Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b730eef0-bb94-4d31-bf9a-c0fb9a47b3b1.roa
File: b730eef0-bb94-4d31-bf9a-c0fb9a47b3b1.roa (raw, json)
Hash identifier: 5D6Yw2zBTWE+mhFuKEZMQGBR9HPkhqUEb4PcVUlDkW8=
Subject key identifier: 5C:6B:5A:01:1F:BB:DF:1D:9A:A5:57:C6:AD:38:C5:45:A1:B6:FA:06
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 15AF64CDBA64551D3CF7EF5A3F91DF7C8FB0D4CC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b730eef0-bb94-4d31-bf9a-c0fb9a47b3b1.roa
Signing time: Thu 15 Oct 2026 03:30:31 +0000
ROA not before: Thu 15 Oct 2026 03:30:31 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:af:64:cd:ba:64:55:1d:3c:f7:ef:5a:3f:91:df:7c:8f:b0:d4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:31 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=bce2c7f3ee1cda793ccaa52982a097d0256365bc6167844064a051e4e1fa9dd8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:17:55:b4:7f:75:b4:10:30:e7:a3:77:21:0d:
df:09:be:99:14:ab:01:98:ec:fd:b0:ab:f5:39:7d:
3a:61:61:d1:de:34:79:9c:95:11:66:6a:57:3e:74:
72:23:13:59:44:a9:2f:38:10:84:e9:0b:6a:a7:b2:
90:a7:d8:06:66:c5:eb:99:20:c3:dc:8e:98:ec:53:
85:9f:bf:f9:10:2d:94:09:e8:84:9c:74:bb:f9:cf:
52:dc:eb:7f:4c:24:7e:7e:69:e1:0c:70:1c:b4:ab:
55:db:52:db:12:50:f6:d3:a5:3b:13:a7:2a:0e:50:
77:0f:4b:0f:01:f2:73:d2:1c:19:f3:ab:48:88:0b:
18:7a:52:b6:24:e6:93:1f:d8:f6:e3:c4:c8:4d:b9:
93:8e:7e:1e:38:34:2d:f5:ee:df:92:b8:24:d7:cb:
ff:d2:6a:44:e0:39:2f:10:34:d7:d7:d8:4d:6e:ea:
eb:b8:c3:62:5f:c9:aa:c7:84:fd:52:92:b8:41:ed:
42:5f:93:2e:a1:3d:81:39:80:5f:c9:28:cb:56:f5:
f2:36:29:a5:3a:fe:5a:26:65:9f:b5:be:c9:33:72:
e6:ed:24:c6:a6:2f:4c:ec:95:29:18:3d:b6:aa:2c:
62:c9:8a:fe:4a:d6:19:f5:fc:f3:62:3e:5d:54:04:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6B:5A:01:1F:BB:DF:1D:9A:A5:57:C6:AD:38:C5:45:A1:B6:FA:06
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b730eef0-bb94-4d31-bf9a-c0fb9a47b3b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.160.0/21
Signature Algorithm: sha256WithRSAEncryption
86:ff:1f:d2:1f:1a:87:99:cd:03:7f:8d:fb:d6:ee:50:0b:16:
64:e7:07:4b:51:81:5f:ec:ce:b9:2a:0e:c1:42:6b:51:96:76:
45:45:0c:8b:77:3a:98:df:1e:1f:59:bc:e1:ab:01:1a:6f:8e:
62:61:83:ff:7e:d7:02:24:99:72:0b:01:2e:53:3f:87:49:dc:
c3:89:4f:d9:af:af:db:d7:c3:44:de:20:e2:96:46:d3:b0:3a:
62:56:cd:b8:a0:ea:48:68:83:e2:ab:f3:90:09:f9:4e:0a:fb:
0b:df:55:a0:46:72:a1:ac:6a:7a:84:d2:46:a1:3a:c0:54:66:
7c:89:c3:62:89:1f:0b:a0:fc:0b:89:59:17:c5:7e:d2:ad:0c:
ff:6a:ae:13:09:e9:06:a8:3b:c2:86:f1:46:05:52:8e:7f:83:
f1:32:06:46:ed:85:02:2c:43:67:f9:d5:e2:67:eb:ef:b1:5e:
67:18:96:80:64:15:ef:cf:32:67:4e:12:f7:d8:67:e2:8c:f0:
22:ae:d5:ca:e6:f6:c8:45:d5:bb:bc:e2:66:c2:dc:68:70:2a:
9e:68:30:26:83:91:37:69:ac:ed:c2:8b:3b:b5:23:7a:f6:3f:
bf:c8:bd:55:fb:9e:4b:a1:66:c9:1f:0f:d7:c6:63:a7:c8:d5:
50:ee:c0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:49 2026 by rpki-client