Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dd31163-2ad7-49f5-a24d-2ea4170bb05f.roa
File: 4dd31163-2ad7-49f5-a24d-2ea4170bb05f.roa (raw, json)
Hash identifier: hD40kfx9CvsM0dDP2ZzCwYL1L8/9gdwEKMxYgDxSWYg=
Subject key identifier: 6F:AE:2F:BB:D6:23:F1:43:B7:89:13:79:6D:60:DB:41:03:CE:4A:52
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 02CB8614595CE03A1855827C97D21834DF13D708
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dd31163-2ad7-49f5-a24d-2ea4170bb05f.roa
Signing time: Fri 08 May 2026 03:20:56 +0000
ROA not before: Fri 08 May 2026 03:20:56 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:cb:86:14:59:5c:e0:3a:18:55:82:7c:97:d2:18:34:df:13:d7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:20:56 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=1119953eec5adc553ef69f393fdecf1dfab637d1c5d05dbdf86fe7beb62deda0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:ee:46:c9:ba:fa:b5:be:92:51:e1:f7:f4:
64:98:e8:5e:b8:ee:a6:0c:67:ea:e2:36:da:c7:ae:
7a:55:02:dd:71:99:ce:44:42:fa:b4:ee:f7:14:a1:
22:b1:25:be:67:cd:46:0c:2c:78:29:fd:28:af:23:
37:dd:26:b0:6e:9c:be:37:30:00:3c:0c:1d:0f:ec:
11:3c:c8:31:d5:a1:24:74:a7:5f:b2:69:2d:1b:5b:
68:02:0e:77:b0:6c:f1:e9:e6:ed:b0:00:6a:74:a9:
bc:03:d3:6c:05:7a:ed:1d:75:f5:00:9a:4f:02:c3:
b8:fb:34:0e:34:c9:41:92:98:e7:50:48:e8:3b:ea:
ce:63:b5:5d:9b:f0:95:c0:c0:26:e8:a9:bd:9c:3e:
4c:b1:46:a6:dc:16:4c:95:fc:86:c6:1f:a2:c2:5f:
f4:a1:6c:b7:c8:df:6d:23:81:bd:6a:35:7e:19:b8:
8c:15:8e:f3:de:b8:a9:ca:80:be:6e:32:ce:a2:9f:
af:83:d7:ad:50:6d:51:a8:cf:51:51:07:67:19:77:
24:62:e8:f7:65:19:64:f8:e1:b2:38:d4:70:49:cc:
9d:84:46:c3:54:ea:3f:3f:f2:0c:ab:09:00:ff:46:
e5:8f:5e:f6:80:e6:ec:83:a3:11:b2:c9:fd:53:f2:
47:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AE:2F:BB:D6:23:F1:43:B7:89:13:79:6D:60:DB:41:03:CE:4A:52
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dd31163-2ad7-49f5-a24d-2ea4170bb05f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.240.0/20
Signature Algorithm: sha256WithRSAEncryption
13:b9:95:7a:57:33:92:1d:9c:da:4d:e6:f6:51:2f:28:19:af:
d2:ef:b2:0e:0b:e9:4a:bf:01:43:fc:62:b5:df:09:49:55:fa:
95:86:c0:68:a5:98:ca:c3:dd:96:93:9b:b5:a3:fb:d4:45:a3:
ec:1e:34:ac:22:e1:ab:74:2d:ad:b3:58:55:88:cb:38:06:39:
26:ce:9a:e2:77:df:16:66:94:ad:6e:49:f2:7e:c0:01:3f:7b:
e4:f1:30:db:84:05:77:20:c0:5d:b1:5d:b7:03:99:fa:ea:5c:
10:8e:14:11:53:8e:0f:14:93:f7:89:e3:ee:74:8a:9a:53:d8:
70:e1:72:84:1c:f0:d3:00:27:92:e2:3e:d2:44:d5:c8:20:08:
ca:2b:fd:f4:77:18:33:11:1e:b9:b4:37:fe:7d:06:22:83:1d:
06:28:f9:c7:1e:7c:01:d9:54:5f:4b:66:5c:1e:93:8f:17:c4:
3c:51:56:98:22:46:af:03:5f:b8:dc:90:ca:81:c1:c3:1a:2a:
b0:b9:8f:8c:46:48:36:e7:72:1a:29:d0:72:c4:04:f0:27:61:
7c:9b:37:8f:23:32:24:40:b3:b0:e0:65:20:02:4f:05:3c:03:
df:e4:e8:05:56:68:d9:ca:f5:3d:e0:1b:54:76:4b:85:b9:18:
33:2f:27:06
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUAsuGFFlc4DoYVYJ8l9IYNN8T1wgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MDgwMzIwNTZaFw0yNjA4MDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDExMTk5NTNlZWM1YWRjNTUzZWY2OWYzOTNmZGVjZjFkZmFiNjM3ZDFjNWQw
NWRiZGY4NmZlN2JlYjYyZGVkYTAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANSh7kbJuvq1vpJR4ff0ZJjoXrjupgxn6uI22seuelUC3XGZzkRC+rTu9xSh
IrElvmfNRgwseCn9KK8jN90msG6cvjcwADwMHQ/sETzIMdWhJHSnX7JpLRtbaAIO
d7Bs8enm7bAAanSpvAPTbAV67R119QCaTwLDuPs0DjTJQZKY51BI6DvqzmO1XZvw
lcDAJuipvZw+TLFGptwWTJX8hsYfosJf9KFst8jfbSOBvWo1fhm4jBWO8964qcqA
vm4yzqKfr4PXrVBtUajPUVEHZxl3JGLo92UZZPjhsjjUcEnMnYRGw1TqPz/yDKsJ
AP9G5Y9e9oDm7IOjEbLJ/VPyR/ECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRvri+7
1iPxQ7eJE3ltYNtBA85KUjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGRkMzExNjMtMmFkNy00OWY1LWEyNGQtMmVhNDE3MGJiMDVmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC6J8DAN
BgkqhkiG9w0BAQsFAAOCAQEAE7mVelczkh2c2k3m9lEvKBmv0u+yDgvpSr8BQ/xi
td8JSVX6lYbAaKWYysPdlpObtaP71EWj7B40rCLhq3QtrbNYVYjLOAY5Js6a4nff
FmaUrW5J8n7AAT975PEw24QFdyDAXbFdtwOZ+upcEI4UEVOODxST94nj7nSKmlPY
cOFyhBzw0wAnkuI+0kTVyCAIyiv99HcYMxEeubQ3/n0GIoMdBij5xx58AdlUX0tm
XB6TjxfEPFFWmCJGrwNfuNyQyoHBwxoqsLmPjEZINudyGinQcsQE8CdhfJs3jyMy
JECzsOBlIAJPBTwD3+ToBVZo2cr1PeAbVHZLhbkYMy8nBg==
-----END CERTIFICATE-----
Generated at Tue May 12 23:28:03 2026 by rpki-client