Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
File: 8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa (raw, json)
Hash identifier: F7/4l6b5v9q6hcmny7t2+tiWQ7mzdXO+qGhnqz1Z3B0=
Subject key identifier: FD:0B:F9:DA:79:49:E8:56:86:02:2C:08:7E:52:0C:78:86:16:0A:E8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1F75474FC3E3255450A236B706E727966CE4D75A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
Signing time: Fri 08 May 2026 03:21:17 +0000
ROA not before: Fri 08 May 2026 03:21:17 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:75:47:4f:c3:e3:25:54:50:a2:36:b7:06:e7:27:96:6c:e4:d7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:21:17 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=b7d81fbd774007c660886fdb1812eb7a00a3d786e5e276b0669319bb4402330c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:50:c6:05:3a:f2:aa:c9:d8:8e:e8:f9:51:
42:a8:90:59:5d:1e:ab:01:47:2e:fd:7a:cc:c5:f5:
13:58:cd:24:13:e8:34:52:55:20:f7:1b:3b:82:8e:
c7:34:df:e0:b3:05:d5:64:65:39:a9:c9:4d:68:35:
56:1d:2d:d6:e2:4c:4e:69:51:56:59:ed:11:22:f8:
2c:e9:10:3a:80:fe:ab:02:90:1a:d1:9a:57:87:05:
c6:3b:79:f4:27:f8:ba:da:c4:b2:18:fa:60:63:f0:
7f:e6:66:67:46:d6:8b:bf:0b:ba:fb:28:26:5d:9a:
fd:14:dd:6b:48:8f:82:00:f7:28:4b:35:af:84:9a:
ee:37:46:eb:34:bd:f6:87:b1:93:f8:94:38:4f:c9:
16:b2:af:1a:a7:a8:1d:fa:cb:52:ce:a1:b0:33:82:
a2:57:23:54:a8:90:c7:0f:11:a3:44:62:a8:87:55:
d8:64:b3:93:33:a3:0c:f3:52:e8:d6:e5:e0:89:2b:
04:ab:0c:6e:23:82:76:04:44:0e:79:2e:0d:5b:d6:
b7:ec:9b:d2:93:79:ef:2f:a6:36:f6:58:04:b1:10:
db:1b:4f:c2:2c:b1:13:8d:72:ed:78:3a:e2:12:a5:
f1:9c:f2:75:f6:c3:12:ef:65:e6:2c:ff:9a:46:4c:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0B:F9:DA:79:49:E8:56:86:02:2C:08:7E:52:0C:78:86:16:0A:E8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.192.0/20
Signature Algorithm: sha256WithRSAEncryption
97:14:6b:55:34:42:b1:16:3c:a4:51:40:b6:23:0a:ae:4e:01:
33:d7:cd:f0:5b:8c:cb:7a:38:45:cc:90:59:50:3b:0a:50:cf:
85:3e:0c:96:d0:2a:af:16:16:38:0d:87:af:d8:52:a0:14:6a:
b4:8c:9e:6b:11:49:40:68:96:41:c5:29:c9:57:31:ca:72:7f:
e5:07:47:2a:d6:42:0d:66:bc:92:37:fb:57:ae:ba:f9:50:c9:
ce:f5:1f:2b:04:d0:84:94:aa:37:6f:12:95:f8:8b:6c:68:1a:
de:2e:c0:f1:13:02:14:24:9f:b3:b3:c1:e7:da:4f:2d:3f:cb:
78:75:a4:a2:03:d7:5c:fb:03:ed:a7:80:1a:30:f4:08:24:cc:
b9:6f:28:83:ef:7a:69:5e:72:df:d1:3f:b4:f1:18:11:c2:66:
29:8e:c6:fc:9d:cb:9b:8e:2c:57:18:8b:b1:b1:4d:c6:7f:e7:
06:75:ff:8e:2b:fd:ac:68:16:a3:bd:a8:43:43:a9:b0:47:e4:
15:2d:81:c2:68:31:e3:cd:9e:76:f7:8b:33:05:4a:99:1e:ae:
3b:39:22:d4:c2:a6:08:92:8c:92:d6:14:d4:c3:32:16:6c:92:
8b:3a:0f:16:22:0a:05:6d:2f:46:f9:28:fc:b0:1f:96:1c:46:
1c:40:c1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:40:34 2026 by rpki-client