Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18d47c03-cff3-4fc4-bd85-07c1063f7047.roa
File: 18d47c03-cff3-4fc4-bd85-07c1063f7047.roa (raw, json)
Hash identifier: qNFPVJZF108ddXHP7aH3QgU+vUAiZZyWbC8O0vMo1+w=
Subject key identifier: 30:79:AB:59:37:7F:60:F9:57:6A:4B:13:C9:21:6B:27:25:0A:BB:5D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 430E6CBBF9C8E77741269708ED4DC97C636D8561
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18d47c03-cff3-4fc4-bd85-07c1063f7047.roa
Signing time: Fri 08 May 2026 03:20:35 +0000
ROA not before: Fri 08 May 2026 03:20:35 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:0e:6c:bb:f9:c8:e7:77:41:26:97:08:ed:4d:c9:7c:63:6d:85:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:20:35 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=77f519b0ef432732a1bf746e20647fb5b3981a4a4eff42c11766ccfff68e37a0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:d7:c2:78:d2:78:ad:e3:d0:58:02:b4:80:
03:3a:f2:c4:71:36:b7:ea:5e:8f:da:24:7b:31:1c:
39:9a:6b:8b:97:4c:e2:95:fd:7c:f3:e1:ba:88:ad:
79:fb:f3:d8:e7:e7:23:bb:4d:f0:36:f0:76:67:07:
3b:aa:ed:42:05:76:d9:c1:70:bb:9b:c5:ae:90:59:
94:80:d3:9e:1f:01:12:32:5e:47:20:d7:7d:90:ac:
05:8e:04:37:ea:7d:bc:76:a2:da:cd:a5:19:7b:98:
ce:dc:99:3b:a2:14:be:97:6d:1f:6d:50:d2:0e:33:
18:74:a4:d9:cc:8d:cc:4d:0b:e0:e3:e7:b7:e0:08:
b3:be:71:30:c1:40:5f:69:57:6e:4a:99:3c:67:b0:
14:ba:c4:4b:e6:a7:6a:24:e1:a5:ec:e0:8a:8e:59:
00:a2:cb:4b:cd:d8:18:9c:d7:fd:55:98:47:0c:98:
16:3a:be:b9:f9:3b:01:d1:cd:25:c3:a1:d9:c0:a4:
03:fe:19:3a:2b:02:8e:d6:06:1c:54:f2:ef:29:49:
2b:ba:1f:42:64:a9:7b:f1:70:da:cb:ef:96:92:7c:
2a:e1:8f:0a:35:a1:b6:07:e6:29:e5:f3:c0:3c:83:
73:b6:cd:9b:1b:52:3d:3a:a9:9f:94:a3:08:68:3c:
e1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:79:AB:59:37:7F:60:F9:57:6A:4B:13:C9:21:6B:27:25:0A:BB:5D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/18d47c03-cff3-4fc4-bd85-07c1063f7047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/19
Signature Algorithm: sha256WithRSAEncryption
72:8d:b1:c0:52:83:8f:45:5b:96:80:d4:2e:9d:85:60:1f:18:
3d:8b:0a:6e:5d:bc:01:5e:c4:68:bb:11:60:4c:88:05:ee:c0:
c5:17:9d:1c:b0:82:61:2f:21:20:bb:b6:b2:f8:36:a8:50:35:
c9:3d:e2:3d:9a:5b:3e:a7:4c:37:3a:28:21:45:8a:77:47:b5:
03:3e:c1:41:8c:1f:88:01:5f:ee:70:bf:ae:2b:55:c6:20:6a:
be:b2:28:e6:0d:2e:df:6a:59:77:73:00:f7:d2:80:97:30:df:
e8:49:75:e4:1c:c0:5b:12:0b:65:f2:14:51:3e:05:82:a6:a0:
c7:32:47:15:40:86:b1:5c:0c:e1:c9:37:fb:27:f1:4b:34:56:
b6:73:de:f0:43:13:d1:87:66:61:06:80:66:8f:01:2e:79:49:
40:8c:db:b6:d3:68:1d:52:73:9b:29:93:d1:25:9a:21:06:ec:
f0:9d:c4:51:03:a3:9c:1a:5d:41:30:d6:b6:1d:0e:e3:67:43:
2c:1c:c5:10:64:0b:e6:f9:16:12:e8:c8:d1:b2:74:89:ef:49:
cf:d6:79:49:40:50:2b:f0:d1:a1:1f:76:66:61:a4:5b:f4:e5:
8b:f0:d3:f4:e1:87:24:18:4e:b3:f2:b8:c1:91:28:2c:28:dd:
dd:30:5f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:14:44 2026 by rpki-client