Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82037871-73f4-40ba-be5d-495a41d85184.roa
File: 82037871-73f4-40ba-be5d-495a41d85184.roa (raw, json)
Hash identifier: 3hqw7DGHZk74T2qxut4kTsAgjBtklKN6hjpQatkkHXk=
Subject key identifier: 60:F1:0D:55:E1:E2:E7:B5:14:F4:19:3D:53:5B:15:FB:C7:1D:F7:AE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0B5B36C2E6BD2CAED5E4CB557B6F4B651DF390E3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82037871-73f4-40ba-be5d-495a41d85184.roa
Signing time: Thu 23 Jul 2026 15:20:26 +0000
ROA not before: Thu 23 Jul 2026 15:20:26 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 7224
IP address blocks: 46.51.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:5b:36:c2:e6:bd:2c:ae:d5:e4:cb:55:7b:6f:4b:65:1d:f3:90:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 23 15:20:26 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=962c2ad457629eb4fa1a92b7dbe9d6214c49c543b1eb0ae5eda95dc6008a8fa2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:de:26:7e:ce:b1:81:3a:68:9b:43:d4:26:60:
21:5c:3f:ef:46:9b:ab:cf:e2:9a:b3:a9:d3:57:42:
5b:f9:ca:c3:cf:70:b0:e6:e0:8c:eb:28:57:2a:58:
ec:6f:7a:38:19:4b:37:5a:f4:14:46:31:ce:53:18:
9b:4b:9d:f7:88:c6:08:68:56:42:0a:4b:bd:37:a9:
40:d5:3a:d2:52:4d:b1:69:9c:8a:b1:76:a1:6e:0f:
ce:f7:41:e9:33:2d:de:cc:bd:0a:08:31:b8:48:9c:
f4:43:50:53:4b:99:ef:4b:8c:ec:ad:4d:4e:dc:f8:
cf:92:b4:d8:11:57:de:e0:18:86:1c:a4:87:3c:18:
1b:9e:e4:6e:1d:ad:47:6a:08:ff:ed:0c:4c:88:07:
75:24:0e:7d:85:a4:e3:bc:7a:0f:35:00:bc:14:ba:
6f:2a:d0:a3:c5:2e:65:86:27:3c:a6:98:2b:17:c7:
9d:b4:1b:b8:90:28:51:5b:d5:f8:c5:06:30:ad:91:
d2:f5:eb:6e:16:7a:e4:c6:47:b1:a2:5e:33:43:66:
e1:51:ff:e3:be:e9:fa:d7:bb:94:1e:f7:3c:c8:5c:
5b:86:00:97:16:4d:79:7e:91:10:14:e9:a1:5e:f0:
92:a9:96:a6:bb:aa:33:c6:a5:65:b6:ce:77:70:42:
6a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F1:0D:55:E1:E2:E7:B5:14:F4:19:3D:53:5B:15:FB:C7:1D:F7:AE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82037871-73f4-40ba-be5d-495a41d85184.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.212.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:bb:93:4a:62:0f:d8:5c:78:61:ce:85:e4:7f:b4:81:5b:98:
8d:3e:b4:82:1d:a3:f0:a8:7c:8d:af:0d:79:a2:d5:71:4d:93:
69:cf:b6:0c:9a:97:08:3a:f6:33:62:a2:31:1d:99:1b:4c:16:
d1:43:d1:55:fb:db:eb:37:90:3a:85:9e:0b:dd:24:6b:47:84:
4e:2e:40:d6:63:48:ed:0e:84:d0:9a:cb:1f:94:25:e9:2c:28:
2a:40:c4:a3:8c:4d:3c:b9:e6:86:a4:c9:1d:18:01:ca:4a:e1:
ca:87:65:30:ff:be:86:7f:33:ed:10:36:36:43:52:81:49:f3:
c8:15:a9:f0:70:8e:5f:26:6f:ca:9d:e9:ac:00:05:31:32:8e:
61:e7:80:27:cf:25:4a:a9:f0:e5:c9:c3:4b:3f:6a:f0:9d:47:
09:5a:a7:a3:48:e4:f4:51:08:f1:90:dd:a1:00:7b:1e:ba:3b:
32:da:d3:e4:75:51:02:8a:94:d7:59:c8:c5:4c:86:b7:01:3a:
bb:53:69:4a:25:9d:04:f0:2a:f8:79:60:b2:b4:e9:04:43:68:
33:0a:5b:30:24:ce:27:91:de:4d:eb:7a:d4:29:52:59:8f:98:
a6:11:4f:af:ac:dd:de:63:3f:60:d0:6d:fe:27:6f:88:80:5d:
10:97:d6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:12:12 2026 by rpki-client