Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb73d62f-513c-4673-8547-902e7fa2148b.roa
File: bb73d62f-513c-4673-8547-902e7fa2148b.roa (raw, json)
Hash identifier: NhYudljeoO79jlzrLduUpPR9c764DdHteWSKObnpz+c=
Subject key identifier: 8C:11:C1:24:A1:22:59:F0:39:33:FA:74:AD:D6:1B:54:12:A0:72:3B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 77CDD0D63027BCB30BA28B06027FA7F1EC5F2FEF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb73d62f-513c-4673-8547-902e7fa2148b.roa
Signing time: Thu 15 Oct 2026 03:30:44 +0000
ROA not before: Thu 15 Oct 2026 03:30:44 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:cd:d0:d6:30:27:bc:b3:0b:a2:8b:06:02:7f:a7:f1:ec:5f:2f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:44 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=e8204d3c4e2f01a62601c04e3fa001cc693da5442f393242e2affbece7faddd4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:d4:d0:68:5c:a4:d4:43:4b:9b:b5:dc:16:
96:e1:f0:d3:83:88:69:70:13:25:98:30:e6:d5:39:
6c:4f:7d:6f:a7:94:c9:22:27:79:bf:2f:1c:58:33:
aa:7e:30:2f:52:7e:91:1c:74:4a:1a:a5:5f:2e:a7:
9f:25:c7:1d:32:fd:c0:f3:22:c7:4c:40:f4:af:e5:
b7:03:c5:63:18:58:af:91:50:0c:de:60:67:64:1a:
d8:17:f6:f1:1f:d0:98:af:60:e2:6f:4e:11:af:5e:
c5:ff:29:4a:d5:8d:2e:4e:95:f7:ab:83:1b:10:61:
f9:f6:49:05:4c:c9:03:b4:26:67:e4:49:e9:f9:4a:
c5:20:6d:8f:d9:f7:64:50:51:7a:bc:4e:9b:8d:fb:
e7:b3:95:33:67:df:87:6c:96:12:1a:5a:00:29:60:
16:01:4f:d2:ab:04:c4:54:cd:e9:1c:6a:73:f1:a7:
62:1e:2e:04:8f:6e:73:e9:f4:a3:74:73:f9:95:f5:
94:b2:85:d3:e3:8c:13:ae:d5:a7:a0:9b:16:1d:5c:
64:41:27:be:28:a2:5e:34:7b:d3:1b:38:c8:bd:19:
5e:ea:cc:9e:4b:4f:f5:9f:ac:4a:80:39:af:62:3c:
62:37:1a:4a:8c:eb:23:a9:1f:f1:43:89:6a:57:98:
d4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:11:C1:24:A1:22:59:F0:39:33:FA:74:AD:D6:1B:54:12:A0:72:3B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb73d62f-513c-4673-8547-902e7fa2148b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.0.0/17
Signature Algorithm: sha256WithRSAEncryption
c4:05:fa:0d:44:bd:a6:d6:3b:46:5b:4a:12:bb:f0:9e:30:68:
6a:7f:1c:c1:b9:c9:e9:45:63:ed:94:4a:ed:4d:1f:68:1a:12:
1e:82:7f:7d:d3:3a:91:cc:52:ec:8f:a3:e9:1c:b3:a0:09:a1:
5a:cd:67:ef:98:fc:35:ff:a4:24:4e:d9:f5:17:19:70:6b:0b:
5d:1a:e7:a5:44:f1:49:aa:e1:bc:4f:cd:6e:68:24:e3:e0:8e:
1e:85:fe:d1:5d:ff:34:30:ec:2a:c0:95:86:b0:12:2e:17:fa:
92:3b:7a:a5:ba:f8:62:20:d5:ef:c2:ce:37:f6:fe:01:98:8d:
cd:20:31:fd:b1:91:76:6a:36:e4:42:af:8a:38:9e:a1:ff:dc:
a6:ee:34:6e:68:55:f0:7e:08:58:13:6e:31:1f:ed:25:dd:d3:
73:b7:4e:f3:18:12:42:e5:1d:83:6a:2a:46:25:36:65:5b:c4:
4b:a8:5f:28:a6:06:bb:05:9b:d9:87:11:b2:07:e3:a7:5e:b5:
20:74:d6:54:2e:dd:19:ea:d3:98:ac:4e:33:1f:87:cc:80:09:
78:7e:ad:7c:f4:69:94:96:12:86:cc:9b:5c:1b:cf:7b:32:d1:
3b:57:a3:34:73:ff:44:c1:a6:4b:52:b7:18:52:e9:b6:94:ad:
8f:a6:64:a4
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUd83Q1jAnvLMLoosGAn+n8exfL+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTUwMzMwNDRaFw0yNzAxMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQGU4MjA0ZDNjNGUyZjAxYTYyNjAxYzA0ZTNmYTAwMWNjNjkzZGE1NDQyZjM5
MzI0MmUyYWZmYmVjZTdmYWRkZDQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALEc1NBoXKTUQ0ubtdwWluHw04OIaXATJZgw5tU5bE99b6eUySIneb8vHFgz
qn4wL1J+kRx0ShqlXy6nnyXHHTL9wPMix0xA9K/ltwPFYxhYr5FQDN5gZ2Qa2Bf2
8R/QmK9g4m9OEa9exf8pStWNLk6V96uDGxBh+fZJBUzJA7QmZ+RJ6flKxSBtj9n3
ZFBRerxOm43757OVM2ffh2yWEhpaAClgFgFP0qsExFTN6Rxqc/GnYh4uBI9uc+n0
o3Rz+ZX1lLKF0+OME67Vp6CbFh1cZEEnviiiXjR70xs4yL0ZXurMnktP9Z+sSoA5
r2I8YjcaSozrI6kf8UOJaleY1OUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSMEcEk
oSJZ8Dkz+nSt1htUEqByOzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmI3M2Q2MmYtNTEzYy00NjczLTg1NDctOTAyZTdmYTIxNDhiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBy6JADAN
BgkqhkiG9w0BAQsFAAOCAQEAxAX6DUS9ptY7RltKErvwnjBoan8cwbnJ6UVj7ZRK
7U0faBoSHoJ/fdM6kcxS7I+j6RyzoAmhWs1n75j8Nf+kJE7Z9RcZcGsLXRrnpUTx
SarhvE/Nbmgk4+COHoX+0V3/NDDsKsCVhrASLhf6kjt6pbr4YiDV78LON/b+AZiN
zSAx/bGRdmo25EKvijieof/cpu40bmhV8H4IWBNuMR/tJd3Tc7dO8xgSQuUdg2oq
RiU2ZVvES6hfKKYGuwWb2YcRsgfjp161IHTWVC7dGerTmKxOMx+HzIAJeH6tfPRp
lJYShsybXBvPezLRO1ejNHP/RMGmS1K3GFLptpStj6ZkpA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 15:35:36 2026 by rpki-client