Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb73d62f-513c-4673-8547-902e7fa2148b.roa
File: bb73d62f-513c-4673-8547-902e7fa2148b.roa (raw, json)
Hash identifier: b6Jnb2wvUFa5GGrUyfyJiZjuPE5AX8N5Oad859+mPKg=
Subject key identifier: 3B:0E:C3:2F:3B:CD:88:A3:14:0B:64:BE:12:89:6E:2F:1A:ED:B3:59
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0771F5DC88E05D608251364B2A4993FB4C76D976
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb73d62f-513c-4673-8547-902e7fa2148b.roa
Signing time: Fri 08 May 2026 03:30:31 +0000
ROA not before: Fri 08 May 2026 03:30:31 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:71:f5:dc:88:e0:5d:60:82:51:36:4b:2a:49:93:fb:4c:76:d9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:30:31 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=8a1e05f0b81faba7ee9f1f55685273e1fc8a2b70fda7df05c5a3706be8578c74, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:b8:9a:28:dc:ee:db:79:39:ec:e1:e9:c2:
5e:e4:0b:e1:66:79:8e:af:c7:86:84:e6:37:e3:ff:
de:c3:cf:44:f2:64:d6:a9:f7:17:1b:22:49:e1:23:
3b:83:fd:82:87:c6:fc:fa:7e:8c:75:08:5d:5f:09:
13:fd:af:85:96:aa:f9:63:69:1f:9d:77:6c:e8:fd:
0f:73:7b:8b:fa:3d:37:93:26:c5:28:45:d8:9c:93:
67:22:20:26:f2:c2:2a:1a:5c:8d:4f:8d:97:6a:ed:
eb:ab:a5:08:a5:48:a1:7d:65:18:e0:23:b2:7f:66:
5f:52:8e:63:4f:7a:f6:0e:1f:68:e0:73:9a:73:60:
dd:5e:8d:ac:7b:8a:df:1e:08:ee:86:e8:83:72:aa:
67:7e:7f:f7:18:77:9e:af:0d:bd:6f:af:f1:71:81:
86:16:aa:83:3e:69:c1:fe:96:04:38:a4:a9:51:2f:
b9:f9:f0:4e:6f:ef:bf:b9:eb:7c:b1:6a:e9:81:59:
a9:0a:47:a1:86:56:83:5e:44:e7:f0:a2:51:d0:8b:
72:28:b5:32:a9:68:d9:74:79:54:6f:15:c5:a4:2c:
16:ee:77:5a:85:78:87:ec:3a:6c:3c:40:3b:2e:2b:
68:d1:0b:ec:7e:44:30:39:1e:fa:34:c7:15:60:eb:
b6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0E:C3:2F:3B:CD:88:A3:14:0B:64:BE:12:89:6E:2F:1A:ED:B3:59
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb73d62f-513c-4673-8547-902e7fa2148b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.0.0/17
Signature Algorithm: sha256WithRSAEncryption
7a:52:14:47:3d:8b:63:0f:eb:e7:d6:f2:2a:d6:e8:c4:ec:96:
ee:a1:37:30:5a:50:3a:60:62:bb:c9:1a:7c:f8:2d:26:47:bd:
5d:af:96:0e:55:78:a2:53:0c:bb:48:90:7f:8b:97:11:14:75:
f4:28:1d:95:95:a3:a1:c9:0b:60:30:41:15:72:3e:f2:41:31:
3a:23:e4:61:3d:fe:df:b8:88:09:dc:4d:b4:61:80:28:cd:e6:
79:b7:cd:b7:9a:a7:15:3d:29:6b:b2:0c:9c:e6:f4:5f:df:d9:
60:ff:66:cf:ec:3c:c2:80:0f:a9:1d:ea:a5:07:d1:c4:e1:82:
c9:83:14:64:0f:00:35:7d:54:8e:31:0e:4a:16:16:7e:4e:c8:
0c:35:5f:98:cd:78:c3:a6:8e:ab:77:63:55:41:5f:c6:e8:67:
40:82:df:1f:98:e8:bf:8d:99:f0:5b:ba:80:32:33:dc:53:56:
b1:85:3e:f6:18:2b:e3:7f:48:b5:13:4a:26:2c:92:4f:4b:31:
3f:d3:29:75:c8:f3:0c:77:c5:08:38:13:48:eb:95:f9:35:b6:
40:e2:aa:c6:d9:50:08:f8:0e:2b:a4:6f:24:fa:57:55:ca:a4:
1c:f9:93:a3:f5:d1:9f:db:f9:cb:b0:5b:8d:36:01:71:90:3d:
bf:ee:a7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:14:19 2026 by rpki-client