Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9e85174-2ffd-4b93-8357-1e2ba85449d2.roa
File: b9e85174-2ffd-4b93-8357-1e2ba85449d2.roa (raw, json)
Hash identifier: dk9kv4ebsK4JFkwa/mAdkBJzm6+1oCTw3WiBg8EG2go=
Subject key identifier: 2B:5A:31:2F:99:97:F6:B5:AA:44:E9:9A:38:69:61:6E:09:C1:20:EE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E0D39D29D852FDEE88B88F5A44E3E99423AB775
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9e85174-2ffd-4b93-8357-1e2ba85449d2.roa
Signing time: Thu 15 Oct 2026 03:30:15 +0000
ROA not before: Thu 15 Oct 2026 03:30:15 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:0d:39:d2:9d:85:2f:de:e8:8b:88:f5:a4:4e:3e:99:42:3a:b7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:15 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=fc2bbc1920532b36089ca2c3d40338e5f582a28ef9832694109bb00de0b56685, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:0f:12:cb:45:8f:a2:c2:dc:6e:2d:cc:36:
82:27:b4:7f:32:7f:64:e3:f1:30:32:8c:4e:45:2c:
7f:54:48:3a:f7:dd:38:32:d3:a6:f1:5f:a3:4b:02:
28:01:25:b5:9e:8f:ca:73:d9:f4:b8:33:41:87:ff:
fd:32:d4:c9:d0:85:9d:e7:6f:d8:95:21:c6:a0:52:
d1:15:28:c9:c4:4c:58:a9:e8:eb:2e:fd:79:8b:6b:
16:dd:da:00:13:ee:0c:37:38:3d:36:d5:e8:50:23:
82:37:bd:1b:c2:16:03:7b:42:48:be:12:05:e9:ac:
18:bc:46:60:7f:79:fa:15:52:97:94:52:fd:8c:c3:
09:bf:d6:ce:ee:f3:b2:0e:58:15:8f:cb:51:72:f3:
98:23:02:04:a8:7b:b7:70:15:02:83:7e:92:fb:b7:
40:0b:ff:fc:7d:e5:a9:d2:cf:56:df:e7:a2:e6:02:
dc:f0:f8:c6:94:81:35:26:02:6c:46:ad:bc:b1:3e:
8b:d9:25:82:a7:f2:00:d6:47:90:0c:42:16:01:ce:
3f:84:dd:b9:f5:27:2f:54:39:26:ee:47:69:44:80:
42:c8:bd:25:90:95:55:63:d3:01:82:a8:b7:b7:c5:
e1:48:62:17:49:6d:b2:98:24:f3:5e:16:3d:18:18:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5A:31:2F:99:97:F6:B5:AA:44:E9:9A:38:69:61:6E:09:C1:20:EE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9e85174-2ffd-4b93-8357-1e2ba85449d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.156.0/22
Signature Algorithm: sha256WithRSAEncryption
97:7d:d1:5f:26:63:15:71:b8:6a:da:bb:ff:8c:28:04:b7:5e:
7a:f9:6d:1b:d1:e4:e2:3b:56:20:1e:f1:57:b0:f7:8e:de:30:
53:8f:4a:e5:78:f2:ff:92:92:2f:9b:e6:2e:33:7d:30:81:cc:
bd:63:2b:e4:a6:cd:fc:96:07:f3:17:a4:00:9a:f5:ed:1f:1e:
c5:86:53:4b:aa:ea:a0:fc:8c:fc:28:c4:b7:a3:c9:08:29:9d:
c5:74:18:80:5f:fa:a9:e6:c3:33:ae:ea:a8:4d:23:0f:42:90:
aa:b9:a7:ad:22:da:e7:eb:0c:cd:06:f4:cb:83:c0:c5:71:a3:
8c:80:5a:0f:a1:13:0f:84:4d:5d:b8:4e:9f:e8:5a:b0:bf:5e:
5f:b7:3e:74:6c:13:64:0c:ab:b9:55:74:55:93:b2:d1:7c:21:
c7:9f:a1:8a:a0:bb:eb:d2:62:12:a7:14:72:50:44:09:eb:20:
3d:66:e3:89:d3:7c:ea:34:88:d4:16:37:55:f2:15:3e:54:2b:
4e:c7:ff:31:08:97:55:86:37:c3:c4:82:89:31:00:81:da:6e:
31:f2:ff:ac:b5:b0:3e:ab:7b:e6:94:29:22:0e:e4:e4:c9:64:
fa:7c:96:45:09:10:19:d8:af:f4:f5:f4:c6:1e:50:b0:40:26:
1b:16:81:ab
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUDg050p2FL97oi4j1pE4+mUI6t3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTUwMzMwMTVaFw0yNzAxMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQGZjMmJiYzE5MjA1MzJiMzYwODljYTJjM2Q0MDMzOGU1ZjU4MmEyOGVmOTgz
MjY5NDEwOWJiMDBkZTBiNTY2ODUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM+oDxLLRY+iwtxuLcw2gie0fzJ/ZOPxMDKMTkUsf1RIOvfdODLTpvFfo0sC
KAEltZ6PynPZ9LgzQYf//TLUydCFnedv2JUhxqBS0RUoycRMWKno6y79eYtrFt3a
ABPuDDc4PTbV6FAjgje9G8IWA3tCSL4SBemsGLxGYH95+hVSl5RS/YzDCb/Wzu7z
sg5YFY/LUXLzmCMCBKh7t3AVAoN+kvu3QAv//H3lqdLPVt/nouYC3PD4xpSBNSYC
bEatvLE+i9klgqfyANZHkAxCFgHOP4TdufUnL1Q5Ju5HaUSAQsi9JZCVVWPTAYKo
t7fF4UhiF0ltspgk814WPRgYQrkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQrWjEv
mZf2tapE6Zo4aWFuCcEg7jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjllODUxNzQtMmZmZC00YjkzLTgzNTctMWUyYmE4NTQ0OWQyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi6JnDAN
BgkqhkiG9w0BAQsFAAOCAQEAl33RXyZjFXG4atq7/4woBLdeevltG9Hk4jtWIB7x
V7D3jt4wU49K5Xjy/5KSL5vmLjN9MIHMvWMr5KbN/JYH8xekAJr17R8exYZTS6rq
oPyM/CjEt6PJCCmdxXQYgF/6qebDM67qqE0jD0KQqrmnrSLa5+sMzQb0y4PAxXGj
jIBaD6ETD4RNXbhOn+hasL9eX7c+dGwTZAyruVV0VZOy0Xwhx5+hiqC769JiEqcU
clBECesgPWbjidN86jSI1BY3VfIVPlQrTsf/MQiXVYY3w8SCiTEAgdpuMfL/rLWw
Pqt75pQpIg7k5Mlk+nyWRQkQGdiv9PX0xh5QsEAmGxaBqw==
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:15 2026 by rpki-client