Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcee65ca-9c67-4925-b46f-60ec2eecb7a3.roa
File: fcee65ca-9c67-4925-b46f-60ec2eecb7a3.roa (raw, json)
Hash identifier: 4JBZEXW1cpwovoBXHDSA4XZJZROXJzxQBz8KmGllwyY=
Subject key identifier: 6F:AC:5D:58:1F:2E:D7:DD:13:39:65:CE:BC:34:CA:B7:76:1E:03:C0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 510B4DA372073567FD6BDE10876B0442D7E0B473
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcee65ca-9c67-4925-b46f-60ec2eecb7a3.roa
Signing time: Thu 15 Oct 2026 03:30:33 +0000
ROA not before: Thu 15 Oct 2026 03:30:33 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:0b:4d:a3:72:07:35:67:fd:6b:de:10:87:6b:04:42:d7:e0:b4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:30:33 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=08898f30c6ad0e4b8030024ecca8deeb37638e6cdc7319fba7873ca7c8e22322, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:19:75:b3:f3:0c:36:b4:1f:a8:c7:e8:53:
34:0b:08:a2:29:a8:39:b5:e6:39:4e:54:02:8c:ce:
9b:1f:89:ee:20:b2:37:8e:19:e4:fc:20:5b:c0:68:
b9:e4:08:7e:ea:a8:eb:da:78:b0:ff:2a:cd:47:f3:
e5:ae:e8:6a:f2:d6:03:f2:79:1a:7f:a7:4d:97:aa:
12:ee:25:30:aa:29:15:4a:28:92:0b:a9:01:e7:9a:
19:48:b3:6e:39:7f:2f:ed:b2:0f:eb:90:37:43:0d:
89:78:a0:cf:4d:96:0d:ff:e1:44:9c:74:59:69:3c:
ae:c7:15:f7:0f:d1:2a:b6:d4:a3:c7:0f:9c:2b:86:
23:79:60:3e:71:ae:dd:e1:ef:f9:57:08:7d:bd:46:
2f:04:ae:ea:3c:7b:09:95:2f:1e:4e:82:b7:9e:80:
e5:7e:a3:74:2d:e8:64:60:37:4f:f8:d3:2f:6d:0d:
3c:f8:c3:42:3a:3c:75:00:01:f6:f4:a6:d9:c0:f3:
ce:f8:c1:8d:43:dd:da:74:9c:c5:96:e0:f8:a5:7d:
3a:0a:6a:16:4b:8b:7a:6d:4a:4c:e2:d7:3f:13:12:
14:c4:ec:76:38:c6:93:64:a4:34:5f:27:51:0b:0a:
7f:4a:51:63:2b:13:6c:3f:fc:5c:97:32:fd:d3:5d:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AC:5D:58:1F:2E:D7:DD:13:39:65:CE:BC:34:CA:B7:76:1E:03:C0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcee65ca-9c67-4925-b46f-60ec2eecb7a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.128.0/20
Signature Algorithm: sha256WithRSAEncryption
00:45:3c:b6:ad:5a:f9:b2:4f:26:3b:88:c1:61:50:07:e5:44:
6e:c2:ef:21:67:c7:46:98:0e:8c:59:e8:e2:b9:6f:31:7a:91:
85:91:91:97:c0:6e:f7:20:03:10:74:ec:fb:0f:8e:7e:d0:16:
56:aa:c1:42:44:d9:28:ae:7a:f0:fa:44:e9:9b:79:5f:13:9c:
ad:27:3c:7a:27:93:67:ce:ca:f8:7e:35:6a:67:d1:f9:6b:74:
b3:7a:12:7c:e1:c8:83:8c:04:38:65:e9:cf:01:42:99:84:a8:
f0:db:85:dc:49:76:f8:b3:8d:16:23:6a:b2:31:ed:b6:f4:5f:
cf:30:36:6a:fd:95:c5:df:e0:dc:85:a9:43:e0:1d:be:c2:47:
28:37:a8:ea:82:27:59:77:e0:4d:93:5c:80:6f:f9:1f:e5:eb:
6e:f2:09:c3:07:ab:b0:fd:10:2c:d0:c1:21:d1:c9:cd:85:84:
7f:60:03:bb:e0:ba:ea:04:5e:a3:98:db:2c:2b:dd:2e:96:08:
c7:58:dd:9e:16:9d:68:f0:eb:41:f9:f3:d2:d2:03:af:33:cd:
6a:ed:60:4d:3d:61:b0:17:1b:ec:f5:c4:57:91:dc:03:0e:e1:
8f:35:fe:91:fa:7c:dc:bf:75:6d:45:89:07:b1:94:8c:b8:0e:
54:14:28:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:25:05 2026 by rpki-client