Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be6b7cb0-3c55-4a65-b00a-45bc1310868b.roa
File: be6b7cb0-3c55-4a65-b00a-45bc1310868b.roa (raw, json)
Hash identifier: lv7G4lmA+jc0I6qgM17yhkZ1Wa8ACJwAagSsqZZqlkY=
Subject key identifier: 20:08:3D:EB:0F:D1:89:65:EC:D5:B3:D3:DD:FB:05:35:92:02:3B:70
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1FFA06702040B1D542733F646AA6D052229EE46E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be6b7cb0-3c55-4a65-b00a-45bc1310868b.roa
Signing time: Thu 15 Oct 2026 03:20:10 +0000
ROA not before: Thu 15 Oct 2026 03:20:10 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:fa:06:70:20:40:b1:d5:42:73:3f:64:6a:a6:d0:52:22:9e:e4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:20:10 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=bc9406fa46bcaf3eed36533c66d910b7b377bb124a30f62a16c16535e9dda41b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:b1:05:a1:99:c4:b9:34:e3:b9:1c:e2:70:
7b:0a:68:f1:40:cb:eb:79:b5:99:f7:46:c0:b7:38:
91:1e:5c:9d:df:73:e4:63:a7:ec:18:f9:95:cf:54:
df:cd:fc:4b:ce:33:dc:37:65:2d:5e:8f:12:49:f8:
a3:e4:fd:10:b2:6a:4c:c9:96:c2:f2:5a:83:fc:b4:
4d:bf:c5:6d:e6:db:4d:7e:c6:1d:25:7b:e6:b8:52:
7e:3b:d4:bc:4f:d5:fb:af:07:34:57:7f:c4:7a:8d:
f8:d4:9c:0a:42:d4:e9:25:6e:55:1d:4c:7f:de:4e:
b1:eb:41:62:46:93:32:ba:25:6f:06:b7:ee:f2:31:
b0:e5:4e:2a:83:ab:97:3d:9c:2c:6c:f6:0d:65:6e:
48:91:0e:bb:b7:e5:16:3e:1e:eb:c6:90:66:78:8c:
78:38:a9:8f:6f:42:c2:f9:28:3f:e3:9b:fe:7f:fd:
b5:4f:8c:df:c0:34:31:46:5d:dd:bf:70:b6:95:b8:
ca:54:8c:12:cf:88:c0:aa:18:a5:e3:ef:e7:a2:52:
75:ee:c1:e1:5f:0c:9f:a6:31:63:58:1b:17:46:f3:
24:54:27:b7:69:f3:b5:0b:2e:89:97:ac:a8:ef:73:
c2:8f:0b:18:3d:a8:1e:ad:5c:03:89:fe:6f:5a:cd:
55:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:08:3D:EB:0F:D1:89:65:EC:D5:B3:D3:DD:FB:05:35:92:02:3B:70
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be6b7cb0-3c55-4a65-b00a-45bc1310868b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.96.0/19
Signature Algorithm: sha256WithRSAEncryption
b9:2d:81:4c:97:08:4a:e6:c6:d0:b0:4c:07:9b:b9:07:55:ee:
1f:42:be:12:2d:50:55:a8:9d:84:a7:b5:ea:5c:62:4e:9d:b1:
f6:a7:9f:1f:0c:4b:2f:ae:12:58:7e:23:d5:28:a0:66:e9:45:
b7:16:4e:47:68:3b:f1:69:96:cf:03:a6:3e:93:ec:83:90:18:
f2:0b:15:41:72:b6:e1:61:73:93:2c:31:ff:35:d4:0c:ca:36:
36:08:6e:76:8a:3a:b2:72:73:6a:52:2e:2c:03:74:d5:96:8e:
b9:15:e2:44:e4:51:fc:77:3c:9c:d1:ed:8b:72:c0:04:84:d7:
93:5a:5a:38:d5:8e:f8:96:38:6e:52:2a:7e:39:ee:da:df:8d:
ba:12:64:69:a9:b7:15:46:12:f5:7f:9f:8c:37:fa:0a:4e:64:
4d:8f:c3:38:16:ce:bc:e4:d3:05:1f:06:2c:7b:58:12:af:1b:
f0:ca:42:ea:0c:f8:ed:33:16:14:04:72:ca:a3:18:96:4b:3e:
18:1f:fd:ae:f4:c1:d1:f2:5c:b8:ef:73:53:4a:92:d2:2a:54:
8b:92:d4:d5:5d:78:ba:25:2f:f2:89:19:42:ea:38:ed:82:5b:
88:70:fa:26:9d:10:49:52:3d:85:9f:4e:39:00:4a:af:19:5b:
b2:12:64:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:25:00 2026 by rpki-client