Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
File: bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa (raw, json)
Hash identifier: pNLxX2fJUTlHl/hA1Rq9Iv+iqN2kwug3QLgPgChHn3o=
Subject key identifier: D2:C6:2B:29:09:39:9D:B7:EE:CC:DA:AD:63:09:0C:C7:7F:90:89:CC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 78E8E62432E371765D9F9818022342A964DBCC2D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
Signing time: Thu 15 Oct 2026 03:30:43 +0000
ROA not before: Thu 15 Oct 2026 03:30:43 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e8:e6:24:32:e3:71:76:5d:9f:98:18:02:23:42:a9:64:db:cc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:43 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=3464c69d673d481f685ed25471db814e2e5ff54d25aa5d2600c0ea09f35000ff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:49:ca:8a:70:b4:63:93:d8:7c:a8:32:63:
a0:7a:28:48:14:e7:3e:05:3c:7c:0a:3b:b7:11:eb:
0e:1c:e0:3f:6f:be:a6:68:2b:b0:95:a3:06:34:ed:
76:b1:c7:1c:82:0b:a5:66:f2:1d:f1:7c:04:06:41:
2f:2b:cd:01:43:15:8a:c3:2a:24:32:fa:93:75:fe:
2d:08:ad:2e:5e:4e:2c:7d:b9:74:ba:6d:96:b9:b3:
6d:cc:1f:4a:74:b1:39:15:35:c5:0b:59:01:ec:29:
38:89:25:7b:59:7e:9f:b3:40:52:f3:f3:c1:3a:20:
2a:99:77:6e:98:77:be:27:0f:da:f0:c8:87:2c:50:
2f:99:84:5c:f4:eb:59:47:2c:f4:7f:cd:f0:87:05:
b8:8c:f0:4f:cf:fb:03:6b:87:b8:65:7f:8b:cc:aa:
f0:88:64:24:7f:aa:00:db:28:6e:99:09:34:54:4c:
cd:70:3d:cf:49:69:b1:5c:55:c7:46:0b:cf:8d:cc:
89:68:e1:3f:c9:4a:23:56:29:9a:ea:68:86:52:e3:
10:ff:bd:32:79:7c:ff:f7:a0:ac:4c:7c:20:31:3d:
46:79:bb:80:29:2a:44:e8:e1:1e:3e:12:2f:de:c4:
b5:2d:7a:be:a8:e6:a1:cb:c8:3a:ef:1a:eb:11:3a:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C6:2B:29:09:39:9D:B7:EE:CC:DA:AD:63:09:0C:C7:7F:90:89:CC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.204.0/22
Signature Algorithm: sha256WithRSAEncryption
24:33:0d:d7:0a:20:80:35:35:d4:c1:19:60:6b:fe:0c:a4:71:
b6:ba:21:6a:fd:13:b2:b6:f3:57:a9:07:5a:73:08:15:13:cf:
7c:0a:03:be:c1:d2:e8:41:6b:2e:6d:e0:6f:17:e9:e1:38:dc:
7c:51:25:ae:da:d7:3c:15:db:f5:fc:17:e0:79:cb:4d:68:f0:
86:9b:51:89:2b:f4:f5:c3:07:79:41:b1:97:60:ed:26:fd:17:
2f:4d:f9:1c:af:91:67:46:02:25:94:af:99:97:69:cc:80:db:
27:71:cc:20:6e:44:97:2c:2a:d7:02:8b:52:b4:55:03:5d:eb:
67:b6:2b:a2:0d:92:9b:05:31:f4:ac:c2:fb:5d:b9:7c:53:d6:
4a:ea:66:70:4a:51:89:8f:bb:f5:50:d2:2d:3a:4d:ca:4a:77:
dc:8b:9d:f8:3c:94:f2:9c:37:5e:8c:ad:c4:27:6f:10:bd:b2:
c6:3b:63:25:6f:df:c1:93:5d:d1:7a:7e:35:ab:0d:7b:98:00:
85:82:56:46:4e:5c:30:bd:ee:a5:e5:6c:b3:a7:8b:9f:0e:8a:
f8:4a:d6:c7:92:4d:0d:be:28:c3:7b:b0:f8:7a:58:c2:f3:6a:
15:d8:be:37:d1:0e:95:29:9a:8c:e2:5b:05:f1:12:9a:89:db:
14:e5:7f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:42 2026 by rpki-client