Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b44363b9-ba48-4913-b8a4-9cd0dc32ba02.roa
File: b44363b9-ba48-4913-b8a4-9cd0dc32ba02.roa (raw, json)
Hash identifier: 0ibEmc3wM1rQanzROsQq9xg7dBP0nqxUp2q6BmSZvZ8=
Subject key identifier: FB:59:44:D9:1C:F2:09:DF:3D:C5:11:86:4B:2A:92:A1:D5:69:B3:F7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 06DF5832F1D8BE6475F85812F0E79376E1C2679D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b44363b9-ba48-4913-b8a4-9cd0dc32ba02.roa
Signing time: Thu 15 Oct 2026 03:20:27 +0000
ROA not before: Thu 15 Oct 2026 03:20:27 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:df:58:32:f1:d8:be:64:75:f8:58:12:f0:e7:93:76:e1:c2:67:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:20:27 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=ada6719601a8d2194b47c99fa5400e4130ea9f7a728666afeaf6804fac13fa70, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:bb:dc:f6:55:92:b3:45:dc:a9:8e:c9:27:
26:97:92:a4:85:e1:a2:a5:87:e0:1b:72:38:96:9d:
9b:45:b1:a8:28:d7:b8:0f:e9:7e:15:60:fb:78:76:
8f:82:33:7f:8a:30:14:d2:f9:d5:fc:55:9f:75:ab:
00:d5:80:32:62:54:3f:79:82:50:63:c4:8f:bb:9f:
55:c3:53:29:d2:60:14:22:2f:f0:a1:aa:92:2c:06:
ee:1e:ea:84:6a:3d:4f:08:c0:cc:30:8e:29:cc:53:
de:d6:00:bf:3b:1e:79:b5:45:c1:f7:e0:8c:18:af:
92:dd:78:b9:a7:29:b9:f9:83:2d:01:85:5f:5f:bc:
0b:be:47:95:bb:00:27:f0:f7:9f:17:f5:5c:ec:51:
bc:37:fa:06:de:2e:40:87:d5:9b:03:d8:35:d0:99:
39:9d:4b:f7:0d:3e:2d:51:07:b4:0e:69:38:15:bb:
b2:67:d6:3c:0c:46:46:55:7b:ca:8b:e5:e8:1e:e0:
cc:be:fd:b2:fb:ce:2f:d5:19:52:69:19:89:c9:31:
f3:4a:da:87:93:d8:b2:45:4d:c3:59:af:70:a5:32:
63:8e:49:3f:70:a8:98:b4:1c:99:2c:ec:54:a8:e6:
d1:18:e8:9a:8d:d6:72:d5:f3:a2:bc:77:11:26:64:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:59:44:D9:1C:F2:09:DF:3D:C5:11:86:4B:2A:92:A1:D5:69:B3:F7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b44363b9-ba48-4913-b8a4-9cd0dc32ba02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.240.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:f9:ef:97:7c:b2:7c:23:50:7a:8d:81:dd:92:6a:c2:16:80:
70:31:68:ac:d1:74:3e:16:11:f2:46:0b:2e:d6:dc:68:9b:9e:
e5:e1:3c:5d:d4:e7:b5:3d:4b:be:d9:0d:70:79:e3:fe:3d:51:
5b:8c:4c:13:02:9a:e5:e8:cf:59:59:83:2b:3e:ec:57:76:3c:
e9:51:fc:0a:88:07:1a:30:91:62:ef:bf:29:32:6c:db:4f:3a:
3c:b0:54:b1:46:de:ca:12:a4:fa:40:67:70:e4:bb:ce:8f:d9:
ea:91:57:26:92:c0:69:41:e6:14:1d:b3:54:9a:0e:87:3a:4e:
fa:e3:59:ad:01:4f:b8:20:bc:2a:e1:5b:25:dc:37:fb:76:2e:
75:f1:2d:f1:89:6c:34:64:26:d4:45:83:04:a3:55:43:6c:77:
01:58:78:8b:d5:f6:6f:4e:9a:c6:38:8a:56:94:8c:78:d3:cf:
24:52:77:8e:37:8e:73:87:07:4e:e6:cf:50:de:d4:b5:6c:66:
dc:8a:ab:40:f5:16:38:07:2c:f3:04:ac:31:8f:85:49:34:fe:
34:69:d8:67:51:fa:63:df:89:f6:b4:54:47:d8:64:86:76:7d:
8f:e4:24:91:d8:1a:81:3b:f5:15:05:4d:a1:7d:b1:52:d3:0a:
e3:89:5e:8b
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUBt9YMvHYvmR1+FgS8OeTduHCZ50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTUwMzIwMjdaFw0yNzAxMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQGFkYTY3MTk2MDFhOGQyMTk0YjQ3Yzk5ZmE1NDAwZTQxMzBlYTlmN2E3Mjg2
NjZhZmVhZjY4MDRmYWMxM2ZhNzAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALnGu9z2VZKzRdypjsknJpeSpIXhoqWH4BtyOJadm0WxqCjXuA/pfhVg+3h2
j4Izf4owFNL51fxVn3WrANWAMmJUP3mCUGPEj7ufVcNTKdJgFCIv8KGqkiwG7h7q
hGo9TwjAzDCOKcxT3tYAvzseebVFwffgjBivkt14uacpufmDLQGFX1+8C75HlbsA
J/D3nxf1XOxRvDf6Bt4uQIfVmwPYNdCZOZ1L9w0+LVEHtA5pOBW7smfWPAxGRlV7
yovl6B7gzL79svvOL9UZUmkZickx80rah5PYskVNw1mvcKUyY45JP3ComLQcmSzs
VKjm0Rjomo3WctXzorx3ESZkNwcCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBT7WUTZ
HPIJ3z3FEYZLKpKh1Wmz9zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjQ0MzYzYjktYmE0OC00OTEzLWI4YTQtOWNkMGRjMzJiYTAyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC4z8DAN
BgkqhkiG9w0BAQsFAAOCAQEAsfnvl3yyfCNQeo2B3ZJqwhaAcDForNF0PhYR8kYL
LtbcaJue5eE8XdTntT1LvtkNcHnj/j1RW4xMEwKa5ejPWVmDKz7sV3Y86VH8CogH
GjCRYu+/KTJs2086PLBUsUbeyhKk+kBncOS7zo/Z6pFXJpLAaUHmFB2zVJoOhzpO
+uNZrQFPuCC8KuFbJdw3+3YudfEt8YlsNGQm1EWDBKNVQ2x3AVh4i9X2b06axjiK
VpSMeNPPJFJ3jjeOc4cHTubPUN7UtWxm3IqrQPUWOAcs8wSsMY+FSTT+NGnYZ1H6
Y9+J9rRUR9hkhnZ9j+QkkdgagTv1FQVNoX2xUtMK44leiw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 19:23:00 2026 by rpki-client