Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be6b7cb0-3c55-4a65-b00a-45bc1310868b.roa
File: be6b7cb0-3c55-4a65-b00a-45bc1310868b.roa (raw, json)
Hash identifier: /1mCZqSN/jdduNitZ3vRiTCizuQPvSpXDfmPAI9t39A=
Subject key identifier: BB:6F:5E:0A:AE:FC:7A:19:86:8C:8F:B9:45:74:B2:69:69:FA:33:77
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76A0982D9C94BE62EC134A66522B37E3AFDC57CA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be6b7cb0-3c55-4a65-b00a-45bc1310868b.roa
Signing time: Fri 08 May 2026 03:20:56 +0000
ROA not before: Fri 08 May 2026 03:20:56 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a0:98:2d:9c:94:be:62:ec:13:4a:66:52:2b:37:e3:af:dc:57:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:20:56 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=e956a3a93c640c4d2d06672621f3aede580dee412d56e170be143e50aa319977, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:a6:be:c2:d0:d8:28:6b:e2:07:26:a5:44:
7d:40:b2:d0:c9:d9:ed:90:3f:7b:49:fa:a5:29:7c:
78:33:7a:24:3f:84:a9:a8:84:e1:29:ce:6c:8a:60:
7e:6b:c4:d6:77:a8:a9:e4:01:30:cd:68:0b:cc:74:
0f:1f:8e:44:25:41:8a:3d:b6:26:ce:f9:82:23:c7:
74:c7:c2:23:66:cc:7d:7e:8c:34:ad:ce:ea:e6:45:
76:d2:c4:09:46:89:ef:a8:95:6d:36:af:e4:3c:11:
79:78:23:40:63:0a:d8:9e:62:b0:75:b7:c4:a3:12:
80:3a:54:d3:ab:16:00:f9:ca:06:3c:92:1f:cb:b1:
b7:d1:5c:c0:8d:05:0e:83:5b:06:63:84:57:5d:4c:
8d:44:36:60:4e:65:ff:3b:1d:9c:8c:57:57:34:7d:
d8:c2:fd:fa:ad:94:07:e8:cc:0e:bc:cd:a6:1e:7b:
d2:5f:2a:23:79:1a:bf:a5:e1:ec:0a:04:b1:6b:3c:
b6:66:b9:e4:33:4c:00:c7:72:3b:c9:c0:b4:5f:22:
25:fb:a1:39:c9:61:f3:22:32:9c:b5:df:3a:59:21:
97:71:62:51:54:cf:d2:ee:ed:ff:a0:b3:45:04:b9:
7d:da:6d:06:0a:80:08:8e:ff:a3:1f:40:6d:7d:92:
25:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6F:5E:0A:AE:FC:7A:19:86:8C:8F:B9:45:74:B2:69:69:FA:33:77
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be6b7cb0-3c55-4a65-b00a-45bc1310868b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.96.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:81:7f:93:bd:94:37:ad:51:cb:2f:9c:d2:54:08:16:ec:d1:
73:f8:db:70:05:91:cb:48:bc:4e:f7:98:af:0c:02:75:21:1f:
e1:a8:bf:a1:d4:b4:09:fd:9b:d6:7a:2d:a6:58:b2:9c:d5:f9:
5c:6b:d9:3b:93:82:2f:e1:f7:b1:85:9a:2d:f6:bb:7b:e3:15:
df:e0:9f:45:7a:1f:fb:49:83:72:8a:12:de:22:e3:0a:79:57:
06:b4:82:fc:ca:80:9b:74:6d:02:7b:0e:84:c4:c4:8d:57:a3:
d1:aa:25:d5:74:88:ac:f2:0a:5b:25:97:f1:c3:3c:da:4d:15:
0e:3a:6b:84:1b:a6:8e:c2:06:da:d3:eb:19:8e:84:01:01:6e:
50:99:23:66:24:ff:3e:d8:93:4c:f5:b1:58:2e:dc:4c:4a:8e:
53:c4:55:3a:89:75:d0:f2:5d:f5:1b:e8:bf:0a:60:af:d4:00:
79:c3:91:9f:fb:31:8c:f8:e9:bf:f5:96:3a:8c:d8:3e:69:a2:
91:ed:63:f1:1c:77:8b:0d:b4:79:77:32:1c:5f:b0:6d:c9:f9:
dd:e5:85:58:28:b1:46:b8:31:be:aa:db:05:5f:ea:35:de:85:
ae:19:a1:16:92:a6:a3:70:1c:eb:42:5a:70:b9:de:d8:69:f1:
71:9f:79:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:36:17 2026 by rpki-client