Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
File: e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa (raw, json)
Hash identifier: Jnk/nczL6KLHELKlUiIWm7oKq6bl3EZ3OOdoT1sA8C8=
Subject key identifier: 81:B4:24:1F:E9:6F:DA:92:57:7F:40:56:53:E6:20:26:69:42:96:53
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D4CD859F3034727BA50A4667CCC7CEE1596AFA8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
Signing time: Thu 15 Oct 2026 03:30:56 +0000
ROA not before: Thu 15 Oct 2026 03:30:56 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:4c:d8:59:f3:03:47:27:ba:50:a4:66:7c:cc:7c:ee:15:96:af:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:56 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=9b4a856369d65a8851bbbcd7121c2017a33d157ecfd56c4286d913a51d303963, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:15:98:08:a7:b7:4b:45:d3:76:e3:20:22:
45:fb:3b:b5:8f:3c:35:4b:c0:9d:29:ca:07:68:30:
b6:85:78:54:e1:72:1e:40:36:bc:b2:38:d8:71:de:
ac:a1:f5:fc:e3:c1:e8:ae:d7:47:e2:c6:f9:ea:fa:
18:14:18:a6:68:77:13:1a:b5:a2:16:8c:74:89:c8:
51:46:70:35:72:1f:2f:28:4a:4a:38:a0:e8:f9:4a:
c3:4b:66:2e:8b:ca:0f:fc:1e:b6:fe:0a:f8:ce:dc:
31:a4:88:6f:99:f0:aa:74:0d:79:c4:18:d0:59:4b:
f1:af:e3:15:c3:1a:23:98:d2:82:15:9f:19:2c:ac:
59:97:32:27:f0:58:88:48:86:5c:ca:32:1f:dc:8a:
06:f7:fc:e3:d6:bc:46:3e:d0:bd:a1:86:3e:bc:67:
0f:a2:3a:d4:26:10:bd:3e:fe:7c:9c:0e:82:1e:1d:
95:e4:f7:a4:d1:06:46:1a:70:9b:50:1c:aa:63:b7:
5d:b8:44:0b:f1:6c:7a:80:d2:df:3d:a6:85:70:b8:
1a:42:34:be:d5:83:d9:66:81:af:ca:79:1a:9c:9d:
97:e6:88:1b:26:34:6f:f0:80:8d:1f:07:5c:f7:b0:
ab:44:ab:dd:ac:ae:41:27:72:1a:a7:aa:a7:3d:47:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B4:24:1F:E9:6F:DA:92:57:7F:40:56:53:E6:20:26:69:42:96:53
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e91b62a9-2885-4504-84a4-ba2cc2f2ac80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.160.0/21
Signature Algorithm: sha256WithRSAEncryption
c1:b4:49:4a:e7:01:78:2f:57:ea:a9:11:7e:3a:90:e9:a6:b9:
60:fe:f9:f6:e5:da:14:b6:7a:29:32:53:8f:9f:76:26:d8:66:
b3:48:0c:9e:33:c4:72:ec:26:98:bc:fc:af:4c:70:36:72:59:
9d:66:17:44:e7:74:0c:92:ad:ac:51:59:49:0e:d9:7b:68:b7:
26:0b:53:7b:4e:b4:3e:7f:80:43:9d:c0:40:c9:d3:74:47:1f:
63:02:45:c3:72:8a:2c:8d:98:71:79:86:43:0f:7c:d1:6e:9f:
14:af:9a:a8:28:63:44:d6:34:b8:57:38:1c:0f:f8:11:81:41:
60:c8:b3:ff:04:06:70:de:0d:55:c1:8b:28:3b:08:1c:16:2c:
fb:c7:15:89:54:9c:1f:24:1a:66:32:18:b1:a0:45:dc:e7:78:
c7:00:d6:5e:1e:a7:f0:5f:f7:0b:2e:92:e4:e8:c9:37:6f:5a:
d3:c1:5c:bd:8f:fe:05:ca:5a:3c:d6:bd:97:de:96:26:22:44:
0e:46:b6:14:31:89:db:67:b8:e9:26:2e:89:8c:ac:f0:26:4e:
97:bc:db:a3:14:9d:80:e9:b7:d4:5d:c8:bb:c9:a0:a6:bb:e3:
b0:d1:86:69:fd:45:7e:4f:1a:34:c8:14:19:17:e3:70:a2:51:
ab:6e:f8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:20 2026 by rpki-client