Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
File: b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa (raw, json)
Hash identifier: 9NXapmVS1bBtz/CVc/I6YiDXKmBgwBz/8XdAF2XEdwE=
Subject key identifier: D8:53:00:3A:E5:C1:43:84:25:CA:FB:7B:7E:BF:62:C3:BF:2D:9B:90
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1BDB19DBBDDB46E74A2967FCCBCE8EC609048545
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
Signing time: Mon 27 Jul 2026 03:30:10 +0000
ROA not before: Mon 27 Jul 2026 03:30:10 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:db:19:db:bd:db:46:e7:4a:29:67:fc:cb:ce:8e:c6:09:04:85:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 27 03:30:10 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=ae9e3ab236b5257f1b52216a807d9ad0984808a262b0a7194f06193ce89e13ac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:93:14:a1:e2:a3:b5:07:d9:6e:71:6c:0a:
08:73:70:35:dd:9b:d1:60:67:16:4c:d6:08:93:75:
84:ce:4d:a3:6f:e9:b8:2f:84:6c:d0:8f:de:c4:69:
79:0c:66:f1:fc:1e:11:31:9f:a0:37:88:dd:56:9f:
b3:3b:64:13:b6:59:d5:f1:01:18:93:1d:4a:aa:2a:
4f:7b:50:ff:6e:b5:53:a2:76:29:7f:cd:ae:4e:8b:
49:9e:8f:64:a7:b3:4e:13:18:ab:4d:08:55:f0:62:
1d:19:26:8c:42:82:26:78:10:72:e9:c6:f0:f7:cc:
03:89:6a:5e:e4:45:31:8f:e6:c0:11:0f:92:f1:e4:
d5:ec:fa:2f:ce:b8:0b:54:bc:94:d0:dc:6a:55:1f:
59:1a:c0:59:82:ad:f0:ea:f0:58:7f:62:76:bb:4b:
57:8b:60:68:7b:8e:07:08:07:56:1f:f4:95:13:cd:
c9:c0:14:ca:30:6c:65:f9:46:3e:39:37:6e:32:69:
af:fd:8e:19:b3:93:bd:6b:59:3a:af:15:09:7b:a4:
7b:b5:82:d3:dc:56:1c:82:93:e1:02:ce:12:d2:61:
b0:73:97:83:35:40:6d:b4:b2:52:b5:af:ed:22:2d:
00:3f:a6:55:7c:1e:30:09:3c:08:ed:4c:61:65:4f:
71:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:53:00:3A:E5:C1:43:84:25:CA:FB:7B:7E:BF:62:C3:BF:2D:9B:90
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.222.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:99:e9:35:1c:03:cf:fc:0d:b2:d7:7b:6f:44:db:aa:a5:39:
a0:41:c9:24:3f:7f:93:1c:fe:c6:7d:0a:97:2d:06:03:6a:cc:
0e:56:f9:70:1d:94:b2:cd:04:24:31:7b:34:a8:0f:99:4d:9a:
33:f0:99:d3:b9:e0:ef:b1:26:67:b0:0c:06:69:ee:fb:dd:f9:
8b:34:b8:f0:66:3e:0a:c7:1d:79:d4:80:66:4d:41:5c:d9:99:
e2:09:b7:b2:c7:0e:1b:73:69:b1:b0:35:fa:8c:51:c8:c4:6e:
fc:3c:6b:9b:f9:d9:c3:da:18:09:af:09:b0:e5:f0:f1:13:8c:
e5:e3:cb:84:ac:2f:24:f9:2d:2e:bd:e2:6f:84:27:11:c8:2f:
f3:0e:04:89:4a:19:a0:46:73:c4:2e:5e:2a:1a:e0:c9:3a:5b:
5f:be:10:1d:c1:97:b3:33:cf:b6:5d:2e:5e:01:76:20:a6:03:
80:79:41:01:f5:fb:a4:7d:ff:c7:d0:0a:ad:ae:ea:d0:95:29:
4f:27:94:19:01:31:53:ac:35:20:44:a2:5c:e0:b7:72:4e:a1:
b0:e8:ee:ae:68:9f:d4:49:e3:f7:60:35:cf:f6:31:29:27:fa:
23:ac:65:63:9e:a8:ef:70:fc:7f:36:01:f4:e4:a6:82:e5:45:
ce:37:4c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 12:16:22 2026 by rpki-client