Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa
File: 4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa (raw, json)
Hash identifier: eQUDM+bu/5/c+MNRMmkM45VpQAx5+EaFy9NwGIU40xk=
Subject key identifier: 51:66:6B:35:C9:23:0E:E1:6B:B5:40:B5:3D:C8:EB:2A:B0:08:18:2C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 161BD1E052E000842F8D4ECD9CD1BDF425B9B3B7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa
Signing time: Fri 08 May 2026 03:20:58 +0000
ROA not before: Fri 08 May 2026 03:20:58 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:1b:d1:e0:52:e0:00:84:2f:8d:4e:cd:9c:d1:bd:f4:25:b9:b3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:20:58 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=a377921846769ac387ff5e98dcc14e849fdf8f9da653e064b126b2fa3cf6da75, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:e9:f9:cf:20:d6:a7:5a:fd:ad:48:c4:8e:
1b:d7:b1:e0:e6:ae:cc:4f:ca:db:c5:67:f1:52:59:
d1:5f:90:66:46:d7:96:4f:3e:f4:46:e6:0d:c7:73:
08:c7:41:5d:16:f5:8e:d5:af:52:fb:6b:03:11:5b:
56:e5:91:3c:42:93:59:eb:d9:92:74:5e:06:ea:00:
48:f5:92:b2:a6:10:fc:43:95:e6:db:35:24:d4:eb:
5b:c3:d8:36:90:42:fd:c0:e0:60:1f:c6:6b:5a:1a:
7c:d4:1a:1f:de:23:12:87:37:42:b3:9f:d2:8c:48:
d3:4d:66:7a:25:3e:f8:f7:d4:6b:6d:29:38:9d:5f:
cb:75:1a:4c:6b:0d:81:15:48:21:80:ad:35:0d:cb:
dd:85:58:6c:be:b2:ee:43:98:4f:94:3d:86:99:31:
4e:a6:0a:97:33:f7:5f:65:8c:51:8e:f1:cf:47:a7:
d2:0c:a5:4a:2f:74:ad:22:3b:0c:45:02:b0:17:5e:
2a:00:3c:56:92:20:83:54:cc:e9:ff:bf:50:be:f5:
8b:f9:99:fa:27:cc:f7:c3:e1:0d:c1:32:67:c6:be:
f1:59:bd:4e:c6:15:26:68:b1:e4:54:31:87:6e:f1:
95:ea:4d:7a:0c:16:56:6b:27:77:ab:d0:f6:18:a9:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:66:6B:35:C9:23:0E:E1:6B:B5:40:B5:3D:C8:EB:2A:B0:08:18:2C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4956e507-63b7-4d7d-ac19-6e5c5d1dddd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.224.0/19
Signature Algorithm: sha256WithRSAEncryption
97:60:fa:0f:09:22:8d:94:aa:4f:be:35:c3:ad:86:14:b7:0e:
45:17:6f:d6:44:a7:c2:7e:9a:b4:13:c5:b4:5d:98:4b:12:08:
e8:3f:0e:df:07:e4:19:46:11:43:05:1a:c8:fe:80:c5:e5:dd:
a1:d5:09:cf:42:bb:13:65:fc:a1:84:f8:cb:86:f4:0e:3e:13:
d5:6b:34:9d:23:21:5e:0d:ad:6b:28:d6:a8:eb:31:a1:a2:fe:
b6:e6:f1:2a:05:f8:14:bb:e9:a8:49:fc:bb:ea:fb:f8:0d:bc:
f6:dc:e9:50:90:4d:9a:d6:ea:a7:ac:3b:2d:8d:03:09:00:d8:
d0:1e:7b:4b:f0:65:1e:0a:b6:21:23:e1:33:cf:41:3e:af:80:
c9:b8:7f:73:98:97:ec:61:d2:b9:d2:9c:ee:d4:0a:4a:7c:52:
7a:4c:07:1e:16:88:ee:b5:a3:49:45:7b:4c:34:c3:4a:f0:81:
e8:18:b4:60:79:80:eb:f3:6e:91:5c:98:95:03:ab:9c:2c:b2:
9b:74:db:bc:cc:b4:e7:0e:18:dd:4e:af:f3:3e:94:aa:82:f0:
50:cb:bd:68:43:a2:ca:38:0c:b3:77:b8:a3:41:51:96:64:b4:
57:3b:08:37:91:2c:45:9a:58:71:ce:60:46:f1:c0:5c:b5:9a:
a2:d1:f5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:08:44 2026 by rpki-client