Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6881bd-10fc-4994-83fe-43244d2b078a.roa
File: 2c6881bd-10fc-4994-83fe-43244d2b078a.roa (raw, json)
Hash identifier: Tv5XuxZq2WdlZULnN4emUmzef9hnyG5psMaNBUV7J1U=
Subject key identifier: 2A:F9:E7:9A:3C:DE:CB:58:A6:FD:D7:27:A3:32:AD:1D:E6:17:0B:28
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5CABDB43A2F6E7863015354EC7ECFB059D6E8B3E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6881bd-10fc-4994-83fe-43244d2b078a.roa
Signing time: Fri 08 May 2026 03:20:12 +0000
ROA not before: Fri 08 May 2026 03:20:12 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ab:db:43:a2:f6:e7:86:30:15:35:4e:c7:ec:fb:05:9d:6e:8b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:20:12 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=1251c2b130be82290aac62054404dccef43e6c8be4d2cf1c79e04abc0d48d7ec, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:11:a0:74:b3:3b:5c:03:29:73:93:71:1d:
1f:8e:33:e3:7a:6f:5f:d3:99:e8:8a:17:43:fc:30:
6f:ed:bb:20:e6:7d:93:61:41:53:f5:fe:41:71:13:
b3:df:c6:d0:22:58:75:c5:15:09:e6:a0:36:af:32:
5c:12:57:cb:60:4d:7d:da:ce:e1:e2:41:e0:06:b1:
64:5e:01:3a:4e:7f:b9:f0:0e:67:f8:29:af:ec:d6:
27:5a:24:a3:71:9c:4c:b1:9a:2e:99:e3:20:24:81:
d5:5d:bf:2a:3b:b6:88:14:ea:3a:fe:2b:dc:eb:d4:
bf:61:95:e2:8c:e2:b8:fe:a1:39:b6:de:c9:24:4a:
57:73:50:85:11:92:2b:bd:e0:a8:6f:e7:2d:37:30:
7c:b7:66:1e:90:4e:84:7d:a4:b8:f9:ba:57:63:5e:
4c:1c:cb:08:02:c7:59:10:25:66:dc:61:e0:99:38:
37:3e:a3:4d:99:2a:67:4d:1a:2d:2d:d0:02:98:15:
a5:fe:98:d6:d2:19:65:aa:73:99:a3:e5:a6:44:84:
6a:6e:4b:74:ae:54:4c:14:c9:b4:7a:e4:0a:21:e4:
6b:9c:33:49:71:0e:a1:28:a9:13:8c:4d:a9:11:fe:
eb:6f:07:ac:0f:a4:2a:58:2b:14:05:83:5c:20:18:
00:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F9:E7:9A:3C:DE:CB:58:A6:FD:D7:27:A3:32:AD:1D:E6:17:0B:28
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6881bd-10fc-4994-83fe-43244d2b078a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.80.0/20
Signature Algorithm: sha256WithRSAEncryption
79:be:ce:70:33:eb:31:cf:64:26:27:a2:31:f6:14:56:47:0c:
fb:7a:a2:12:6c:25:ab:1a:cd:b6:39:ba:2f:9f:de:e2:7e:e7:
74:e0:e9:f7:2c:12:2b:fe:09:73:ed:0c:e5:73:2a:46:12:01:
ff:ea:63:45:91:40:26:54:c4:4c:8d:8e:fe:87:f2:94:aa:36:
eb:62:29:59:38:66:74:c8:8a:f5:c3:ab:c5:66:a9:4e:62:9c:
44:0a:8a:e1:73:bf:a2:23:97:3e:5c:44:14:e1:f7:9c:a7:cd:
23:4d:f3:ed:15:2a:37:4c:b2:1f:45:73:c9:47:42:2b:83:3c:
4a:24:00:90:fc:ae:9f:1c:a6:02:f1:4f:3c:4f:5a:96:22:a3:
92:00:ba:c4:96:39:b4:c7:fb:c8:01:ab:b3:80:c2:28:24:85:
dd:3c:77:2d:72:76:35:58:e3:36:1b:18:63:19:d0:64:d5:3d:
a7:42:18:ec:64:c1:a8:4d:03:b2:b4:62:61:20:0e:fa:6f:bb:
5c:ee:03:57:7b:ef:cb:fc:ac:84:e4:c0:54:cc:9f:9c:1c:1b:
d7:b6:79:8b:5e:ba:15:0b:0e:b9:86:cb:80:fb:06:0c:0d:66:
e0:74:a9:3c:78:d5:da:4d:69:cb:1a:c5:02:67:e2:66:ea:89:
62:63:95:c5
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUXKvbQ6L254YwFTVOx+z7BZ1uiz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MDgwMzIwMTJaFw0yNjA4MDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDEyNTFjMmIxMzBiZTgyMjkwYWFjNjIwNTQ0MDRkY2NlZjQzZTZjOGJlNGQy
Y2YxYzc5ZTA0YWJjMGQ0OGQ3ZWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJeIEaB0sztcAylzk3EdH44z43pvX9OZ6IoXQ/wwb+27IOZ9k2FBU/X+QXET
s9/G0CJYdcUVCeagNq8yXBJXy2BNfdrO4eJB4AaxZF4BOk5/ufAOZ/gpr+zWJ1ok
o3GcTLGaLpnjICSB1V2/Kju2iBTqOv4r3OvUv2GV4oziuP6hObbeySRKV3NQhRGS
K73gqG/nLTcwfLdmHpBOhH2kuPm6V2NeTBzLCALHWRAlZtxh4Jk4Nz6jTZkqZ00a
LS3QApgVpf6Y1tIZZapzmaPlpkSEam5LdK5UTBTJtHrkCiHka5wzSXEOoSipE4xN
qRH+628HrA+kKlgrFAWDXCAYAIMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQq+eea
PN7LWKb91yejMq0d5hcLKDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MmM2ODgxYmQtMTBmYy00OTk0LTgzZmUtNDMyNDRkMmIwNzhhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC6JUDAN
BgkqhkiG9w0BAQsFAAOCAQEAeb7OcDPrMc9kJieiMfYUVkcM+3qiEmwlqxrNtjm6
L5/e4n7ndODp9ywSK/4Jc+0M5XMqRhIB/+pjRZFAJlTETI2O/ofylKo262IpWThm
dMiK9cOrxWapTmKcRAqK4XO/oiOXPlxEFOH3nKfNI03z7RUqN0yyH0VzyUdCK4M8
SiQAkPyunxymAvFPPE9aliKjkgC6xJY5tMf7yAGrs4DCKCSF3Tx3LXJ2NVjjNhsY
YxnQZNU9p0IY7GTBqE0DsrRiYSAO+m+7XO4DV3vvy/yshOTAVMyfnBwb17Z5i166
FQsOuYbLgPsGDA1m4HSpPHjV2k1pyxrFAmfiZuqJYmOVxQ==
-----END CERTIFICATE-----
Generated at Tue May 12 23:15:06 2026 by rpki-client