Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
File: 2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa (raw, json)
Hash identifier: 6CE2brv3WGv2ViTgtq06TUw2Ao8a7p/8efKVD3n8uS0=
Subject key identifier: A3:FC:BA:B7:90:EA:11:BF:89:6E:B4:E6:C6:FF:82:2A:BB:E8:2C:E4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0D25CD0C10AD2DD7AF17283B7D29A0851A5E10FB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
Signing time: Fri 08 May 2026 03:20:31 +0000
ROA not before: Fri 08 May 2026 03:20:31 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:25:cd:0c:10:ad:2d:d7:af:17:28:3b:7d:29:a0:85:1a:5e:10:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:20:31 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=beb79a57f0841dee1e4976068e81a665bfaf2f07a5b0bcf351e7a214a858c043, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:f1:94:7c:6d:ce:09:59:42:df:fa:d6:bf:
0f:83:09:d1:11:2e:1d:54:3e:22:87:d2:7a:89:ab:
1d:92:8e:15:75:e1:c9:46:ff:c4:d7:fd:7a:ec:4a:
d4:a8:12:c0:8c:1d:2d:9a:53:e1:1e:00:de:9f:d7:
0a:3e:b6:44:67:53:17:cb:86:10:a6:d7:b1:70:e3:
85:6b:da:33:93:b4:db:a6:4e:a5:bb:2e:06:83:67:
b7:81:d1:f4:ed:dc:46:4e:32:39:96:6a:6a:21:5c:
9d:7b:c7:68:ad:bb:2c:28:a8:e8:7f:03:bd:d2:77:
e2:3f:95:ac:68:5e:3e:98:a8:ff:33:2e:74:46:83:
d6:e5:bf:0a:bf:7e:89:56:83:b3:4f:af:68:67:d7:
99:28:ad:43:1b:80:ff:60:dd:e5:9f:08:5c:27:21:
d1:b7:4c:f5:69:e9:05:c1:31:f7:ee:5a:2f:19:1e:
24:24:21:94:8a:52:ed:ee:9d:e3:28:eb:6f:f2:4c:
9b:24:39:38:1b:6e:de:42:0d:af:a6:28:7b:6a:92:
d4:a3:91:c3:f6:39:84:58:b6:c2:13:ad:f1:c9:34:
d7:52:af:86:c6:59:0f:ff:36:98:95:87:42:38:9a:
2b:fb:16:62:e5:13:4a:b6:dc:b9:c5:a5:5a:c8:81:
fb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FC:BA:B7:90:EA:11:BF:89:6E:B4:E6:C6:FF:82:2A:BB:E8:2C:E4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
Signature Algorithm: sha256WithRSAEncryption
2a:9f:0f:fb:2e:21:9d:16:97:13:b5:15:6a:25:7b:dc:74:4f:
c2:6e:2e:bb:c6:e2:6e:6c:c3:b7:6f:50:d5:a4:c4:06:98:d4:
15:93:62:74:a1:2a:6f:9d:f5:39:6f:72:14:79:33:5c:00:92:
a1:33:8c:6b:9b:78:92:33:cf:b7:ff:46:78:59:d7:81:ba:53:
0f:cb:d6:9f:ae:e1:25:71:11:6b:1c:b7:b3:f2:46:da:07:48:
da:b7:dc:c4:9b:e4:b5:82:74:36:b4:03:5f:fc:c0:f2:94:fd:
15:2d:f0:e6:7e:ca:bb:05:ac:3d:b1:7f:30:67:35:cc:c6:b8:
b5:0e:4f:59:66:d5:e7:2c:58:00:a0:90:88:09:0f:83:64:a7:
36:d7:f1:4d:65:20:c0:3e:1a:4d:2f:6b:ed:ff:a7:0f:dd:07:
cc:e3:49:5b:17:5c:69:e9:5d:88:e7:a6:11:28:03:ea:f9:97:
90:2f:d7:2d:04:72:2a:63:8e:40:5a:d2:e3:e0:ac:a2:46:59:
d6:e5:24:7f:43:8b:3c:e9:d0:db:03:fb:73:37:b9:37:f9:20:
e1:ca:b3:1f:02:a4:de:38:68:ea:44:b7:94:aa:31:8c:fb:96:
44:30:7d:cc:94:c8:22:7c:5d:1e:5a:ce:cf:90:5e:05:e2:1d:
0c:58:ea:49
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUDSXNDBCtLdevFyg7fSmghRpeEPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MDgwMzIwMzFaFw0yNjA4MDYyMzU5NTlaMHoxSTBHBgNV
BAUTQGJlYjc5YTU3ZjA4NDFkZWUxZTQ5NzYwNjhlODFhNjY1YmZhZjJmMDdhNWIw
YmNmMzUxZTdhMjE0YTg1OGMwNDMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ0r8ZR8bc4JWULf+ta/D4MJ0REuHVQ+IofSeomrHZKOFXXhyUb/xNf9euxK
1KgSwIwdLZpT4R4A3p/XCj62RGdTF8uGEKbXsXDjhWvaM5O026ZOpbsuBoNnt4HR
9O3cRk4yOZZqaiFcnXvHaK27LCio6H8DvdJ34j+VrGhePpio/zMudEaD1uW/Cr9+
iVaDs0+vaGfXmSitQxuA/2Dd5Z8IXCch0bdM9WnpBcEx9+5aLxkeJCQhlIpS7e6d
4yjrb/JMmyQ5OBtu3kINr6Yoe2qS1KORw/Y5hFi2whOt8ck011KvhsZZD/82mJWH
QjiaK/sWYuUTSrbcucWlWsiB+0UCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSj/Lq3
kOoRv4lutObG/4Iqu+gs5DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MmZjMDE4YzgtZGI4Yi00YjA0LThmOTAtM2JhZjgyNmZjMTBiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBy4zgDAN
BgkqhkiG9w0BAQsFAAOCAQEAKp8P+y4hnRaXE7UVaiV73HRPwm4uu8bibmzDt29Q
1aTEBpjUFZNidKEqb531OW9yFHkzXACSoTOMa5t4kjPPt/9GeFnXgbpTD8vWn67h
JXERaxy3s/JG2gdI2rfcxJvktYJ0NrQDX/zA8pT9FS3w5n7KuwWsPbF/MGc1zMa4
tQ5PWWbV5yxYAKCQiAkPg2SnNtfxTWUgwD4aTS9r7f+nD90HzONJWxdcaeldiOem
ESgD6vmXkC/XLQRyKmOOQFrS4+CsokZZ1uUkf0OLPOnQ2wP7cze5N/kg4cqzHwKk
3jho6kS3lKoxjPuWRDB9zJTIInxdHlrOz5BeBeIdDFjqSQ==
-----END CERTIFICATE-----
Generated at Tue May 12 23:12:55 2026 by rpki-client