Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
File: df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa (raw, json)
Hash identifier: StKWU0k0rgERGFAI3aVKuRQFICR9YjzUKbd+lkeEgOc=
Subject key identifier: 95:FD:D7:93:C6:C2:44:A2:82:ED:39:6A:C2:4D:DC:F3:D6:0B:FD:F8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4B23ECF04986230355E8072197E837691BFDC322
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
Signing time: Thu 15 Oct 2026 03:20:28 +0000
ROA not before: Thu 15 Oct 2026 03:20:28 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:23:ec:f0:49:86:23:03:55:e8:07:21:97:e8:37:69:1b:fd:c3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:20:28 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=74ec03ba34df0565c7c6268cc58788c85bc7a10acfcc2e0d9a298a69c381c86e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:8f:6e:82:97:08:56:e8:13:5a:d9:ed:fd:
ca:d3:aa:38:3a:04:76:81:25:a4:20:f8:5b:fc:70:
6f:8c:b1:b9:85:00:7e:b8:d8:21:b4:72:e4:15:27:
f3:d1:e6:ec:ce:3e:c8:49:00:0b:c7:92:c0:ac:e4:
f5:99:7e:20:06:b6:86:bc:10:88:af:ef:60:ae:2b:
1a:f1:4a:dd:3c:77:4e:a5:d1:f6:19:40:26:5d:b2:
53:37:3f:23:cb:92:b1:b4:78:b8:af:29:2d:1b:92:
9e:d1:9a:3f:aa:b5:43:1b:b5:51:17:62:6a:40:8d:
d1:74:8a:76:7a:26:ec:2d:b9:89:21:1d:88:21:db:
a6:fe:f4:8b:18:08:d9:b1:49:06:bc:7a:57:67:6d:
d2:6e:74:1d:40:4d:24:c3:7e:8b:e2:39:71:0d:11:
b6:82:04:9f:4a:7c:9b:42:9e:fe:83:61:e4:b0:fb:
3a:96:7f:a4:d9:48:d2:58:73:eb:1b:be:70:68:87:
6f:09:37:cd:6b:f1:8e:e4:7f:f5:52:a6:d4:9c:6c:
fb:87:95:73:54:93:b8:6b:b8:24:59:f9:45:1b:39:
21:56:e0:6e:ac:9c:b1:2c:7c:c3:2f:f6:19:73:1a:
f5:64:3f:5f:bc:d6:e9:09:cd:65:c1:04:f5:b7:a2:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FD:D7:93:C6:C2:44:A2:82:ED:39:6A:C2:4D:DC:F3:D6:0B:FD:F8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df740e2f-8ce5-4b1b-a95e-60487d9388a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:c1:90:b3:21:39:2c:ab:bc:14:1b:df:70:a3:9f:f0:28:3c:
89:4d:86:5c:52:49:23:01:dc:46:b9:62:df:8f:4d:6a:29:71:
ad:7b:cd:a3:94:1d:5c:ca:36:18:88:da:c2:70:00:b3:69:62:
41:b8:fd:24:06:fe:5d:f0:7a:e6:1d:fa:ed:04:ac:d2:93:10:
c9:bf:fd:1d:36:ad:a1:37:73:58:a7:22:42:e5:76:55:89:c0:
15:ad:0f:d9:a0:18:0b:62:6d:d2:89:6d:65:42:1d:5c:17:1c:
86:43:79:e5:99:15:50:55:48:21:db:62:4c:2a:33:97:ce:5c:
d2:a3:8d:41:53:d5:25:2e:98:c0:d8:4e:e2:8d:d1:bb:59:60:
e6:e8:89:9b:32:36:36:b7:05:35:b8:76:61:9f:33:14:0d:15:
0d:9f:02:d8:81:de:40:fe:95:63:69:30:da:be:51:fc:e4:6a:
b5:12:74:70:db:21:29:85:1e:f9:7e:b7:d4:59:dc:2a:cc:49:
39:d3:af:d8:9d:33:45:37:93:41:4a:b7:63:10:ed:58:c8:04:
9a:48:50:87:45:54:0c:09:04:88:a4:e3:c3:a7:14:86:80:a7:
27:bf:53:e9:73:1e:7f:44:97:a7:27:66:54:c3:97:50:9b:ec:
cd:7a:2a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:02 2026 by rpki-client