Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
File: b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa (raw, json)
Hash identifier: lDXBwd+hPTqVIk52pedkhbxXghwNk6tAKNnkV/zOki8=
Subject key identifier: 95:03:DD:0F:80:B9:41:32:C3:44:66:50:35:B7:45:15:76:E6:17:80
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 12CBF97F995F425291B5A40E61395CDDD505296A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
Signing time: Fri 08 May 2026 03:30:29 +0000
ROA not before: Fri 08 May 2026 03:30:29 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:cb:f9:7f:99:5f:42:52:91:b5:a4:0e:61:39:5c:dd:d5:05:29:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:30:29 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=45bfa4e19eb3b2e94c51d2c9b8e5134d4bbb1d324d4f2ba5ec4007b2ebd810c8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:e1:89:08:d3:d5:a4:22:0a:18:8a:ad:57:
eb:0a:bc:2b:35:f0:41:60:0d:0b:ed:e4:df:e6:dc:
67:6f:d1:9e:c4:9f:3a:7b:ba:1d:70:99:fb:d1:29:
f4:7d:83:67:76:a4:90:ca:0f:87:44:e6:f0:65:6c:
7d:e3:e1:06:66:cb:ac:be:3d:27:e0:0e:d5:69:3b:
b2:9d:5c:d4:c0:2c:9b:95:c6:ad:98:8b:cd:d7:e1:
c2:95:74:4c:d1:7b:a6:21:a7:79:28:8d:a6:6c:4c:
fb:39:0b:7c:7a:d6:62:97:1d:4b:3c:f7:77:40:d2:
e9:35:b5:76:28:0b:53:b0:20:f9:6c:90:03:55:5b:
e9:eb:be:44:a4:a4:fc:36:e3:77:62:65:d3:11:80:
9b:44:01:c6:0a:a3:44:0d:57:a7:fd:97:3e:2a:8c:
18:33:d5:8c:4a:6d:94:0e:02:4d:9b:c8:20:2f:cb:
c7:e9:83:01:82:4a:4f:4f:26:f1:87:a0:f1:40:0d:
f1:45:1c:08:02:3f:5e:98:8b:ed:6c:5a:c8:6f:42:
03:1b:fe:56:6d:cb:22:a2:ce:0a:d5:e8:e8:06:a5:
a9:2c:ce:ab:09:53:69:ff:ac:d3:ad:3c:4e:cc:59:
ac:33:a6:fc:c5:7e:e9:17:10:d3:3c:66:5b:28:72:
29:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:03:DD:0F:80:B9:41:32:C3:44:66:50:35:B7:45:15:76:E6:17:80
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b51c4d29-13a7-4610-ab02-6dce63bec7e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.222.0/24
Signature Algorithm: sha256WithRSAEncryption
76:35:06:99:73:fb:ce:2b:8e:e2:f7:91:f3:d6:21:71:8b:14:
21:b1:fe:c1:5c:e3:b6:51:7c:39:af:48:52:ad:d4:d7:07:e2:
7e:06:d1:a3:04:b7:db:a5:92:93:dc:19:73:49:94:d1:66:60:
65:34:77:cc:e7:77:76:38:67:cb:76:9d:26:91:8e:3f:9c:af:
28:67:56:00:b9:13:2d:18:82:ff:8f:e9:78:a7:bf:7b:be:7d:
96:36:25:7e:08:be:29:0c:80:82:64:07:ed:46:0f:86:12:ae:
6b:31:ff:4c:89:e4:8f:05:56:11:e7:3a:58:6b:82:ab:06:d2:
db:85:cd:57:67:d9:c9:86:c6:85:48:8d:31:38:63:da:1a:b5:
4f:dd:d5:9a:68:fc:28:03:19:ae:fd:ca:12:c2:26:8a:24:b8:
c0:6c:d1:01:11:8c:62:af:a6:d4:43:7d:d6:a6:cc:57:96:53:
ad:15:8d:ed:25:14:57:ab:dc:32:b0:ca:d8:32:31:96:81:c4:
4b:2b:68:6a:47:91:30:34:12:50:ed:be:ed:6d:8d:b7:c7:6f:
1f:62:8d:91:9e:0b:da:e0:40:ec:b7:6b:b5:15:e1:38:98:1a:
51:d8:39:82:47:f7:ff:ad:05:b2:e2:8e:fb:73:2d:b5:26:aa:
08:31:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:25:57 2026 by rpki-client