Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa
File: d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa (raw, json)
Hash identifier: oH96NFyjTTZrYTORvT0O4ily8qSCqyBdrrmrwF2Rvv8=
Subject key identifier: BD:95:DA:B2:56:22:3A:D9:39:FD:89:8B:11:50:B1:3C:1C:72:58:B4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0DCBE4DEEDA367824DBC324C9C905A7376508F38
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa
Signing time: Thu 15 Oct 2026 03:30:10 +0000
ROA not before: Thu 15 Oct 2026 03:30:10 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:cb:e4:de:ed:a3:67:82:4d:bc:32:4c:9c:90:5a:73:76:50:8f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:10 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=bf34b20781dd044c27c7ea4ca8eb41cabb33f16c5e2c8fb870198adba490971a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2e:fc:c1:e1:01:f4:58:db:e4:f6:c4:73:84:
8b:f4:8e:ed:21:97:36:12:3d:e3:1a:19:96:18:de:
75:9f:f7:44:7a:c4:d3:69:4d:58:bb:8a:70:b1:46:
bb:69:e2:dc:b0:be:95:d2:20:7a:17:86:82:95:9e:
a0:0f:9c:b0:1f:1d:4c:5e:7b:3e:45:1c:a3:e9:a3:
bf:1b:4a:17:62:a4:c8:9f:0f:9b:aa:05:85:f4:07:
ef:86:76:54:96:0a:b2:fa:ff:6a:b3:87:0e:7f:9f:
06:9d:45:ea:1e:a2:67:fb:3e:e6:1e:d5:cd:3a:32:
9c:8c:38:2b:d7:3b:25:bc:86:da:02:a9:07:a6:b2:
00:1b:7f:c6:f6:51:8e:70:e5:ee:41:2e:46:3c:34:
2d:09:d2:d9:9f:de:44:f3:aa:53:79:60:87:35:de:
4a:4b:5b:d1:27:f5:cb:58:96:39:af:9e:16:a0:4b:
31:6f:75:c1:7d:28:7c:26:71:29:9d:e9:2b:8c:27:
39:a8:fe:1d:37:91:a1:01:b7:c6:74:07:36:ac:a8:
6f:33:a9:7b:52:ac:5d:bd:ba:c9:8a:a7:2e:c2:6c:
76:27:7a:36:a6:4a:90:64:45:8b:88:4e:11:72:b6:
ca:8d:9e:89:f2:da:82:d9:0a:52:2e:85:d3:19:35:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:95:DA:B2:56:22:3A:D9:39:FD:89:8B:11:50:B1:3C:1C:72:58:B4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8364c06-b75e-4d85-8c8c-afad4df7cd1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.224.0/20
Signature Algorithm: sha256WithRSAEncryption
85:ee:11:8e:cc:26:2c:d9:3d:36:8b:f7:91:f3:1b:4f:1b:e5:
78:a6:94:50:dc:2f:4e:f5:57:7c:36:b9:b0:0a:81:a0:4e:c2:
0a:4e:e1:d3:86:67:60:20:fe:ea:02:97:0d:06:01:40:25:f5:
bc:8e:3e:e1:90:82:24:3d:19:2b:ac:fd:70:75:e6:b0:a1:89:
4e:64:e3:ac:23:05:6a:52:1d:1c:71:f4:17:4f:2e:1b:9e:bd:
b5:fd:d2:f9:bc:59:ff:59:21:57:0e:bb:49:7b:2c:bd:ed:8b:
a7:cc:29:fb:a2:cc:1b:5f:b0:90:65:db:3a:4d:56:df:13:fd:
24:6e:28:0e:9e:2c:df:16:43:49:47:f9:76:61:51:2d:04:c9:
59:10:45:26:3c:fb:72:54:ac:c4:38:66:34:34:02:ea:3f:9c:
31:d3:60:5b:3b:91:a1:0f:6a:8d:b8:2b:59:5e:a9:60:8f:07:
79:14:42:ec:b7:02:cb:cb:15:89:d3:cb:36:1a:0e:c7:93:bd:
62:d6:d9:38:61:4c:d3:1d:f3:ee:64:62:09:1d:f7:8d:6c:9e:
8b:73:5b:68:ed:8b:eb:55:2d:26:d2:7f:e7:fa:bf:d3:40:98:
49:c9:b5:62:98:af:3f:56:3c:53:1c:28:b7:be:e6:d9:11:40:
74:88:3a:0e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUDcvk3u2jZ4JNvDJMnJBac3ZQjzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTUwMzMwMTBaFw0yNzAxMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQGJmMzRiMjA3ODFkZDA0NGMyN2M3ZWE0Y2E4ZWI0MWNhYmIzM2YxNmM1ZTJj
OGZiODcwMTk4YWRiYTQ5MDk3MWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPEu/MHhAfRY2+T2xHOEi/SO7SGXNhI94xoZlhjedZ/3RHrE02lNWLuKcLFG
u2ni3LC+ldIgeheGgpWeoA+csB8dTF57PkUco+mjvxtKF2KkyJ8Pm6oFhfQH74Z2
VJYKsvr/arOHDn+fBp1F6h6iZ/s+5h7VzToynIw4K9c7JbyG2gKpB6ayABt/xvZR
jnDl7kEuRjw0LQnS2Z/eRPOqU3lghzXeSktb0Sf1y1iWOa+eFqBLMW91wX0ofCZx
KZ3pK4wnOaj+HTeRoQG3xnQHNqyobzOpe1KsXb26yYqnLsJsdid6NqZKkGRFi4hO
EXK2yo2eifLagtkKUi6F0xk1Ot8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBS9ldqy
ViI62Tn9iYsRULE8HHJYtDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDgzNjRjMDYtYjc1ZS00ZDg1LThjOGMtYWZhZDRkZjdjZDFmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC6J4DAN
BgkqhkiG9w0BAQsFAAOCAQEAhe4RjswmLNk9Nov3kfMbTxvleKaUUNwvTvVXfDa5
sAqBoE7CCk7h04ZnYCD+6gKXDQYBQCX1vI4+4ZCCJD0ZK6z9cHXmsKGJTmTjrCMF
alIdHHH0F08uG569tf3S+bxZ/1khVw67SXssve2Lp8wp+6LMG1+wkGXbOk1W3xP9
JG4oDp4s3xZDSUf5dmFRLQTJWRBFJjz7clSsxDhmNDQC6j+cMdNgWzuRoQ9qjbgr
WV6pYI8HeRRC7LcCy8sVidPLNhoOx5O9YtbZOGFM0x3z7mRiCR33jWyei3NbaO2L
61UtJtJ/5/q/00CYScm1YpivP1Y8Uxwot77m2RFAdIg6Dg==
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:52 2026 by rpki-client