Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa
File: bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa (raw, json)
Hash identifier: YgtJL6s+ZmDUHhHxErTFx65bC1b//a0FYRSPco+Cxb0=
Subject key identifier: 79:18:02:15:A8:44:4D:10:BD:CC:A6:17:49:C2:80:D8:9A:5F:05:8E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 11D0437AAB86CAEB41D97005C6B4CDFF9C7B2798
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa
Signing time: Thu 15 Oct 2026 03:30:12 +0000
ROA not before: Thu 15 Oct 2026 03:30:12 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d0:43:7a:ab:86:ca:eb:41:d9:70:05:c6:b4:cd:ff:9c:7b:27:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:12 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=d0fd1755d18223f69a5e9dc559f96cb3f644fccda8880e3ee46eb4fc292cd98c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:f7:47:5c:99:58:9b:98:1e:f6:aa:be:5c:
f9:2d:65:2a:56:22:16:a4:2c:bf:8b:87:e7:9d:a8:
29:fd:51:5d:9c:82:b5:67:7c:a2:e2:0e:37:6a:14:
d2:4a:1b:a8:5e:80:db:a5:21:7d:bb:85:4d:dd:c3:
89:a8:46:ce:71:f4:2d:eb:c2:bc:91:b1:22:d2:c3:
82:e1:d1:72:f3:e3:e0:60:2a:d7:c5:47:ff:94:ee:
06:52:21:fe:b2:f4:83:6a:a8:22:3d:8c:6d:5c:11:
f4:e2:32:b8:3f:c4:4a:b5:c0:83:2c:72:ea:d7:1c:
ac:ed:30:33:ff:8f:3f:34:b5:05:20:78:04:0b:2f:
e5:ae:00:78:f4:12:08:4f:08:1e:6e:55:af:65:19:
5a:ad:77:55:1b:fb:56:7a:96:00:7e:b5:dc:9e:34:
5a:be:8a:35:68:a6:af:a2:73:7a:99:54:3f:fa:cf:
6f:04:e5:19:15:53:91:9f:80:b1:5e:17:e5:64:7a:
d4:e3:8e:c4:32:8f:13:37:94:68:ca:38:40:bc:57:
e1:e5:9c:19:a9:c1:ac:98:2e:73:f4:2e:85:32:23:
ec:77:7d:cc:ef:c8:06:f1:8b:dc:3e:60:7d:e9:55:
25:3a:02:64:e7:e3:87:8b:c7:5c:09:a1:ca:5b:3a:
94:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:18:02:15:A8:44:4D:10:BD:CC:A6:17:49:C2:80:D8:9A:5F:05:8E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddd5d52-f097-4aa0-9a71-aa7b6752dcaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:af:d9:a9:95:84:72:6c:c9:3c:07:0a:3d:b9:80:ce:38:74:
6e:2d:d6:81:98:a5:96:dc:e7:54:37:59:8a:5c:b2:b4:02:12:
45:f6:90:82:0c:1c:14:8e:95:5b:3b:31:b2:9d:58:2f:e3:8c:
77:a5:8e:8b:7d:bf:2c:d4:3e:0a:b4:55:dd:c3:17:c3:62:57:
54:06:41:c9:a1:4a:59:d3:82:43:9c:69:57:d0:45:1b:31:8c:
e4:14:b4:49:98:25:59:ff:38:7b:5a:22:f6:e6:83:4d:4c:a2:
54:e8:a0:e2:ec:2b:fe:2c:fc:3b:6b:22:87:f9:02:0e:9c:30:
0c:3c:3d:3a:68:27:02:c1:22:83:29:61:4f:de:ee:88:b7:4f:
4e:f9:6b:e8:93:ac:0c:e4:1b:ef:73:90:6c:a8:2c:e5:02:a8:
a9:bd:dd:5a:73:25:f8:a2:83:a2:3d:1e:08:0d:4c:47:bd:e8:
26:f9:ec:f6:34:8c:1b:71:5c:2c:2b:92:0c:fe:eb:03:77:c3:
e4:3d:bb:38:ca:47:53:7b:c6:a1:d2:48:8c:43:90:fb:89:26:
ab:a4:82:ff:e2:ba:ad:ec:49:01:04:78:29:33:3a:76:94:8c:
a5:11:a4:48:ba:29:c3:f7:9f:22:78:97:1f:ff:74:bb:92:e9:
b4:dc:e8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:02 2026 by rpki-client