5:60:FE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad1fa1a4-44d6-4a4e-82c4-f32d315830db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.208.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:14:37:cc:89:ce:c3:f9:2a:ea:48:a2:b1:c7:31:51:d8:dc:
49:c7:1a:fc:10:aa:57:89:0c:e3:2e:dc:fe:8b:a5:62:f8:df:
63:8d:96:33:39:5e:08:c9:f5:73:68:0f:22:27:44:12:2c:5e:
c2:bb:6a:4b:c9:76:5b:c5:fd:4f:b0:2d:4c:57:ef:07:11:ec:
a1:3c:08:69:c4:ed:bf:e4:de:eb:20:fc:28:d4:0f:98:60:ad:
22:a9:c3:c1:fc:54:76:12:df:af:13:ef:3c:a0:26:2b:a5:f0:
ff:38:45:54:d0:3d:f4:34:73:98:0a:dc:97:05:f2:7c:a4:e5:
38:30:9c:09:f5:64:de:8f:a0:ff:32:f2:9d:cb:b4:dc:36:bf:
a6:a7:b1:f5:60:15:e3:be:0b:cc:42:ce:7a:0d:6d:9e:5c:8e:
d4:fe:1f:c7:f7:a0:78:13:89:59:50:d8:fd:2f:e5:cf:74:c8:
66:ed:0f:c5:01:e4:4c:e9:1a:63:22:99:16:f7:d9:bd:9a:98:
88:af:a4:67:60:5c:1c:0f:1e:84:5b:86:00:ac:c3:86:36:d9:
08:3f:82:1c:24:aa:b1:88:6f:a7:ba:66:38:30:d1:7b:e8:88:
dd:9d:c7:c8:bd:b3:e5:23:ab:52:01:09:86:cc:e6:c3:b8:40:
ab:e1:bf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:35:49 2026 by rpki-client